Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/LBae3qSicJbFp12cvDlb00NElLA.roa
File: LBae3qSicJbFp12cvDlb00NElLA.roa (raw, json)
Hash identifier: 410HP28xfE13+PchyG8bR/KvGNm2p9wg4WCC/GDHp0E=
Subject key identifier: 2C:16:9E:DE:A4:A2:70:96:C5:A7:5D:9C:BC:39:5B:D3:43:44:94:B0
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 03C31EFF
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/LBae3qSicJbFp12cvDlb00NElLA.roa
Signing time: Sat 01 Jan 2022 06:02:55 +0000
ROA not before: Sat 01 Jan 2022 06:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51289
IP address blocks: 193.58.251.0/24 maxlen: 24
2001:67c:20c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63119103 (0x3c31eff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Jan 1 06:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c169edea4a27096c5a75d9cbc395bd3434494b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:17:ec:24:2d:e0:f7:bc:53:24:6a:6a:66:
92:8e:61:c2:bc:55:1c:5b:56:28:38:0e:63:b4:78:
19:b3:f2:2e:60:5b:ea:f9:50:09:45:13:ea:98:dd:
5d:cd:c7:5a:6a:7a:c1:99:b3:f8:5a:e0:35:2c:08:
5c:ea:61:2b:38:38:39:a9:45:74:9d:0d:5b:49:fb:
d2:5c:f4:02:b4:5e:2e:1f:71:7a:22:e5:a1:da:89:
6f:2e:2e:9e:c3:31:b9:1a:19:82:24:d0:da:ce:ce:
b1:78:7e:40:3b:f2:54:bc:a7:ee:a9:15:28:f5:05:
b0:56:d7:31:0b:cd:7e:58:7d:00:c9:8a:c0:76:9f:
d2:e2:7d:b3:ef:42:8a:d0:e4:d1:6f:93:60:85:fb:
1f:e3:51:2e:af:9e:be:d2:9c:0f:26:c2:55:04:df:
e5:69:aa:34:65:08:e6:21:45:6b:47:f7:5c:b1:26:
31:e1:43:4e:d1:f6:52:5f:2c:05:b1:ae:f9:fb:a0:
3a:81:b1:a4:50:0b:1b:63:3a:d9:92:22:b4:d2:93:
78:5d:fc:07:88:82:f1:8f:92:88:d6:88:a5:5a:82:
d0:c7:83:0f:78:9e:67:d9:9b:a3:47:57:69:25:62:
e0:3e:81:52:a6:b9:15:12:36:34:4d:fc:4c:aa:fd:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:9E:DE:A4:A2:70:96:C5:A7:5D:9C:BC:39:5B:D3:43:44:94:B0
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/LBae3qSicJbFp12cvDlb00NElLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.251.0/24
IPv6:
2001:67c:20c::/48
Signature Algorithm: sha256WithRSAEncryption
43:ca:6b:5f:da:11:90:07:98:11:79:a2:fa:00:2b:f2:5b:21:
3f:08:4c:b5:67:da:16:94:c6:d9:3f:81:b5:10:f9:1f:e6:d0:
19:88:7f:58:e4:df:ae:36:31:59:3c:62:05:07:4b:42:27:9d:
f1:af:c0:e8:8e:bc:1e:09:fa:a9:74:40:d7:84:5d:f6:12:2c:
34:ba:97:02:0f:0f:fe:9d:c6:f9:96:b8:ce:09:fe:8c:41:c0:
0e:5e:f9:16:07:81:1e:ac:ed:2d:f0:50:fd:12:b5:89:01:a7:
7e:17:83:b7:f4:42:58:8e:84:7d:7f:61:16:4e:1d:52:ac:12:
ba:b8:68:77:9f:30:47:07:09:8b:f1:5e:4d:98:91:94:77:17:
73:4d:ce:1b:be:c0:c5:18:cf:d0:f7:37:b2:e3:47:a2:90:86:
56:1c:44:0c:a9:03:e2:a3:eb:22:28:a7:9b:70:ec:92:3c:ac:
bc:50:5e:d7:78:19:75:91:5d:98:49:9c:6c:65:71:fe:a4:c9:
7c:34:1f:65:42:96:30:30:eb:53:6a:72:d9:c2:f3:fe:42:ca:
5f:31:a5:b5:77:d3:6a:5f:7e:cd:08:20:30:e1:66:b9:ba:f1:
ee:1c:db:61:a7:2e:e4:b4:eb:33:91:e6:03:69:e0:4d:cb:54:
8f:b2:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:48 2025 by rpki-client