Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/LUI5sg9tHVStOZcvZFrVXPHkkDo.roa
File: LUI5sg9tHVStOZcvZFrVXPHkkDo.roa (raw, json)
Hash identifier: Pdy9SUe68Dv9/7QmZvoqhF0cEvCZSUNqVFnwysghaaI=
Subject key identifier: 2D:42:39:B2:0F:6D:1D:54:AD:39:97:2F:64:5A:D5:5C:F1:E4:90:3A
Certificate issuer: /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial: 178723C4
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/LUI5sg9tHVStOZcvZFrVXPHkkDo.roa
Signing time: Sat 01 Jan 2022 08:56:17 +0000
ROA not before: Sat 01 Jan 2022 08:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201259
IP address blocks: 185.60.32.0/24 maxlen: 24
185.60.32.0/22 maxlen: 22
185.60.33.0/24 maxlen: 24
185.60.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394732484 (0x178723c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Validity
Not Before: Jan 1 08:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d4239b20f6d1d54ad39972f645ad55cf1e4903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:0c:41:ea:3c:76:51:b5:fd:0e:11:6e:f2:
a9:ea:49:de:fb:4e:8d:02:82:23:3f:27:37:09:f0:
c1:68:d0:e5:4c:89:a9:72:d8:d4:a5:96:99:5e:67:
be:e7:fc:4f:91:86:59:3c:b4:09:39:23:ce:b1:19:
da:4e:e3:39:1d:08:7b:bd:bf:1f:43:0f:e6:56:a8:
29:b1:08:67:bb:57:0e:2e:77:03:16:66:cc:22:6d:
0e:f8:00:64:7c:10:d5:72:19:1b:60:62:f7:1e:ee:
0b:4a:32:b4:61:31:7b:6c:c7:ca:9e:56:b3:82:5f:
b4:0b:8a:83:c7:db:83:f3:39:98:01:36:16:8d:70:
64:55:98:6f:8a:a2:9c:20:61:96:5f:e9:bf:ed:56:
82:f3:7f:d9:12:1d:75:7d:1d:4b:d5:e4:d4:bc:29:
69:86:df:82:af:ef:1b:9f:e1:9f:71:53:4b:93:60:
f2:32:39:1c:7c:2a:bd:42:a0:02:f4:6b:8c:b6:0d:
6d:63:29:3a:6b:8b:b5:09:f6:0e:ba:67:e1:24:13:
06:13:3c:53:b2:ad:93:0a:81:9f:bb:c6:3f:bb:43:
5e:2e:50:ff:71:9b:88:e1:e4:b3:70:64:1c:6b:04:
b5:86:2d:86:73:7d:45:a6:3d:ea:ea:10:70:e0:26:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:42:39:B2:0F:6D:1D:54:AD:39:97:2F:64:5A:D5:5C:F1:E4:90:3A
X509v3 Authority Key Identifier:
keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/LUI5sg9tHVStOZcvZFrVXPHkkDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:06:d8:53:ef:aa:25:0a:42:4f:c0:81:52:1f:29:4b:e9:8d:
26:36:1f:89:a2:af:9c:35:82:79:50:1a:31:19:b2:4f:86:90:
9c:77:34:1a:c5:6b:a9:c5:0a:e2:ed:73:63:98:75:65:1a:a1:
fb:bc:45:ad:3c:bf:84:92:59:af:10:f5:e8:ee:60:41:77:d8:
26:06:3b:85:45:03:86:aa:66:2e:06:98:53:93:c8:b9:ad:8f:
d0:47:dc:b0:7e:4d:3e:0d:9c:ed:2d:9d:b2:08:9f:ed:23:80:
a5:7f:65:e7:e3:15:80:27:a9:1e:c1:bc:32:85:f6:a3:7a:ea:
b2:39:4d:8d:08:11:ae:62:24:4d:6b:e1:b5:09:92:42:ff:96:
30:65:69:a7:05:01:5d:c8:12:a6:e8:a1:49:55:ff:3f:43:80:
02:74:12:a3:37:33:89:73:cc:c2:9a:90:0e:a9:08:9e:b1:28:
2d:8d:7e:29:b6:63:90:fd:52:4a:bd:dd:10:88:80:7c:61:9c:
ee:2a:1a:3f:c4:6a:5e:2e:fd:7d:a9:08:7e:e6:db:cf:c7:37:
01:74:83:4c:c0:ff:00:4a:52:4f:17:d8:c5:0a:5b:da:2d:61:
61:33:25:55:85:71:d7:93:69:f0:6d:77:16:a5:65:18:cc:27:
33:04:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:34:05 2025 by rpki-client