Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/LnstekrcovWhCYg2jk8bapoy6rs.roa
File: LnstekrcovWhCYg2jk8bapoy6rs.roa (raw, json)
Hash identifier: FSbseJKx8qTNt0pLlPeftX6ajf9PD6yeainbddqKgxw=
Subject key identifier: 2E:7B:2D:7A:4A:DC:A2:F5:A1:09:88:36:8E:4F:1B:6A:9A:32:EA:BB
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 14312E68
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/LnstekrcovWhCYg2jk8bapoy6rs.roa
Signing time: Thu 09 Jun 2022 15:40:03 +0000
ROA not before: Thu 09 Jun 2022 15:40:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34444
IP address blocks: 213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338767464 (0x14312e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jun 9 15:40:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e7b2d7a4adca2f5a10988368e4f1b6a9a32eabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:04:ac:20:df:b5:e0:5d:fa:c7:e9:6d:77:
4b:1d:44:0f:61:d5:9c:fe:51:bb:0f:64:2f:78:51:
a0:6a:99:af:93:83:72:4d:2a:96:4f:6a:42:00:78:
93:60:63:c8:fa:ef:4c:5d:51:2f:e0:57:4b:93:98:
d5:d0:60:79:79:99:a1:06:58:a3:95:8a:9e:c1:05:
73:75:d1:88:2c:05:6e:50:81:67:62:f3:87:42:da:
43:bb:db:66:39:78:51:e4:51:76:4d:6b:92:03:16:
ba:3c:3c:cc:02:98:a3:80:69:19:02:75:d5:0c:ed:
c5:ac:da:ed:40:2c:58:e8:66:e7:1f:ba:01:bd:ef:
d8:3b:96:e0:bb:4a:51:01:f6:da:13:95:d4:c4:7e:
d5:6f:7c:ab:47:c0:d6:d2:48:ad:3d:00:ed:d5:cc:
b0:93:c6:70:50:0f:2e:7f:80:63:35:20:81:31:40:
8d:4c:58:5b:e9:32:89:54:e1:1f:df:bf:cf:38:24:
8b:6a:3c:eb:50:92:22:d0:80:db:62:c2:25:b5:ea:
ca:5d:2e:b9:86:5c:ab:1c:1d:02:ff:4b:d4:e7:68:
eb:cc:40:2e:fa:70:37:76:a8:ac:f8:f7:e2:75:39:
4f:13:96:37:13:94:56:0f:60:3f:14:55:2a:40:75:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:2D:7A:4A:DC:A2:F5:A1:09:88:36:8E:4F:1B:6A:9A:32:EA:BB
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/LnstekrcovWhCYg2jk8bapoy6rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.180.225.0-213.180.226.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
ca:7a:0b:a1:b7:b5:87:a1:7a:dc:c3:b8:bf:ea:ed:81:42:dd:
c1:c7:22:b9:6a:68:73:c8:95:6d:c3:e4:16:28:06:c9:f5:57:
b0:f9:03:03:58:8a:34:3a:b6:e8:6b:b8:df:59:57:ce:62:e7:
48:6b:d2:41:84:29:97:b5:a5:f1:9b:f5:54:25:2f:c3:5e:1e:
4c:0b:23:ec:a7:28:0b:05:df:20:82:7d:9f:72:bb:16:cd:39:
bc:84:9b:87:96:76:5e:9e:cc:02:c3:c1:28:29:ca:05:6b:2a:
5e:5b:77:11:e6:d8:5e:2c:5e:b5:62:4c:9c:06:41:af:b7:79:
15:e8:cf:69:ce:c6:62:b3:f1:9b:82:5b:70:0b:9f:7e:26:42:
33:37:b0:d5:95:27:98:85:04:a7:18:a7:03:c5:5e:4f:8c:bc:
02:5b:f9:49:98:ff:5e:27:48:ce:fa:50:aa:de:13:83:1d:8f:
d1:14:a2:df:40:34:98:93:31:38:c8:35:0c:14:3e:2d:60:55:
5e:eb:23:38:c8:07:1a:a2:76:b9:35:b5:2b:d2:41:17:ea:2a:
f4:bd:12:25:46:00:a7:58:2b:8d:41:d8:92:a5:a8:62:9c:bd:
32:c6:8d:32:e5:4b:6e:54:50:14:9f:3a:30:60:e1:fa:3b:a9:
e4:fa:e1:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEFDEuaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2U5NGNjYjdiNjAxZGEwY2EwOTQ2OWY2MGY2NTM2NDBmZWQ4YzFjMB4XDTIyMDYw
OTE1NDAwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmU3YjJkN2E0YWRj
YTJmNWExMDk4ODM2OGU0ZjFiNmE5YTMyZWFiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI2CBKwg37XgXfrH6W13Sx1ED2HVnP5Ruw9kL3hRoGqZr5OD
ck0qlk9qQgB4k2BjyPrvTF1RL+BXS5OY1dBgeXmZoQZYo5WKnsEFc3XRiCwFblCB
Z2Lzh0LaQ7vbZjl4UeRRdk1rkgMWujw8zAKYo4BpGQJ11Qztxaza7UAsWOhm5x+6
Ab3v2DuW4LtKUQH22hOV1MR+1W98q0fA1tJIrT0A7dXMsJPGcFAPLn+AYzUggTFA
jUxYW+kyiVThH9+/zzgki2o861CSItCA22LCJbXqyl0uuYZcqxwdAv9L1Odo68xA
LvpwN3aorPj34nU5TxOWNxOUVg9gPxRVKkB195UCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQuey16Styi9aEJiDaOTxtqmjLquzAfBgNVHSMEGDAWgBRH6UzLe2AdoMoJ
Rp9g9lNkD+2MHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ItbE15M3RnSGFES0NVYWZZUFpUWkFfdGpCdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvOWUyOWRjLWNlYzktNDllMi1iY2U0LWJkOTBhM2YwNmUxNi8x
L0xuc3Rla3Jjb3ZXaENZZzJqazhiYXBveTZycy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
OWUyOWRjLWNlYzktNDllMi1iY2U0LWJkOTBhM2YwNmUxNi8xL1ItbE15M3RnSGFE
S0NVYWZZUFpUWkFfdGpCdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQA1bThAwQA1bTiAwQD1bTwMA0G
CSqGSIb3DQEBCwUAA4IBAQDKeguht7WHoXrcw7i/6u2BQt3BxyK5amhzyJVtw+QW
KAbJ9Vew+QMDWIo0Orboa7jfWVfOYudIa9JBhCmXtaXxm/VUJS/DXh5MCyPspygL
Bd8ggn2fcrsWzTm8hJuHlnZenswCw8EoKcoFaypeW3cR5theLF61YkycBkGvt3kV
6M9pzsZis/GbgltwC59+JkIzN7DVlSeYhQSnGKcDxV5PjLwCW/lJmP9eJ0jO+lCq
3hODHY/RFKLfQDSYkzE4yDUMFD4tYFVe6yM4yAcaona5NbUr0kEX6ir0vRIlRgCn
WCuNQdiSpahinL0yxo0y5UtuVFAUnzowYOH6O6nk+uGU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:01 2024 by rpki-client on console-ams.rpki-client.org