Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lb_PFWD8yrt_1j_SJ-wORrPfgi4.roa
File: Lb_PFWD8yrt_1j_SJ-wORrPfgi4.roa (raw, json)
Hash identifier: QVxVSUFPxBaK9fJ1kx2N2rY5RIIOrQt7iW2AahUyUE0=
Subject key identifier: 2D:BF:CF:15:60:FC:CA:BB:7F:D6:3F:D2:27:EC:0E:46:B3:DF:82:2E
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0185A9BEB3EEBE67FE7AD45D29D36A0AD328
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lb_PFWD8yrt_1j_SJ-wORrPfgi4.roa
Signing time: Fri 13 Jan 2023 06:08:45 +0000
ROA not before: Fri 13 Jan 2023 06:08:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 217.113.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a9:be:b3:ee:be:67:fe:7a:d4:5d:29:d3:6a:0a:d3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 13 06:08:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dbfcf1560fccabb7fd63fd227ec0e46b3df822e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:83:5b:9e:92:f1:02:c1:41:17:39:e0:b6:
ba:62:f1:0d:a8:6c:2f:1d:05:c4:fa:6c:1a:57:ac:
b6:56:02:b8:59:eb:69:2d:2c:05:e3:5a:44:ac:eb:
0b:dd:ae:93:74:07:24:46:98:63:c4:c9:df:77:bc:
cf:f4:57:94:af:03:d3:98:7b:fc:99:0a:a0:b9:7b:
96:1a:2d:7b:7e:b3:84:62:c8:d7:e4:15:72:ef:f2:
b5:3e:fc:d0:78:72:25:4c:1e:34:78:51:31:6f:66:
f7:f1:6f:32:8e:75:95:33:0b:d3:52:a2:e8:9d:18:
86:cb:a1:ea:55:72:40:b3:ad:3f:77:f2:4f:e3:10:
ac:2f:ad:2c:e4:db:0c:15:ea:29:56:0f:38:d5:79:
3f:a1:76:3b:fe:bb:40:db:bd:3d:44:10:d8:55:ac:
b7:ac:2b:64:98:d9:1e:03:ca:c5:17:33:ae:26:10:
8d:f2:f8:88:50:eb:aa:87:fb:05:d7:63:b1:be:6b:
fa:81:d7:45:1a:c8:e1:f2:5a:65:04:69:b1:61:6c:
7e:6c:2e:86:90:17:bc:7f:01:82:0b:97:b8:7e:24:
db:5d:8a:da:72:ee:2b:d2:00:b5:ef:85:b1:93:83:
3e:a8:e4:3c:0b:fa:2d:aa:22:08:90:61:d4:93:46:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:CF:15:60:FC:CA:BB:7F:D6:3F:D2:27:EC:0E:46:B3:DF:82:2E
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lb_PFWD8yrt_1j_SJ-wORrPfgi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
90:41:94:6a:a0:9c:55:4d:f1:4c:1b:ef:27:5c:d6:86:05:05:
b3:a8:08:c5:b1:ff:b1:d2:24:c1:f7:ea:32:38:34:08:e1:27:
0f:68:f5:96:e0:aa:62:7d:8e:39:ab:03:e3:0c:fa:37:cb:5a:
71:c8:67:24:04:c3:b2:47:7f:1b:ae:c5:06:36:78:3a:fc:f4:
cf:a2:e5:20:ee:a4:6e:70:4e:d0:a1:73:f3:7e:ef:2a:55:cb:
c3:8b:4a:0e:a4:30:48:90:bf:da:84:d2:9b:1e:05:c6:88:4d:
70:95:51:95:3e:1c:d6:f3:a6:e5:6d:fe:b2:bc:94:19:bb:2c:
47:01:c0:18:d7:b1:35:a8:b9:80:ce:aa:f5:be:1f:b1:30:12:
96:d3:0b:36:6f:9d:af:8e:89:74:2f:ba:f7:e4:90:ad:5c:d5:
3f:6a:2a:9a:df:ae:1c:f3:ae:db:d8:51:8c:3a:0d:6f:dc:45:
d1:41:5d:90:a3:f7:b0:cd:96:cb:05:7c:19:a3:ce:80:32:93:
06:d2:0c:f9:a4:9b:7c:30:55:f1:00:99:c4:21:d3:8f:04:94:
c8:13:6b:ca:cd:d5:41:0a:fa:98:37:e7:98:87:02:a4:15:8b:
55:56:ac:9a:71:ed:d8:24:a9:20:e5:0b:40:b5:db:8e:37:ef:
d8:66:b4:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWpvrPuvmf+etRdKdNqCtMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwMTEzMDYwODQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGJmY2YxNTYwZmNjYWJiN2ZkNjNmZDIyN2VjMGU0NmIzZGY4MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiWDW56S8QLBQRc54La6YvENqGwv
HQXE+mwaV6y2VgK4WetpLSwF41pErOsL3a6TdAckRphjxMnfd7zP9FeUrwPTmHv8
mQqguXuWGi17frOEYsjX5BVy7/K1PvzQeHIlTB40eFExb2b38W8yjnWVMwvTUqLo
nRiGy6HqVXJAs60/d/JP4xCsL60s5NsMFeopVg841Xk/oXY7/rtA2709RBDYVay3
rCtkmNkeA8rFFzOuJhCN8viIUOuqh/sF12Oxvmv6gddFGsjh8lplBGmxYWx+bC6G
kBe8fwGCC5e4fiTbXYracu4r0gC174Wxk4M+qOQ8C/otqiIIkGHUk0ZMrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2/zxVg/Mq7f9Y/0ifsDkaz34IuMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvTGJfUEZXRDh5cnRfMWpfU0otd09SclBmZ2k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XEWMA0G
CSqGSIb3DQEBCwUAA4IBAQCQQZRqoJxVTfFMG+8nXNaGBQWzqAjFsf+x0iTB9+oy
ODQI4ScPaPWW4KpifY45qwPjDPo3y1pxyGckBMOyR38brsUGNng6/PTPouUg7qRu
cE7QoXPzfu8qVcvDi0oOpDBIkL/ahNKbHgXGiE1wlVGVPhzW86blbf6yvJQZuyxH
AcAY17E1qLmAzqr1vh+xMBKW0ws2b52vjol0L7r35JCtXNU/aiqa364c867b2FGM
Og1v3EXRQV2Qo/ewzZbLBXwZo86AMpMG0gz5pJt8MFXxAJnEIdOPBJTIE2vKzdVB
CvqYN+eYhwKkFYtVVqyace3YJKkg5QtAtduON+/YZrSr
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:19:36 2025 by rpki-client