Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Lvn2126jFcppYzNZV0WsQUMcwRQ.roa
File: Lvn2126jFcppYzNZV0WsQUMcwRQ.roa (raw, json)
Hash identifier: KoNCC9/qhhTxucFyaLDXfsx+y2l9MTpC7vFeWU4w488=
Subject key identifier: 2E:F9:F6:D7:6E:A3:15:CA:69:63:33:59:57:45:AC:41:43:1C:C1:14
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2806BEDF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Lvn2126jFcppYzNZV0WsQUMcwRQ.roa
Signing time: Sat 01 Jan 2022 16:09:27 +0000
ROA not before: Sat 01 Jan 2022 16:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62008
IP address blocks: 92.38.36.0/23 maxlen: 24
146.120.208.0/22 maxlen: 24
2a02:128:15::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671530719 (0x2806bedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef9f6d76ea315ca696333595745ac41431cc114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:65:1d:16:51:b8:c7:f4:d9:ad:67:3d:ed:
27:d4:7a:5c:61:48:48:00:67:4a:5c:3e:fd:cf:e8:
22:fd:ee:1a:46:91:bd:ed:89:e2:59:39:8a:e5:2f:
35:2c:67:09:25:66:c4:aa:60:c5:71:ca:f8:5f:81:
80:63:96:d1:44:ae:7c:50:f1:ca:20:e3:bb:b5:5d:
92:1e:85:40:1d:ee:29:23:d4:eb:27:99:2b:e8:bf:
3c:55:69:70:e1:47:2d:1b:56:1e:8d:f8:f4:70:d3:
31:a3:e3:94:d0:bc:09:4c:0b:ab:d3:16:a9:ea:3d:
5c:07:c2:8f:61:38:5f:28:ec:0e:5f:6d:68:54:65:
9a:6f:be:04:a4:93:ec:ea:0d:c5:4a:89:a8:e9:cd:
2e:a9:81:8e:3f:c6:b0:a9:71:94:7e:aa:0e:77:74:
a5:7a:ca:fe:ed:3e:2a:27:e5:e3:0a:68:73:68:13:
5f:66:c9:cf:f7:e1:f6:c8:c0:7b:16:bb:8e:dc:cc:
1d:f9:13:5a:30:4a:5f:a8:fd:71:2c:60:7f:a6:f6:
94:67:a2:0c:75:5f:54:3c:6b:7b:d1:ce:77:0f:2c:
28:fb:48:92:a5:58:06:04:e2:1e:fd:c3:ec:9f:18:
5d:f3:a0:da:be:c4:67:6b:9d:52:fb:03:4a:d3:6a:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:F6:D7:6E:A3:15:CA:69:63:33:59:57:45:AC:41:43:1C:C1:14
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Lvn2126jFcppYzNZV0WsQUMcwRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.36.0/23
146.120.208.0/22
IPv6:
2a02:128:15::/48
Signature Algorithm: sha256WithRSAEncryption
84:08:fe:5b:df:36:9d:fd:5c:6e:5b:58:6e:4d:e9:13:80:75:
e5:7a:1b:de:4e:ba:a9:17:b3:0b:c4:14:1d:6d:1c:06:33:14:
7d:be:c4:7b:9e:6c:e3:1c:bf:e6:9a:eb:bb:a1:53:27:db:cf:
26:85:92:64:6d:47:20:5d:53:4d:ff:0b:ff:e4:c4:d8:e3:fa:
a6:35:78:f4:96:da:17:37:f9:c8:f6:18:30:3d:72:a0:c3:2a:
96:86:de:19:bf:06:06:3c:22:b4:57:50:d7:11:c7:2e:77:03:
f8:7c:45:40:01:36:10:d7:93:e9:cf:79:fb:96:17:6e:17:d9:
06:f0:c2:3a:35:93:a4:89:df:86:e7:88:c1:c8:7f:24:33:45:
bd:cb:4d:f9:fe:12:90:59:5c:77:c7:68:31:cc:06:7d:d0:2f:
2a:07:a4:1b:82:9b:10:1b:bf:31:fc:98:58:a1:0e:c8:17:2c:
a0:4f:b2:56:69:a2:fb:aa:1d:cd:5a:d3:ff:37:45:e4:ff:40:
c4:d1:11:e4:d2:8d:89:4b:71:4f:b0:fb:da:6b:6d:eb:79:c3:
c4:ff:b6:39:1c:bc:78:fc:93:5f:e3:87:70:47:86:e7:e6:19:
4d:13:8e:ee:60:f6:54:bc:4d:c5:a5:3a:c6:e8:58:5d:5f:19:
36:64:f6:8d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEKAa+3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmVmOWY2ZDc2ZWEz
MTVjYTY5NjMzMzU5NTc0NWFjNDE0MzFjYzExNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM5uZR0WUbjH9NmtZz3tJ9R6XGFISABnSlw+/c/oIv3uGkaR
ve2J4lk5iuUvNSxnCSVmxKpgxXHK+F+BgGOW0USufFDxyiDju7Vdkh6FQB3uKSPU
6yeZK+i/PFVpcOFHLRtWHo349HDTMaPjlNC8CUwLq9MWqeo9XAfCj2E4XyjsDl9t
aFRlmm++BKST7OoNxUqJqOnNLqmBjj/GsKlxlH6qDnd0pXrK/u0+Kifl4wpoc2gT
X2bJz/fh9sjAexa7jtzMHfkTWjBKX6j9cSxgf6b2lGeiDHVfVDxre9HOdw8sKPtI
kqVYBgTiHv3D7J8YXfOg2r7EZ2udUvsDStNqdf8CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQu+fbXbqMVymljM1lXRaxBQxzBFDAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0x2bjIxMjZqRmNwcFl6TlpWMFdzUVVNY3dSUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAVwmJAMEApJ40DAPBAIAAjAJAwcA
KgIBKAAVMA0GCSqGSIb3DQEBCwUAA4IBAQCECP5b3zad/VxuW1huTekTgHXlehve
TrqpF7MLxBQdbRwGMxR9vsR7nmzjHL/mmuu7oVMn288mhZJkbUcgXVNN/wv/5MTY
4/qmNXj0ltoXN/nI9hgwPXKgwyqWht4ZvwYGPCK0V1DXEccudwP4fEVAATYQ15Pp
z3n7lhduF9kG8MI6NZOkid+G54jByH8kM0W9y035/hKQWVx3x2gxzAZ90C8qB6Qb
gpsQG78x/JhYoQ7IFyygT7JWaaL7qh3NWtP/N0Xk/0DE0RHk0o2JS3FPsPvaa23r
ecPE/7Y5HLx4/JNf44dwR4bn5hlNE47uYPZUvE3FpTrG6FhdXxk2ZPaN
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:31 2025 by rpki-client