Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/LFK3QzQROghJYrnvs7FRFb2DlVY.roa
File: LFK3QzQROghJYrnvs7FRFb2DlVY.roa (raw, json)
Hash identifier: XqOPxM5YIFT7Pdo8KQ6N1UoZjjWQWAbN/bscA0evmOM=
Subject key identifier: 2C:52:B7:43:34:11:3A:08:49:62:B9:EF:B3:B1:51:15:BD:83:95:56
Certificate issuer: /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial: 018544B3E593DA1DF8243DB804AEA114EA8F
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/LFK3QzQROghJYrnvs7FRFb2DlVY.roa
Signing time: Sat 24 Dec 2022 15:15:18 +0000
ROA not before: Sat 24 Dec 2022 15:15:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44881
IP address blocks: 185.117.30.0/23 maxlen: 23
93.94.232.0/21 maxlen: 21
109.68.208.0/22 maxlen: 22
2a05:ce80::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:b3:e5:93:da:1d:f8:24:3d:b8:04:ae:a1:14:ea:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Validity
Not Before: Dec 24 15:15:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c52b74334113a084962b9efb3b15115bd839556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:fc:86:bc:7d:42:6f:1a:54:5b:ef:03:0e:
38:80:fb:78:23:c7:61:f5:ee:7f:5d:55:6b:ba:35:
db:fa:4f:f0:c4:c6:a8:a6:3b:d2:0f:c0:a7:ae:4a:
b7:8f:df:fe:f4:40:09:16:cb:12:88:17:02:53:20:
99:04:f0:74:81:c7:77:af:84:6e:1f:1a:2a:df:16:
53:70:c8:aa:06:cc:1f:d7:05:d5:6a:f6:36:a6:eb:
d0:71:30:10:83:76:c5:3b:bb:f6:61:60:ea:b2:f7:
cc:1b:bf:cb:94:60:96:48:81:f6:f7:d4:d7:82:7e:
24:90:38:1a:26:51:7c:bc:b6:c1:50:67:92:a4:51:
be:86:d5:92:ee:3f:e6:3a:0c:e4:b2:fc:89:8e:a5:
fb:88:38:43:6d:84:53:8f:4b:80:f3:37:15:5d:b9:
56:d2:f1:4f:2f:52:3d:1f:d9:07:ba:f2:17:bf:f2:
85:29:98:07:92:66:55:72:b4:c7:d0:31:09:4d:a9:
cd:49:15:c3:13:86:f5:db:d9:5f:7a:ea:ee:87:08:
b9:6e:9b:10:48:61:35:f4:62:2c:00:72:2d:16:ca:
7f:88:52:ea:da:1b:3f:cc:4d:5d:8e:49:6b:3a:3a:
ec:df:e8:84:52:6d:3e:60:72:c5:7e:87:8e:6f:84:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:B7:43:34:11:3A:08:49:62:B9:EF:B3:B1:51:15:BD:83:95:56
X509v3 Authority Key Identifier:
keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/LFK3QzQROghJYrnvs7FRFb2DlVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.232.0/21
109.68.208.0/22
185.117.30.0/23
IPv6:
2a05:ce80::/36
Signature Algorithm: sha256WithRSAEncryption
41:24:ac:d9:b4:85:a5:28:a5:5b:40:6a:77:e2:1c:7b:67:4c:
42:66:6d:92:9a:15:b6:64:9d:39:dc:0e:3c:80:77:e0:3d:fa:
5e:66:8a:60:fd:d1:ea:ad:6a:15:9d:2a:a2:bc:c1:fb:e4:45:
69:5b:0b:c9:ed:43:67:f9:bf:c0:8a:af:ab:82:33:53:0f:2c:
e4:c1:8d:38:38:d1:71:f9:f8:e6:f4:00:aa:bc:b4:7e:b8:a1:
36:c8:96:be:b0:81:54:84:37:19:ca:3b:f8:63:99:a5:c8:f2:
af:42:eb:69:e3:b4:a0:67:1f:8d:ca:7b:e0:06:7e:78:68:42:
f8:0e:8f:d3:b3:5f:c3:ef:39:34:40:e7:ee:4d:83:c0:84:66:
c4:df:27:b5:b2:dd:32:f4:42:a6:96:2b:1b:05:36:c1:21:68:
1b:5b:d5:e4:cc:a2:93:62:de:d9:ad:68:3a:89:1f:c2:35:09:
f7:7c:b1:5c:61:bf:e6:b3:94:bc:93:75:4f:ed:26:e3:f4:ae:
05:42:64:38:86:7e:32:3d:86:04:76:d4:9b:84:91:09:bb:6c:
18:31:31:ce:1c:1f:8f:49:ce:d9:c6:ae:ba:0a:71:ba:84:38:
08:b9:b6:02:d6:10:28:6b:1a:ab:8d:90:5b:62:99:21:f4:3b:
c0:2e:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:33:54 2025 by rpki-client