Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LMAgxKxIUDWEKWoshl8U0VIHME8.roa
File: LMAgxKxIUDWEKWoshl8U0VIHME8.roa (raw, json)
Hash identifier: 64k+nNYp2Ds6W9J3SFT1xDmv2lD/egHa8smO5cv4F9c=
Subject key identifier: 2C:C0:20:C4:AC:48:50:35:84:29:6A:2C:86:5F:14:D1:52:07:30:4F
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 0185709507097CE5AF6986952447E37F3AE5
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LMAgxKxIUDWEKWoshl8U0VIHME8.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61272
IP address blocks: 2a02:e00:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:07:09:7c:e5:af:69:86:95:24:47:e3:7f:3a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cc020c4ac48503584296a2c865f14d15207304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:5d:7d:56:c0:3b:51:57:98:fd:d6:96:7d:
14:6a:12:c9:d0:e3:5c:21:23:be:3a:c6:39:b8:88:
3c:39:0b:f7:b3:dd:d9:41:09:1b:1a:1f:4c:15:80:
a8:6a:c9:4f:f7:2a:53:25:a1:50:71:e7:39:e5:48:
14:2a:ea:c1:3b:c6:4b:5e:c2:56:65:6e:c3:e9:1f:
e1:6b:41:2d:ae:94:bf:0a:87:85:73:54:52:38:fd:
b1:ae:23:cf:e4:c1:43:e3:a4:4f:23:6b:46:24:a4:
08:8c:08:a5:8b:df:2b:bf:c6:fb:8b:6f:3f:2f:ca:
fc:92:8b:cb:4a:b9:38:86:94:b8:55:91:3b:9f:77:
aa:6b:a2:29:56:51:f5:d2:17:fc:ef:a8:83:9e:7f:
0d:f7:b3:60:d7:ea:4a:a4:29:8f:93:2a:f5:db:a3:
92:a6:8a:df:76:3e:e9:e4:c6:0e:d5:31:bd:97:cc:
03:e2:f4:39:66:7c:0e:cb:38:ea:22:73:80:83:63:
30:aa:80:52:40:22:06:c4:28:8e:98:b3:bc:19:45:
b4:77:99:4b:dd:cb:69:11:df:c2:59:19:bd:c7:b1:
27:9e:27:0f:7a:ba:68:b0:90:b3:28:09:4f:44:5b:
74:72:0e:87:f3:23:22:7a:68:ed:81:cb:27:e3:dc:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:20:C4:AC:48:50:35:84:29:6A:2C:86:5F:14:D1:52:07:30:4F
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/LMAgxKxIUDWEKWoshl8U0VIHME8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e00:ffe7::/48
Signature Algorithm: sha256WithRSAEncryption
94:4a:0d:96:97:36:5b:ee:4e:8b:ed:dc:48:e8:7d:c7:d7:b6:
d2:83:88:62:8e:88:a8:75:79:c2:13:b7:5b:12:90:c9:8b:9d:
12:d2:9f:35:af:dd:61:07:9f:13:74:57:96:7f:0a:48:c5:fd:
05:20:54:41:a2:be:37:58:9e:11:00:b1:07:b4:80:42:b9:cc:
8a:62:40:f9:c1:d4:10:98:58:48:8c:99:c1:51:f4:0d:17:e7:
6d:65:6b:a2:47:71:1f:08:0d:3c:13:ec:94:7c:dc:53:1f:b5:
b0:e5:3e:7b:57:22:52:d7:d6:16:89:1d:6e:b8:9f:de:63:41:
63:70:1f:cd:f0:eb:9c:67:7f:82:11:72:38:56:8d:63:87:35:
ee:28:95:4b:0f:6c:c9:40:ae:8a:f7:84:22:d7:a4:b8:68:8b:
5b:87:82:1e:d3:c0:36:e4:ef:e8:47:1e:42:36:8b:94:e7:18:
95:b3:6f:d7:d5:3c:d2:ef:2f:0c:b6:5f:74:52:21:c4:bb:bd:
ed:3a:57:41:d7:2a:df:ac:75:75:a9:c9:ee:9a:1b:91:13:22:
4e:27:f3:4e:ba:b6:7b:e0:76:6a:c4:df:9a:b5:7b:a8:84:e8:
a3:c1:44:89:82:ba:6d:a9:1e:51:69:17:67:58:3c:bc:54:86:
54:7a:b3:66
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVwlQcJfOWvaYaVJEfjfzrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy
MjcxM2IwHhcNMjMwMTAyMDM0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2MwMjBjNGFjNDg1MDM1ODQyOTZhMmM4NjVmMTRkMTUyMDczMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla5dfVbAO1FXmP3Wln0UahLJ0ONc
ISO+OsY5uIg8OQv3s93ZQQkbGh9MFYCoaslP9ypTJaFQcec55UgUKurBO8ZLXsJW
ZW7D6R/ha0EtrpS/CoeFc1RSOP2xriPP5MFD46RPI2tGJKQIjAili98rv8b7i28/
L8r8kovLSrk4hpS4VZE7n3eqa6IpVlH10hf876iDnn8N97Ng1+pKpCmPkyr126OS
porfdj7p5MYO1TG9l8wD4vQ5ZnwOyzjqInOAg2MwqoBSQCIGxCiOmLO8GUW0d5lL
3ctpEd/CWRm9x7EnnicPerposJCzKAlPRFt0cg6H8yMiemjtgcsn49zbhwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCzAIMSsSFA1hClqLIZfFNFSBzBPMB8GA1UdIwQY
MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt
ZTE4ZTdiMmFjNTM2LzEvTE1BZ3hLeElVRFdFS1dvc2hsOFUwVklITUU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2
LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIOAP/n
MA0GCSqGSIb3DQEBCwUAA4IBAQCUSg2WlzZb7k6L7dxI6H3H17bSg4hijoiodXnC
E7dbEpDJi50S0p81r91hB58TdFeWfwpIxf0FIFRBor43WJ4RALEHtIBCucyKYkD5
wdQQmFhIjJnBUfQNF+dtZWuiR3EfCA08E+yUfNxTH7Ww5T57VyJS19YWiR1uuJ/e
Y0FjcB/N8OucZ3+CEXI4Vo1jhzXuKJVLD2zJQK6K94Qi16S4aItbh4Ie08A25O/o
Rx5CNouU5xiVs2/X1TzS7y8Mtl90UiHEu73tOldB1yrfrHV1qcnumhuREyJOJ/NO
urZ74HZqxN+atXuohOijwUSJgrptqR5RaRdnWDy8VIZUerNm
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:52:12 2025 by rpki-client