Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/lVu2MvkY0HHc2daTpjqewQX6v10.roa
File: lVu2MvkY0HHc2daTpjqewQX6v10.roa (raw, json)
Hash identifier: g4ZhiMx3atgAcGNUykaM+Bm/RxUDvnCAk0RRu5sV9bo=
Subject key identifier: 95:5B:B6:32:F9:18:D0:71:DC:D9:D6:93:A6:3A:9E:C1:05:FA:BF:5D
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 01857246C0C973CDE9578B903DB4CA2D4B63
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/lVu2MvkY0HHc2daTpjqewQX6v10.roa
Signing time: Mon 02 Jan 2023 11:38:37 +0000
ROA not before: Mon 02 Jan 2023 11:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50056
IP address blocks: 94.126.43.0/24 maxlen: 24
94.126.47.0/24 maxlen: 24
31.28.67.0/24 maxlen: 24
31.28.68.0/24 maxlen: 24
31.28.80.0/22 maxlen: 22
31.28.84.0/23 maxlen: 23
31.28.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c0:c9:73:cd:e9:57:8b:90:3d:b4:ca:2d:4b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Jan 2 11:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=955bb632f918d071dcd9d693a63a9ec105fabf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:41:4e:8f:34:c1:bd:61:cc:65:9e:9e:26:
92:04:8c:5e:98:fa:bf:6c:0d:9d:90:2a:a9:d3:5d:
20:41:37:bc:52:11:46:75:bc:ac:1d:ec:7b:49:ed:
1c:07:f3:d2:f0:bc:4b:1d:68:a1:06:03:a6:e9:0c:
72:78:34:56:5b:e7:c7:87:ca:7d:3d:23:ae:79:52:
e7:ce:8a:17:67:68:c6:de:15:3b:0f:db:b3:4b:9f:
13:26:82:2e:25:33:d6:7e:5a:67:74:5f:16:43:16:
4c:7e:db:65:9e:ef:20:82:51:f0:75:b2:1c:ac:e6:
78:1a:aa:d9:3a:a9:18:f3:41:96:44:5a:7b:ee:5b:
d2:b3:60:dd:68:62:da:0c:72:70:c8:85:21:cb:fa:
d0:42:eb:ac:40:31:31:30:1a:0d:13:e5:7b:f3:0f:
f7:a3:e7:58:df:57:ee:cf:ac:de:2b:9c:ca:c4:06:
f2:6d:df:60:63:ed:10:81:8f:27:ee:3c:53:bd:7d:
4c:73:f1:9b:55:4f:e9:d4:c8:c4:21:08:d2:7b:6e:
46:ad:e4:46:c2:87:80:40:f5:80:df:bd:19:09:41:
10:e8:51:f7:fa:75:6c:2d:59:9b:e3:e5:22:a3:b2:
97:74:74:c8:a8:f0:71:a2:0b:e9:fb:4e:d4:48:8e:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5B:B6:32:F9:18:D0:71:DC:D9:D6:93:A6:3A:9E:C1:05:FA:BF:5D
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/lVu2MvkY0HHc2daTpjqewQX6v10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.67.0-31.28.68.255
31.28.80.0-31.28.86.255
94.126.43.0/24
94.126.47.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e8:fd:be:81:81:11:a9:6d:2b:8c:3c:7c:62:e2:b3:84:d0:
06:75:84:91:e3:f1:ac:0b:a0:1f:11:f4:3a:97:09:31:07:13:
7c:07:fe:15:41:f4:25:da:4f:d2:7c:96:d2:ed:0b:b7:f7:dc:
8f:a3:fa:38:b9:3c:18:a3:95:63:eb:75:a7:e0:92:c1:09:62:
e4:e4:64:4b:20:31:49:7a:fc:d2:79:92:69:00:bf:00:eb:d2:
27:3f:37:71:44:7e:77:bd:3d:00:47:63:8b:46:07:25:46:b1:
b8:e7:d3:e4:4c:f3:08:f8:38:3f:02:e1:3b:de:ce:7f:3e:e9:
db:d2:23:c4:5f:4a:82:60:e7:8b:eb:81:f4:d3:0d:8b:9b:9d:
3e:d5:9b:b4:c0:4c:ab:c3:ff:7c:d4:68:de:f6:e3:67:b1:ec:
03:d5:27:de:b0:b1:4f:a3:6a:3e:97:af:f7:d4:26:fc:75:3a:
e6:a2:bd:c3:35:ac:0f:dd:33:e0:73:a5:41:b5:6e:66:b3:6d:
b1:63:cc:67:50:6b:45:63:ef:2d:a6:27:86:80:28:1d:b9:20:
dd:2c:5c:db:76:32:ee:4a:4b:62:ea:90:2d:dd:74:a7:1f:7a:
59:6a:53:f6:02:d4:72:33:ec:3e:4d:78:0a:5f:2a:3c:a6:96:
18:18:1b:72
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYVyRsDJc83pV4uQPbTKLUtjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTE5NzU0ZmMxNGZmZTc5NjhhNjUxNmJkNDliZGIyNTYz
M2I4ODcwHhcNMjMwMTAyMTEzODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTViYjYzMmY5MThkMDcxZGNkOWQ2OTNhNjNhOWVjMTA1ZmFiZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9ZBTo80wb1hzGWeniaSBIxemPq/
bA2dkCqp010gQTe8UhFGdbysHex7Se0cB/PS8LxLHWihBgOm6QxyeDRWW+fHh8p9
PSOueVLnzooXZ2jG3hU7D9uzS58TJoIuJTPWflpndF8WQxZMfttlnu8gglHwdbIc
rOZ4GqrZOqkY80GWRFp77lvSs2DdaGLaDHJwyIUhy/rQQuusQDExMBoNE+V78w/3
o+dY31fuz6zeK5zKxAbybd9gY+0QgY8n7jxTvX1Mc/GbVU/p1MjEIQjSe25GreRG
woeAQPWA370ZCUEQ6FH3+nVsLVmb4+Uio7KXdHTIqPBxogvp+07USI7KTwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJVbtjL5GNBx3NnWk6Y6nsEF+r9dMB8GA1UdIwQY
MBaAFC0Rl1T8FP/nloplFr1JvbJWM7iHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJHWFZQd1VfLWVXaW1VV3ZVbTlzbFl6dUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNzcxZTEtMzlhZi00MzUzLTk0N2Yt
MDFmYWNjNzQ3YzI0LzEvbFZ1Mk12a1kwSEhjMmRhVHBqcWV3UVg2djEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wNzcxZTEtMzlhZi00MzUzLTk0N2YtMDFmYWNjNzQ3YzI0
LzEvTFJHWFZQd1VfLWVXaW1VV3ZVbTlzbFl6dUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAAfHEMD
BAAfHEQwDAMEBB8cUAMEAB8cVgMEAF5+KwMEAF5+LzANBgkqhkiG9w0BAQsFAAOC
AQEAGej9voGBEaltK4w8fGLis4TQBnWEkePxrAugHxH0OpcJMQcTfAf+FUH0JdpP
0nyW0u0Lt/fcj6P6OLk8GKOVY+t1p+CSwQli5ORkSyAxSXr80nmSaQC/AOvSJz83
cUR+d709AEdji0YHJUaxuOfT5EzzCPg4PwLhO97Ofz7p29IjxF9KgmDni+uB9NMN
i5udPtWbtMBMq8P/fNRo3vbjZ7HsA9Un3rCxT6NqPpev99Qm/HU65qK9wzWsD90z
4HOlQbVuZrNtsWPMZ1BrRWPvLaYnhoAoHbkg3Sxc23Yy7kpLYuqQLd10px96WWpT
9gLUcjPsPk14Cl8qPKaWGBgbcg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:36 2025 by rpki-client