Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LanCr2k_Z0ldqQJnAv3zAj5PfUU.roa
File: LanCr2k_Z0ldqQJnAv3zAj5PfUU.roa (raw, json)
Hash identifier: 3eO+w+lz5VXnlUkFAtQJg4/TKTxdvkAtyMAzxt+yoPc=
Subject key identifier: 2D:A9:C2:AF:69:3F:67:49:5D:A9:02:67:02:FD:F3:02:3E:4F:7D:45
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01821FF801CFA834C87AA17EA3D8DD53B73B
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LanCr2k_Z0ldqQJnAv3zAj5PfUU.roa
Signing time: Thu 21 Jul 2022 08:55:23 +0000
ROA not before: Thu 21 Jul 2022 08:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41789
IP address blocks: 31.129.17.0/24 maxlen: 24
31.129.16.0/24 maxlen: 24
31.129.18.0/24 maxlen: 24
31.129.22.0/24 maxlen: 24
31.129.21.0/24 maxlen: 24
31.129.20.0/24 maxlen: 24
31.129.19.0/24 maxlen: 24
31.129.24.0/24 maxlen: 24
31.129.23.0/24 maxlen: 24
31.129.29.0/24 maxlen: 24
31.129.28.0/24 maxlen: 24
31.129.27.0/24 maxlen: 24
31.129.26.0/24 maxlen: 24
31.129.31.0/24 maxlen: 24
31.129.25.0/24 maxlen: 24
31.129.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:f8:01:cf:a8:34:c8:7a:a1:7e:a3:d8:dd:53:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 21 08:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2da9c2af693f67495da9026702fdf3023e4f7d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:e9:40:17:77:bd:26:b3:81:f5:36:a2:4a:
8b:9b:42:55:5a:3c:ad:1a:30:d3:8b:55:2f:bb:cb:
da:83:c5:b7:90:70:f5:e3:d9:1a:f9:e4:3f:d4:9a:
33:c7:57:6c:ac:8e:6f:24:76:bd:37:42:65:ca:f7:
fb:a8:60:21:b8:e0:b4:59:b3:91:59:77:aa:70:0b:
a1:ed:19:a8:1d:11:7f:a8:f0:f9:96:07:c1:73:66:
57:39:d0:ea:5c:0b:96:7e:2c:51:f4:33:df:6f:dd:
c2:20:11:29:8a:74:ac:50:19:78:f0:37:68:0a:3e:
57:ac:43:1d:13:17:d0:f7:6c:5a:f8:11:cd:f8:a6:
ad:87:f2:33:c1:e1:b5:cd:1f:ab:00:d0:4d:30:27:
2b:fd:c3:da:51:78:b9:a0:5c:22:61:4b:98:de:76:
57:fe:cf:c2:42:8d:97:8d:a8:04:79:ce:a6:62:f3:
52:92:22:1e:95:54:41:65:76:3d:05:d6:0d:c9:ea:
2f:61:87:d5:68:4f:4c:15:33:c8:9e:af:09:ad:91:
4e:3d:c4:04:ee:81:01:5e:39:6a:0d:0a:cf:d7:74:
17:f9:75:f8:46:01:a2:cc:aa:26:ab:06:9f:20:77:
d8:b4:08:5e:f9:f8:a8:d7:fb:c8:3a:22:a7:41:16:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A9:C2:AF:69:3F:67:49:5D:A9:02:67:02:FD:F3:02:3E:4F:7D:45
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LanCr2k_Z0ldqQJnAv3zAj5PfUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.0.0-31.129.29.255
31.129.31.0/24
Signature Algorithm: sha256WithRSAEncryption
31:37:6a:fb:f5:1a:9a:3a:71:a5:5f:13:87:bd:fd:63:c3:15:
14:56:28:d0:dc:17:f6:6c:96:a8:0a:9b:c5:e1:33:d0:c9:49:
19:e4:41:95:88:d7:bc:c3:35:93:ad:cd:62:16:01:31:db:61:
a1:8f:31:1c:6b:1a:bb:05:1c:d3:d0:c9:12:c0:06:32:26:75:
bf:20:a6:ab:a0:52:bf:7f:04:23:9c:0e:a3:17:9b:f2:cd:66:
a8:6a:ec:9d:d2:96:ae:7a:fc:84:6e:71:83:6d:58:c7:3d:ea:
38:21:8f:75:d3:26:fb:ff:35:a2:c2:b3:9f:3f:b4:cf:8b:37:
cc:66:a3:42:8f:89:c6:6b:17:8b:9d:98:62:c0:a8:c4:d6:82:
3a:fa:34:cc:40:df:a4:29:cb:0c:50:9f:48:13:3a:b3:cf:a2:
6d:af:e8:57:8b:f4:e2:27:fc:48:82:a7:c7:5c:21:ae:2a:1a:
b2:4d:0e:27:1b:8e:9d:2b:6d:3b:de:2f:5e:3b:0f:38:e9:20:
60:25:ef:d9:38:18:61:9b:04:8d:e2:ad:8e:0d:c3:ee:14:a6:
4b:41:6f:75:b3:19:8c:f0:12:11:0e:ea:a3:23:2b:04:f6:75:
2d:95:20:99:b2:d4:ca:54:a5:d4:ea:6a:0d:2d:66:8c:bc:fc:
ab:00:34:cb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYIf+AHPqDTIeqF+o9jdU7c7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjIwNzIxMDg1NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGE5YzJhZjY5M2Y2NzQ5NWRhOTAyNjcwMmZkZjMwMjNlNGY3ZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmnpQBd3vSazgfU2okqLm0JVWjyt
GjDTi1Uvu8vag8W3kHD149ka+eQ/1Jozx1dsrI5vJHa9N0Jlyvf7qGAhuOC0WbOR
WXeqcAuh7RmoHRF/qPD5lgfBc2ZXOdDqXAuWfixR9DPfb93CIBEpinSsUBl48Ddo
Cj5XrEMdExfQ92xa+BHN+Kath/IzweG1zR+rANBNMCcr/cPaUXi5oFwiYUuY3nZX
/s/CQo2XjagEec6mYvNSkiIelVRBZXY9BdYNyeovYYfVaE9MFTPInq8JrZFOPcQE
7oEBXjlqDQrP13QX+XX4RgGizKomqwafIHfYtAhe+fio1/vIOiKnQRb2GQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFC2pwq9pP2dJXakCZwL98wI+T31FMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvTGFuQ3Iya19aMGxkcVFKbkF2M3pBajVQZlVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwAfgQME
AR+BHAMEAB+BHzANBgkqhkiG9w0BAQsFAAOCAQEAMTdq+/UamjpxpV8Th739Y8MV
FFYo0NwX9myWqAqbxeEz0MlJGeRBlYjXvMM1k63NYhYBMdthoY8xHGsauwUc09DJ
EsAGMiZ1vyCmq6BSv38EI5wOoxeb8s1mqGrsndKWrnr8hG5xg21Yxz3qOCGPddMm
+/81osKznz+0z4s3zGajQo+JxmsXi52YYsCoxNaCOvo0zEDfpCnLDFCfSBM6s8+i
ba/oV4v04if8SIKnx1whrioask0OJxuOnSttO94vXjsPOOkgYCXv2TgYYZsEjeKt
jg3D7hSmS0FvdbMZjPASEQ7qoyMrBPZ1LZUgmbLUylSl1OpqDS1mjLz8qwA0yw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org