Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lcIEdK5-pU5YvJSt3nEvROt5eqQ.roa
File: lcIEdK5-pU5YvJSt3nEvROt5eqQ.roa (raw, json)
Hash identifier: y0wcmVFaCOaHLFZITx47uL1+7aXX4Be4dgC4g8Osehg=
Subject key identifier: 95:C2:04:74:AE:7E:A5:4E:58:BC:94:AD:DE:71:2F:44:EB:79:7A:A4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709534FD6803567559D3089E6EBD23BE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lcIEdK5-pU5YvJSt3nEvROt5eqQ.roa
Signing time: Mon 02 Jan 2023 03:45:04 +0000
ROA not before: Mon 02 Jan 2023 03:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47551
IP address blocks: 146.120.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:34:fd:68:03:56:75:59:d3:08:9e:6e:bd:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95c20474ae7ea54e58bc94adde712f44eb797aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:0a:bf:87:af:9d:aa:37:fe:15:45:cf:1e:
f8:02:3c:af:3e:7a:1e:a5:c2:53:7f:dd:40:7e:3e:
1e:77:7a:e9:1a:fc:42:4f:d6:98:0a:f8:63:85:c6:
cf:f3:b8:7a:e0:57:57:43:43:0c:c6:4b:34:38:17:
1c:28:4b:08:8d:47:54:96:fa:65:aa:3b:a0:34:d5:
b6:88:a8:6d:fc:b9:f5:d6:fd:32:24:8e:93:ca:32:
b8:52:25:3c:53:6a:ce:c2:bd:93:c6:ec:73:f1:be:
97:82:ca:35:ac:cc:32:6b:94:d4:05:01:b4:47:43:
78:69:e4:3b:f7:7b:c7:2c:52:8a:4a:88:60:e7:df:
68:80:d2:68:cd:dc:c2:85:ca:e8:ec:ba:d1:46:2a:
7b:07:05:5a:27:a3:c5:47:23:e4:0c:96:4b:2b:62:
f9:50:98:07:cc:0a:c6:f0:27:71:bf:f5:2d:a1:e2:
4a:10:11:8c:56:f3:eb:24:4a:b8:12:b9:db:c6:fd:
6b:42:94:d2:23:2d:f5:e1:49:34:a4:98:9e:c3:62:
21:1a:37:16:77:c9:da:34:18:7b:31:4d:9b:b3:f8:
29:24:2a:9c:f2:d7:34:a8:af:49:e5:e6:7a:f6:46:
d3:04:aa:54:e5:51:ce:ea:a2:84:24:76:3d:8c:f8:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:04:74:AE:7E:A5:4E:58:BC:94:AD:DE:71:2F:44:EB:79:7A:A4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lcIEdK5-pU5YvJSt3nEvROt5eqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.252.0/22
Signature Algorithm: sha256WithRSAEncryption
25:32:dc:3f:19:37:48:9f:8e:88:8b:2b:ea:ca:86:a3:21:63:
58:7d:d0:53:5b:a2:04:54:96:fa:e9:e2:66:aa:de:45:ec:a6:
ae:a2:5d:7f:50:91:27:17:1a:f5:ca:7f:09:4b:49:c5:34:d3:
d7:31:c7:2d:3b:00:e9:1c:2a:d4:73:5f:47:1c:ad:6c:4e:de:
d1:5f:9d:39:e1:ad:11:59:dd:7e:a6:17:b5:dd:42:c8:79:8a:
bb:05:f2:0d:c1:eb:11:f0:b8:3f:fa:04:a4:4a:6b:cc:e0:f9:
bd:9b:83:aa:72:f1:c8:4c:40:03:1b:09:68:57:d1:31:c7:a7:
d6:2e:97:8a:23:57:ee:18:d3:a6:a8:6a:89:69:06:e3:5f:41:
59:3a:58:8a:c9:fe:c6:94:a5:c1:ec:63:53:bc:3b:ec:47:ef:
f4:d0:17:bb:7b:b8:6a:ed:e4:a0:8c:d2:5c:bc:e3:4d:b1:44:
ec:e0:22:14:1d:75:74:7d:38:39:29:0a:5c:a5:91:10:ab:53:
33:81:ba:71:6b:8e:67:79:b1:5a:1b:77:86:33:7e:e2:f7:d9:
90:0b:55:72:21:ae:12:73:e1:87:e7:2f:3f:17:0f:fd:75:4f:
8a:5f:74:47:66:87:98:9e:a4:8a:9c:b4:67:b1:41:fb:8d:e5:
f3:d2:28:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlTT9aANWdVnTCJ5uvSO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWMyMDQ3NGFlN2VhNTRlNThiYzk0YWRkZTcxMmY0NGViNzk3YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEsKv4evnao3/hVFzx74AjyvPnoe
pcJTf91Afj4ed3rpGvxCT9aYCvhjhcbP87h64FdXQ0MMxks0OBccKEsIjUdUlvpl
qjugNNW2iKht/Ln11v0yJI6TyjK4UiU8U2rOwr2Txuxz8b6Xgso1rMwya5TUBQG0
R0N4aeQ793vHLFKKSohg599ogNJozdzChcro7LrRRip7BwVaJ6PFRyPkDJZLK2L5
UJgHzArG8Cdxv/UtoeJKEBGMVvPrJEq4Ernbxv1rQpTSIy314Uk0pJiew2IhGjcW
d8naNBh7MU2bs/gpJCqc8tc0qK9J5eZ69kbTBKpU5VHO6qKEJHY9jPjaTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXCBHSufqVOWLyUrd5xL0TreXqkMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvbGNJRWRLNS1wVTVZdkpTdDNuRXZST3Q1ZXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCknj8MA0G
CSqGSIb3DQEBCwUAA4IBAQAlMtw/GTdIn46IiyvqyoajIWNYfdBTW6IEVJb66eJm
qt5F7Kauol1/UJEnFxr1yn8JS0nFNNPXMcctOwDpHCrUc19HHK1sTt7RX5054a0R
Wd1+phe13ULIeYq7BfINwesR8Lg/+gSkSmvM4Pm9m4OqcvHITEADGwloV9Exx6fW
LpeKI1fuGNOmqGqJaQbjX0FZOliKyf7GlKXB7GNTvDvsR+/00Be7e7hq7eSgjNJc
vONNsUTs4CIUHXV0fTg5KQpcpZEQq1Mzgbpxa45nebFaG3eGM37i99mQC1VyIa4S
c+GH5y8/Fw/9dU+KX3RHZoeYnqSKnLRnsUH7jeXz0igy
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:15 2025 by rpki-client