Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lsc_Mh31ZkrRVEwCw9k7w0IxHVM.roa
File: lsc_Mh31ZkrRVEwCw9k7w0IxHVM.roa (raw, json)
Hash identifier: SvMBMKLRLU9GIiJtIdHvwLIoVzMsyx9E8BJqeh2CuBs=
Subject key identifier: 96:C7:3F:32:1D:F5:66:4A:D1:54:4C:02:C3:D9:3B:C3:42:31:1D:53
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08999C25
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lsc_Mh31ZkrRVEwCw9k7w0IxHVM.roa
Signing time: Mon 28 Mar 2022 10:22:39 +0000
ROA not before: Mon 28 Mar 2022 10:22:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 188.255.135.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144284709 (0x8999c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 28 10:22:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96c73f321df5664ad1544c02c3d93bc342311d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:50:97:f1:5c:96:e3:7c:e0:f2:6a:8f:d1:
be:7a:1a:69:fa:2a:f9:35:b2:ec:08:52:e9:25:9d:
75:74:eb:10:0d:99:cf:ad:d7:cf:ff:88:54:d7:f2:
0b:c7:f7:9b:52:ae:92:52:71:0d:aa:94:1e:61:06:
f7:46:6d:69:af:a7:1c:7d:7e:d7:b3:eb:50:15:16:
eb:9d:2b:50:a2:aa:61:2a:79:cb:55:a7:21:a3:52:
5a:cf:ae:2c:d7:08:36:b5:fd:b5:50:59:a2:57:81:
ff:64:74:ce:2f:9e:9b:0f:fe:ab:8b:87:2a:d5:13:
2f:0a:9b:1a:93:7c:b5:bd:d4:0f:5c:26:cd:4e:c6:
96:64:ca:9f:5d:6a:35:da:43:74:f2:50:3b:91:f1:
01:a9:72:27:fa:cf:f6:b8:3f:d3:b3:87:5b:65:c2:
a1:d4:a2:af:0b:50:1c:5e:3f:18:76:b4:28:9d:e5:
95:9e:83:6b:81:0a:ab:f9:f4:05:2c:d8:2d:c4:fc:
e5:47:79:36:0a:63:2f:0a:d8:8f:ec:b3:e4:28:66:
14:f5:d6:00:6f:a8:be:d3:4c:3f:2b:4b:83:e2:c1:
e5:f4:33:a6:b5:07:83:5f:1b:69:58:0f:71:42:40:
ed:63:8f:9a:79:6b:e4:9d:bd:0e:78:a5:77:b7:af:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:3F:32:1D:F5:66:4A:D1:54:4C:02:C3:D9:3B:C3:42:31:1D:53
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/lsc_Mh31ZkrRVEwCw9k7w0IxHVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.121.33.0-109.121.36.255
109.121.38.0/24
109.121.40.0/22
109.121.45.0-109.121.46.255
178.253.237.0/24
188.255.135.0/24
212.69.10.0/23
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
51:68:96:f6:67:21:dc:87:10:9f:77:98:00:29:c0:87:32:48:
6e:54:ad:53:f6:db:0e:aa:74:d7:a2:62:7c:1d:d3:b2:63:5d:
a4:21:a7:99:6a:da:44:99:40:5f:4b:39:dc:26:1a:d0:15:a6:
43:1b:5b:a4:a3:b9:ba:b8:30:22:c2:6b:31:2d:45:71:43:15:
1f:94:de:ae:2b:46:af:98:28:c4:27:be:d7:ff:48:5d:24:6b:
ac:c1:d7:d8:f6:e7:95:fc:f3:4a:90:c4:b0:39:81:20:a8:2d:
5c:eb:68:ee:56:4d:76:f5:e9:f9:0b:e4:9f:2f:2d:b6:83:fa:
2e:ef:49:cd:8c:db:19:75:88:0b:9b:69:d7:fd:5d:31:be:6b:
e5:a2:99:58:1f:31:bd:dd:e2:f3:fd:54:9e:d7:9d:18:29:e6:
ab:1f:3b:dd:c5:9a:4e:de:f7:23:67:5f:f5:c6:f4:4e:58:8e:
1d:89:53:22:4a:4e:14:91:9c:e3:c1:8d:e9:37:bf:8b:07:06:
37:9e:00:bb:5a:e2:e7:56:dc:2c:c1:fc:34:aa:c1:b6:bf:67:
ca:2b:d7:25:ac:c0:fb:47:ed:f7:5c:fa:4d:46:51:13:db:1d:
90:be:2a:08:35:d8:ca:c6:b5:b3:a2:11:f5:9e:68:6d:bb:95:
a3:09:84:95
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIECJmcJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDMy
ODEwMjIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTZjNzNmMzIxZGY1
NjY0YWQxNTQ0YzAyYzNkOTNiYzM0MjMxMWQ1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPKgUJfxXJbjfODyao/Rvnoaafoq+TWy7AhS6SWddXTrEA2Z
z63Xz/+IVNfyC8f3m1KuklJxDaqUHmEG90Ztaa+nHH1+17PrUBUW650rUKKqYSp5
y1WnIaNSWs+uLNcINrX9tVBZoleB/2R0zi+emw/+q4uHKtUTLwqbGpN8tb3UD1wm
zU7GlmTKn11qNdpDdPJQO5HxAalyJ/rP9rg/07OHW2XCodSirwtQHF4/GHa0KJ3l
lZ6Da4EKq/n0BSzYLcT85Ud5NgpjLwrYj+yz5ChmFPXWAG+ovtNMPytLg+LB5fQz
prUHg18baVgPcUJA7WOPmnlr5J29Dnild7evjxkCAwEAAaOCAkkwggJFMB0GA1Ud
DgQWBBSWxz8yHfVmStFUTALD2TvDQjEdUzAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L2xzY19NaDMxWmtyUlZFd0N3OWs3dzBJeEhWTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBf
BggrBgEFBQcBBwEB/wRQME4wTAQCAAEwRgMEBW15ADAMAwQAbXkhAwQAbXkkAwQA
bXkmAwQCbXkoMAwDBABteS0DBABteS4DBACy/e0DBAC8/4cDBAHURQoDBADURRIw
DQYJKoZIhvcNAQELBQADggEBAFFolvZnIdyHEJ93mAApwIcySG5UrVP22w6qdNei
Ynwd07JjXaQhp5lq2kSZQF9LOdwmGtAVpkMbW6Sjubq4MCLCazEtRXFDFR+U3q4r
Rq+YKMQnvtf/SF0ka6zB19j255X880qQxLA5gSCoLVzraO5WTXb16fkL5J8vLbaD
+i7vSc2M2xl1iAubadf9XTG+a+WimVgfMb3d4vP9VJ7XnRgp5qsfO93Fmk7e9yNn
X/XG9E5Yjh2JUyJKThSRnOPBjek3v4sHBjeeALta4udW3CzB/DSqwba/Z8or1yWs
wPtH7fdc+k1GURPbHZC+Kgg12MrGtbOiEfWeaG27laMJhJU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org