Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/lhLM15CFBvkhY84-tJSm5M4J4o4.roa
File: lhLM15CFBvkhY84-tJSm5M4J4o4.roa (raw, json)
Hash identifier: BKKRXdsZ1Z2Xw7ujfYRWfhSPkmRQj/H/flN0ZpBB0Z8=
Subject key identifier: 96:12:CC:D7:90:85:06:F9:21:63:CE:3E:B4:94:A6:E4:CE:09:E2:8E
Certificate issuer: /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial: 0A1BF621
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/lhLM15CFBvkhY84-tJSm5M4J4o4.roa
Signing time: Sat 01 Jan 2022 09:04:17 +0000
ROA not before: Sat 01 Jan 2022 09:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41064
IP address blocks: 91.203.184.0/22 maxlen: 22
193.93.124.0/22 maxlen: 22
2001:678:bc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169604641 (0xa1bf621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Validity
Not Before: Jan 1 09:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9612ccd7908506f92163ce3eb494a6e4ce09e28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:4f:d4:8c:00:5d:a4:92:3d:ab:9a:e5:8a:
c9:d8:22:ce:43:b7:dc:87:79:8f:43:97:fa:eb:50:
54:34:67:87:a6:a2:a2:59:67:6c:5d:7a:9e:4c:25:
27:d7:72:2d:87:7f:b2:ca:7c:72:d1:43:5e:b1:fc:
17:a2:cf:f3:39:f2:e6:26:87:96:21:8a:1f:b3:16:
f3:ad:a7:54:03:f9:4e:36:53:41:b1:3a:ae:70:6a:
c8:64:1a:78:aa:d8:b8:fb:13:86:66:45:f6:43:f3:
1e:bd:6e:79:49:b2:a4:cd:17:d3:01:5e:4c:4a:2c:
cf:7e:a7:b3:ac:fa:3e:0f:88:f6:a9:f9:76:52:33:
f4:64:52:82:59:98:d3:84:46:03:a5:c1:5f:44:25:
66:70:4c:39:be:59:da:9d:43:9f:f4:4a:ae:65:59:
a0:43:7c:67:de:52:8b:b2:29:64:65:15:8f:70:a7:
1b:6e:17:6f:45:6b:fe:a5:a4:61:d0:c3:01:8b:34:
9a:80:86:e4:e4:bf:b5:93:c4:73:b5:4a:31:18:ba:
19:83:32:20:ce:31:4a:00:24:12:e8:c8:ae:1d:5c:
6a:62:a4:1e:65:86:e1:03:d9:6f:f5:05:a2:88:cd:
5a:ac:55:dc:75:cd:0e:ee:c8:03:3a:bf:ed:6c:d4:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:CC:D7:90:85:06:F9:21:63:CE:3E:B4:94:A6:E4:CE:09:E2:8E
X509v3 Authority Key Identifier:
keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/lhLM15CFBvkhY84-tJSm5M4J4o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.184.0/22
193.93.124.0/22
IPv6:
2001:678:bc0::/48
Signature Algorithm: sha256WithRSAEncryption
83:b5:a9:6d:31:6c:fe:11:04:52:9a:36:a2:e8:9c:59:0d:67:
88:7c:7e:d1:46:f0:f6:43:9c:9c:ad:1f:47:82:77:93:d5:22:
02:cc:e8:cb:15:0c:4b:68:35:9b:d6:0f:5a:a1:10:7a:7e:63:
bb:37:d4:a5:b7:5f:61:69:f9:9e:d6:dd:3f:a9:f4:fb:4a:de:
f0:d1:7e:1f:23:ed:c4:09:7c:0e:45:c0:bd:92:9f:cf:1c:43:
20:ee:6c:42:71:60:aa:a1:9c:11:05:14:c6:32:9b:bb:99:5e:
95:20:6e:97:a5:3f:24:a0:33:b6:a9:0b:a8:67:60:f2:60:e3:
17:b1:b6:92:f0:ec:22:a4:f7:b6:bd:ab:ab:2f:be:ed:d8:a5:
5c:32:8f:95:28:4d:b7:2c:7a:ad:57:1e:45:35:e0:13:7a:01:
9c:18:eb:f5:c9:a5:db:a1:80:c4:ff:00:74:0d:b1:61:bc:51:
55:13:3c:84:7e:42:0c:28:2c:a6:ae:9b:11:c2:28:38:6a:f3:
27:6b:03:06:97:45:af:cc:70:1e:c3:51:e8:5e:9a:93:2f:7e:
76:a0:ce:e2:61:22:7b:39:75:b1:35:37:5c:88:6f:b2:eb:3e:
da:56:8f:0d:59:da:f8:b1:85:9b:3a:cb:a8:d1:7a:35:ff:63:
46:6d:bd:81
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEChv2ITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZGUxYWZiNTVkOGJiM2RmZjFmMGZlNjMwNmYzZWYyMDc5NTg1YWFkMB4XDTIyMDEw
MTA5MDQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTYxMmNjZDc5MDg1
MDZmOTIxNjNjZTNlYjQ5NGE2ZTRjZTA5ZTI4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJw4T9SMAF2kkj2rmuWKydgizkO33Id5j0OX+utQVDRnh6ai
ollnbF16nkwlJ9dyLYd/ssp8ctFDXrH8F6LP8zny5iaHliGKH7MW862nVAP5TjZT
QbE6rnBqyGQaeKrYuPsThmZF9kPzHr1ueUmypM0X0wFeTEosz36ns6z6Pg+I9qn5
dlIz9GRSglmY04RGA6XBX0QlZnBMOb5Z2p1Dn/RKrmVZoEN8Z95Si7IpZGUVj3Cn
G24Xb0Vr/qWkYdDDAYs0moCG5OS/tZPEc7VKMRi6GYMyIM4xSgAkEujIrh1camKk
HmWG4QPZb/UFoojNWqxV3HXNDu7IAzq/7WzUl0UCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBSWEszXkIUG+SFjzj60lKbkzgnijjAfBgNVHSMEGDAWgBT94a+1XYuz3/Hw
/mMG8+8geVharTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19lR3Z0VjJMczlfeDhQNWpCdlB2SUhsWVdxMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvZWQ1Y2U3LTJlMmEtNGUwZS05OWQyLTE5NjJjMWQ4Y2JiMy8x
L2xoTE0xNUNGQnZraFk4NC10SlNtNU00SjRvNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
ZWQ1Y2U3LTJlMmEtNGUwZS05OWQyLTE5NjJjMWQ4Y2JiMy8xL19lR3Z0VjJMczlf
eDhQNWpCdlB2SUhsWVdxMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAlvLuAMEAsFdfDAPBAIAAjAJAwcA
IAEGeAvAMA0GCSqGSIb3DQEBCwUAA4IBAQCDtaltMWz+EQRSmjai6JxZDWeIfH7R
RvD2Q5ycrR9HgneT1SICzOjLFQxLaDWb1g9aoRB6fmO7N9Slt19hafme1t0/qfT7
St7w0X4fI+3ECXwORcC9kp/PHEMg7mxCcWCqoZwRBRTGMpu7mV6VIG6XpT8koDO2
qQuoZ2DyYOMXsbaS8OwipPe2vaurL77t2KVcMo+VKE23LHqtVx5FNeATegGcGOv1
yaXboYDE/wB0DbFhvFFVEzyEfkIMKCymrpsRwig4avMnawMGl0WvzHAew1HoXpqT
L352oM7iYSJ7OXWxNTdciG+y6z7aVo8NWdr4sYWbOsuo0Xo1/2NGbb2B
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:06 2024 by rpki-client on console-ams.rpki-client.org