Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/lDSnLJrID98XgSyZ0QgHsG1nGLo.roa
File: lDSnLJrID98XgSyZ0QgHsG1nGLo.roa (raw, json)
Hash identifier: uTFCsxnmh3bXZaJQn27SGwGh//1of3NjjhP098NZIWo=
Subject key identifier: 94:34:A7:2C:9A:C8:0F:DF:17:81:2C:99:D1:08:07:B0:6D:67:18:BA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 03AF6305
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/lDSnLJrID98XgSyZ0QgHsG1nGLo.roa
Signing time: Sat 01 Jan 2022 07:53:41 +0000
ROA not before: Sat 01 Jan 2022 07:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202513
IP address blocks: 185.248.78.0/23 maxlen: 23
185.248.78.0/24 maxlen: 24
185.248.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61825797 (0x3af6305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jan 1 07:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9434a72c9ac80fdf17812c99d10807b06d6718ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:f6:12:54:6e:88:d8:36:2b:39:69:dd:6b:
71:fe:37:d5:46:2a:17:a4:dd:ce:54:7b:c0:b6:31:
60:d8:6e:00:5c:65:46:e4:ae:96:96:05:38:bb:dc:
8f:f6:d1:97:95:01:a9:93:21:ce:fa:57:88:86:8b:
0a:ab:9b:f6:b5:49:63:0e:ac:9a:07:54:c8:0a:02:
53:2b:45:ca:31:5e:54:cd:e7:3d:11:56:07:2a:62:
db:83:e7:5e:6b:d8:e9:96:34:83:40:bb:fd:54:65:
de:1f:16:5e:bd:13:e3:8f:ad:93:7d:6c:14:df:51:
47:b4:1b:a4:17:d9:b0:a1:17:67:0c:92:7e:7e:b1:
21:0f:6c:61:2b:b5:f4:6f:6b:8d:c6:a2:97:22:bc:
80:18:bf:c2:2a:ff:18:57:b0:fe:24:29:fe:f1:3d:
a0:e7:2a:55:48:c4:5a:85:f0:39:29:17:d3:a3:f5:
ae:f6:50:cd:f6:56:72:be:ca:2d:00:54:50:ad:4c:
8e:d7:d1:30:18:10:45:15:36:c8:4d:e1:81:64:a4:
51:52:1f:1c:75:26:96:8c:05:d4:6d:17:63:8a:a7:
6e:b9:0c:14:fa:12:07:b3:7e:0f:ed:bd:1e:de:7c:
f2:b6:dd:d5:d3:5b:c5:91:13:cc:eb:f1:24:3a:73:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:A7:2C:9A:C8:0F:DF:17:81:2C:99:D1:08:07:B0:6D:67:18:BA
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/lDSnLJrID98XgSyZ0QgHsG1nGLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.78.0/23
Signature Algorithm: sha256WithRSAEncryption
32:92:a7:3c:52:94:0c:55:8a:ad:29:a6:8c:81:61:9a:29:f8:
b2:db:52:77:a2:ca:4a:d1:88:8f:40:00:fe:d5:38:ca:a6:32:
b0:64:97:f7:8d:44:c9:a8:11:9b:1d:b4:ba:07:5a:e5:38:56:
b7:6b:b7:7f:24:6f:41:77:97:a5:60:62:6b:42:1c:85:0b:b0:
f3:84:f8:2e:52:a5:b5:49:a1:2e:66:4d:58:2b:70:d7:55:76:
94:b3:32:b5:c9:3a:31:31:03:07:5a:7f:c4:70:a3:c7:da:67:
71:09:cc:05:52:54:03:27:11:e9:26:62:05:1c:f1:23:67:3e:
e0:98:32:0c:c9:fe:c8:53:a5:30:04:05:ac:10:75:e5:d3:d6:
e5:1b:d5:d7:a4:5c:46:68:15:43:8a:25:77:e3:d1:46:be:da:
a6:f6:c6:f8:5c:75:a8:e4:85:d7:a1:3b:f1:29:e4:9b:83:1d:
b7:c5:68:31:d9:a9:00:5e:ed:00:cc:dd:70:36:87:6d:a2:8b:
d5:52:59:19:60:48:ab:1e:35:3f:8a:41:62:01:7d:8d:d8:ec:
3f:41:dc:b1:46:92:98:26:cb:ab:74:05:9e:d1:62:29:d4:63:
91:35:a4:a7:e2:f2:4e:64:ce:bf:eb:e7:8d:84:b6:b4:99:16:
69:d9:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:01 2023 by rpki-client on console.sobornost.net