Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/LwvgUdOq_6OFwBNfmsY0vpawowQ.roa
File: LwvgUdOq_6OFwBNfmsY0vpawowQ.roa (raw, json)
Hash identifier: 2vAPGN7EWYaKI8lrb4WQ2NT7zmropplKacpqhx4ECmU=
Subject key identifier: 2F:0B:E0:51:D3:AA:FF:A3:85:C0:13:5F:9A:C6:34:BE:96:B0:A3:04
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 0182D41E0F83DCA4817644752580E41AC1AF
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/LwvgUdOq_6OFwBNfmsY0vpawowQ.roa
Signing time: Thu 25 Aug 2022 08:28:36 +0000
ROA not before: Thu 25 Aug 2022 08:28:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397451
IP address blocks: 185.25.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:1e:0f:83:dc:a4:81:76:44:75:25:80:e4:1a:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Aug 25 08:28:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f0be051d3aaffa385c0135f9ac634be96b0a304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:29:81:ea:67:c3:d9:1c:8f:ba:aa:20:e1:
2f:e7:4a:e5:4a:dd:e9:92:94:fd:e3:88:a9:cb:3a:
3a:2e:1c:2c:12:e6:9a:22:52:20:90:6a:98:cd:13:
a0:10:15:a0:75:17:00:22:8f:15:49:56:c0:f1:4f:
0f:a7:3a:e7:b6:93:f1:58:d3:42:1b:56:1c:28:8d:
c9:f9:f9:1c:d2:84:78:a6:f1:fe:12:51:02:e5:11:
1c:20:63:ca:d2:60:70:9f:f0:ff:f8:5b:3c:69:b6:
4e:eb:fe:03:9c:c0:43:f2:cf:a6:c9:dc:06:57:84:
7c:5c:11:69:26:91:09:16:81:85:8f:a7:bd:c9:b5:
5e:c7:c9:79:8a:44:58:86:4d:c2:54:88:c6:88:a3:
fc:e3:79:c0:2f:dd:30:d3:58:7e:32:4e:75:e0:59:
5f:83:18:1c:fa:5a:ac:c1:f1:77:e3:00:26:1b:8f:
54:55:8a:18:6a:9c:8f:c9:d6:99:74:83:3f:a5:78:
71:8e:ef:3c:25:3b:94:f8:28:30:ff:e4:e2:0c:55:
89:b0:12:99:87:6f:78:5c:a0:50:c2:a6:07:8e:cd:
83:54:9d:bc:57:25:56:82:e7:c9:9f:be:11:9c:f6:
ea:4e:a0:52:01:0f:6d:ec:3f:c6:f1:76:dc:bf:05:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:E0:51:D3:AA:FF:A3:85:C0:13:5F:9A:C6:34:BE:96:B0:A3:04
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/LwvgUdOq_6OFwBNfmsY0vpawowQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.156.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7c:a3:46:58:a1:4d:b3:ca:c8:29:c5:ff:d0:f5:53:8f:b8:
13:e4:f5:10:d2:fd:f4:af:bb:e8:9c:da:2d:00:44:5a:7a:92:
5f:36:7e:2b:86:ce:dd:13:eb:01:ef:40:57:46:38:b1:3b:9c:
cc:49:87:86:71:f6:5b:1b:a9:27:b5:58:29:dd:12:96:88:64:
30:d1:0d:0a:1b:20:58:89:19:c8:c6:55:7c:e2:cd:b7:75:27:
24:88:90:42:d4:9c:51:53:db:8e:e7:a8:8d:66:5f:3d:65:c4:
00:c2:2c:c0:8d:55:00:60:cd:d5:d5:2d:88:6d:98:a2:8e:d0:
ab:1c:c1:a2:2a:77:ad:71:4a:e5:24:3c:80:a5:14:20:aa:99:
dc:1c:94:75:f3:8c:e2:dd:27:1e:74:1f:1f:f0:ab:34:1b:3e:
d0:c3:3f:12:fd:fd:e7:7e:44:78:de:36:fb:9b:a1:07:06:66:
c9:02:82:f1:6d:6d:94:2f:8b:3f:11:52:57:a0:5d:83:4e:6a:
82:a8:43:b5:1d:d0:74:7c:6b:15:d6:dd:31:3d:f6:bb:98:d9:
04:cc:70:55:e9:31:32:2a:b8:04:03:ec:ab:3a:01:fd:26:55:
dd:55:e2:7a:db:a6:49:4c:f6:93:b6:08:6e:8b:b4:f4:0b:c5:
06:8a:0e:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLUHg+D3KSBdkR1JYDkGsGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1
MTE2ODgwHhcNMjIwODI1MDgyODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjBiZTA1MWQzYWFmZmEzODVjMDEzNWY5YWM2MzRiZTk2YjBhMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvMpgepnw9kcj7qqIOEv50rlSt3p
kpT944ipyzo6LhwsEuaaIlIgkGqYzROgEBWgdRcAIo8VSVbA8U8PpzrntpPxWNNC
G1YcKI3J+fkc0oR4pvH+ElEC5REcIGPK0mBwn/D/+Fs8abZO6/4DnMBD8s+mydwG
V4R8XBFpJpEJFoGFj6e9ybVex8l5ikRYhk3CVIjGiKP843nAL90w01h+Mk514Flf
gxgc+lqswfF34wAmG49UVYoYapyPydaZdIM/pXhxju88JTuU+Cgw/+TiDFWJsBKZ
h294XKBQwqYHjs2DVJ28VyVWgufJn74RnPbqTqBSAQ9t7D/G8XbcvwV4BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC8L4FHTqv+jhcATX5rGNL6WsKMEMB8GA1UdIwQY
MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt
YTVkM2NiOTE4MjA2LzEvTHd2Z1VkT3FfNk9Gd0JOZm1zWTB2cGF3b3dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2
LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRmcMA0G
CSqGSIb3DQEBCwUAA4IBAQBJfKNGWKFNs8rIKcX/0PVTj7gT5PUQ0v30r7vonNot
AERaepJfNn4rhs7dE+sB70BXRjixO5zMSYeGcfZbG6kntVgp3RKWiGQw0Q0KGyBY
iRnIxlV84s23dSckiJBC1JxRU9uO56iNZl89ZcQAwizAjVUAYM3V1S2IbZiijtCr
HMGiKnetcUrlJDyApRQgqpncHJR184zi3ScedB8f8Ks0Gz7Qwz8S/f3nfkR43jb7
m6EHBmbJAoLxbW2UL4s/EVJXoF2DTmqCqEO1HdB0fGsV1t0xPfa7mNkEzHBV6TEy
KrgEA+yrOgH9JlXdVeJ626ZJTPaTtghui7T0C8UGig4e
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:05 2025 by rpki-client