Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LwvUm9FqbIWsVZyHMheskkdeVPs.roa
File: LwvUm9FqbIWsVZyHMheskkdeVPs.roa (raw, json)
Hash identifier: 1HQBvAe6cRKfMa2STxxfvqtIDTwVE41J6otCmMI3xRM=
Subject key identifier: 2F:0B:D4:9B:D1:6A:6C:85:AC:55:9C:87:32:17:AC:92:47:5E:54:FB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0CC1B072
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LwvUm9FqbIWsVZyHMheskkdeVPs.roa
Signing time: Wed 30 Mar 2022 11:40:09 +0000
ROA not before: Wed 30 Mar 2022 11:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34927
IP address blocks: 193.148.251.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 40
2a0c:9a40:2200::/40 maxlen: 40
2a0c:9a40:2600::/40 maxlen: 40
2a0c:9a40:2500::/40 maxlen: 40
2a0c:9a40:2100::/40 maxlen: 40
2a0c:9a40:2400::/40 maxlen: 40
2a0c:9a40:2800::/40 maxlen: 40
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214020210 (0xcc1b072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 30 11:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f0bd49bd16a6c85ac559c873217ac92475e54fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:59:3d:4e:ca:c1:36:6e:76:ca:12:b7:be:
83:87:44:7d:91:75:02:ca:d1:74:59:bb:bc:81:c6:
4e:17:30:62:d9:06:2a:aa:a3:fd:8e:92:91:10:e7:
2d:40:5b:bc:46:2f:fb:7a:31:c9:72:1e:f2:7d:6e:
99:d3:7d:a7:3d:7a:b1:20:c8:9a:89:7d:6f:c5:1b:
13:b4:69:64:2c:1b:92:f1:aa:9c:09:f2:da:19:0d:
52:e7:37:9f:0d:4d:f5:62:0b:e6:3a:45:35:4d:1e:
40:24:3d:bb:7c:74:d4:d2:c3:4a:41:d1:03:08:13:
f6:55:d5:2a:78:81:67:d9:a5:73:eb:9d:d1:49:99:
98:fe:58:bf:22:fa:06:1f:9d:20:5f:0b:c3:34:16:
59:f8:08:80:cb:2e:23:c5:1d:f1:45:10:0f:69:ab:
65:15:4d:20:08:d5:9c:70:3f:f7:0b:88:0b:ea:cb:
c4:97:67:94:84:43:fa:b0:5e:2e:73:c4:de:2b:d6:
0d:04:92:d9:f2:09:5f:f3:74:e7:29:1d:62:97:18:
69:59:c5:02:b5:9b:d9:5e:af:fe:00:6e:3d:2e:0e:
b6:11:cd:b9:f1:81:ab:76:2e:3f:d1:29:f2:e8:2f:
2d:4d:15:64:4b:97:a3:d0:e9:61:ef:c2:2d:43:ce:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:D4:9B:D1:6A:6C:85:AC:55:9C:87:32:17:AC:92:47:5E:54:FB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/LwvUm9FqbIWsVZyHMheskkdeVPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/48
2a0c:9a40:1057::/48
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2100::-2a0c:9a40:22ff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2400::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::/40
2a0c:9a40:2c00::/40
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
35:62:3d:6c:fa:fb:a1:8a:20:d5:88:7e:d7:b6:97:43:bb:46:
8d:fe:1c:df:ac:7a:3c:2b:e9:6d:01:3b:a6:55:0b:a5:27:6c:
3a:85:54:8f:28:26:72:07:b0:0f:b5:70:3b:47:4f:b7:25:ea:
d8:77:57:83:e2:b5:c2:86:24:86:44:5f:7c:50:53:10:90:bf:
ee:37:61:e8:bc:0d:6f:96:23:7b:ed:c2:54:a6:1d:df:7b:ab:
4a:e5:63:d9:3b:b4:39:83:7d:29:08:bd:59:d8:13:0e:a2:36:
b9:66:21:8d:ce:c0:6d:f8:70:95:f4:27:87:31:06:6b:9e:8a:
6d:b7:c2:64:8e:7b:bc:cf:1e:02:ca:5f:22:06:4c:18:7c:f7:
bc:73:e1:30:cf:ef:98:4e:e9:db:fd:1c:ca:1e:02:51:67:6f:
f3:86:71:5f:bb:fb:6f:b1:95:3b:0f:96:99:9a:97:36:57:32:
c3:f7:79:60:38:7a:4a:d9:af:79:46:9f:11:81:59:9b:9e:47:
7c:d1:9f:eb:d6:91:32:67:55:b1:d1:c0:6a:8d:04:86:cf:c1:
d2:bb:34:7b:92:85:82:c9:41:d9:90:4a:ec:f5:8f:08:1f:d5:
9b:b4:0f:d7:56:31:23:37:04:05:20:ea:38:0e:93:da:21:89:
42:13:34:d5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIEDMGwcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTk1YTM2MWZlMmIyYzUyOTI2MjZiYTRjNTZhNjVhODE0ZTQ4MDA4MB4XDTIyMDMz
MDExNDAwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmYwYmQ0OWJkMTZh
NmM4NWFjNTU5Yzg3MzIxN2FjOTI0NzVlNTRmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMNbWT1OysE2bnbKEre+g4dEfZF1AsrRdFm7vIHGThcwYtkG
Kqqj/Y6SkRDnLUBbvEYv+3oxyXIe8n1umdN9pz16sSDImol9b8UbE7RpZCwbkvGq
nAny2hkNUuc3nw1N9WIL5jpFNU0eQCQ9u3x01NLDSkHRAwgT9lXVKniBZ9mlc+ud
0UmZmP5YvyL6Bh+dIF8LwzQWWfgIgMsuI8Ud8UUQD2mrZRVNIAjVnHA/9wuIC+rL
xJdnlIRD+rBeLnPE3ivWDQSS2fIJX/N05ykdYpcYaVnFArWb2V6v/gBuPS4OthHN
ufGBq3YuP9Ep8ugvLU0VZEuXo9DpYe/CLUPOQ2kCAwEAAaOCArAwggKsMB0GA1Ud
DgQWBBQvC9Sb0WpshaxVnIcyF6ySR15U+zAfBgNVHSMEGDAWgBSelaNh/issUpJi
a6TFamWoFOSACDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8x
L0x3dlVtOUZxYklXc1ZaeUhNaGVza2tkZVZQcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
Zjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8xL25wV2pZZjRyTEZL
U1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
xQYIKwYBBQUHAQcBAf8EgbUwgbIwDAQCAAEwBgMEAsGU+DCBoQQCAAIwgZoDBwAq
DJpAAAEDBwQqDJpAEAADBwAqDJpAECQDBwQqDJpAEDADBwEqDJpAEFADBwAqDJpA
EFQDBwAqDJpAEFcDBwAqDJpAEGAwEgMHBCoMmkAQcAMHBSoMmkAQgDAQAwYAKgya
QCEDBgAqDJpAIjARAwYCKgyaQCQDBwAqDJpAKQADBgAqDJpAKgMGACoMmkAsAwcA
KgyaRAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Yj1s+vuhiiDViH7XtpdDu0aN/hzf
rHo8K+ltATumVQulJ2w6hVSPKCZyB7APtXA7R0+3JerYd1eD4rXChiSGRF98UFMQ
kL/uN2HovA1vliN77cJUph3fe6tK5WPZO7Q5g30pCL1Z2BMOoja5ZiGNzsBt+HCV
9CeHMQZrnoptt8Jkjnu8zx4Cyl8iBkwYfPe8c+Ewz++YTunb/RzKHgJRZ2/zhnFf
u/tvsZU7D5aZmpc2VzLD93lgOHpK2a95Rp8RgVmbnkd80Z/r1pEyZ1Wx0cBqjQSG
z8HSuzR7koWCyUHZkErs9Y8IH9WbtA/XVjEjNwQFIOo4DpPaIYlCEzTV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:28 2023 by rpki-client on console-ams.rpki-client.org