Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/LKQ_sUgUvfKu77yWK27HBA4Iolc.roa
File: LKQ_sUgUvfKu77yWK27HBA4Iolc.roa (raw, json)
Hash identifier: IUN7xaKipn60wiAvbzsUqC1IzrIuLeO3htqjYF4CkCQ=
Subject key identifier: 2C:A4:3F:B1:48:14:BD:F2:AE:EF:BC:96:2B:6E:C7:04:0E:08:A2:57
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 03D1E3B9
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/LKQ_sUgUvfKu77yWK27HBA4Iolc.roa
Signing time: Sat 01 Jan 2022 11:00:25 +0000
ROA not before: Sat 01 Jan 2022 11:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201193
IP address blocks: 45.143.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64086969 (0x3d1e3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jan 1 11:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ca43fb14814bdf2aeefbc962b6ec7040e08a257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:11:fc:0f:09:53:15:d4:36:cf:39:6f:aa:
1b:8c:12:26:ea:7e:2c:55:53:2e:25:54:fa:b6:f1:
1f:85:cd:8a:67:27:07:cd:06:01:94:83:2e:73:03:
58:5e:c7:95:1d:14:4f:cd:60:c6:57:be:4c:1c:de:
98:99:bf:7d:53:74:20:3f:aa:30:9a:ec:e7:8e:00:
61:3b:90:23:b2:ce:58:0d:ba:8c:4a:e2:15:62:13:
46:43:c3:c9:78:9e:5b:0c:b8:18:0a:ff:8d:07:84:
55:42:a1:3a:de:8d:be:f0:64:ea:8e:7a:14:6a:9d:
40:db:43:68:d3:69:98:96:6a:bc:db:b3:01:9b:6a:
1e:61:17:72:b8:92:a2:b2:32:11:75:02:57:73:7b:
a6:ee:c0:df:ab:40:80:ee:7e:37:d8:6f:bc:c4:fe:
4d:32:21:e9:d1:c1:5e:80:e7:82:d8:48:1b:1d:0f:
3e:3a:9e:62:60:45:9e:83:c5:c7:36:90:e5:f7:c6:
55:34:e8:56:f3:1b:14:fd:b9:1b:03:85:d1:64:cd:
dc:86:29:b9:ed:8e:c3:de:79:8b:68:99:80:2e:30:
84:98:39:e5:58:7f:56:60:79:53:d8:4e:de:51:c2:
ef:66:ab:03:db:f7:e0:d5:86:46:a7:ab:91:cc:e3:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:3F:B1:48:14:BD:F2:AE:EF:BC:96:2B:6E:C7:04:0E:08:A2:57
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/LKQ_sUgUvfKu77yWK27HBA4Iolc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:c3:a1:85:bf:12:07:66:c1:5d:7b:03:3f:80:6b:3d:4b:59:
65:c5:b2:e2:bf:2f:cb:c8:fd:be:a9:02:0a:72:b5:88:f0:14:
a1:72:e7:ca:84:52:76:9e:c9:e6:35:73:12:5e:41:08:89:72:
4e:39:eb:2e:21:3a:ee:bd:2a:9a:be:e6:08:ff:c9:dd:a0:97:
6e:21:50:25:f1:77:c3:0a:f9:8b:86:7b:25:b5:d3:fb:ba:eb:
31:ce:7f:54:24:53:e9:13:c8:9d:7e:60:c7:d0:54:11:c6:47:
c2:ba:d2:b7:b7:ff:f5:50:30:d4:3f:8b:3c:92:e9:44:da:11:
e4:7e:db:97:dd:79:0e:7f:dd:d2:21:31:78:e0:de:59:f6:35:
e0:93:3d:5c:5a:fa:af:8d:9f:e7:ba:ab:e0:02:1b:78:51:af:
72:b0:d5:7a:66:25:4a:af:23:82:ac:99:8a:f0:94:f6:45:7b:
e0:bf:12:da:81:df:2a:e0:a1:d0:d6:0d:b9:14:1a:d5:61:eb:
df:d8:45:09:90:46:a9:4f:62:58:82:f2:cf:68:bf:3f:35:b7:
07:a3:f1:31:9b:93:fb:3d:87:39:58:ff:53:79:35:ba:7b:6d:
d5:e2:54:1e:70:49:f2:9d:f5:55:38:65:9b:27:35:ed:c5:9b:
cb:05:ac:34
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA9HjuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTQyODRiOTQzMjVmNTA2MGY4YTBlODdjMWJlMjgyNzc4OGYxOGY5MB4XDTIyMDEw
MTExMDAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmNhNDNmYjE0ODE0
YmRmMmFlZWZiYzk2MmI2ZWM3MDQwZTA4YTI1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKArEfwPCVMV1DbPOW+qG4wSJup+LFVTLiVU+rbxH4XNimcn
B80GAZSDLnMDWF7HlR0UT81gxle+TBzemJm/fVN0ID+qMJrs544AYTuQI7LOWA26
jEriFWITRkPDyXieWwy4GAr/jQeEVUKhOt6NvvBk6o56FGqdQNtDaNNpmJZqvNuz
AZtqHmEXcriSorIyEXUCV3N7pu7A36tAgO5+N9hvvMT+TTIh6dHBXoDngthIGx0P
PjqeYmBFnoPFxzaQ5ffGVTToVvMbFP25GwOF0WTN3IYpue2Ow955i2iZgC4whJg5
5Vh/VmB5U9hO3lHC72arA9v34NWGRqerkczj05ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQspD+xSBS98q7vvJYrbscEDgiiVzAfBgNVHSMEGDAWgBTZQoS5QyX1Bg+K
DofBvigneI8Y+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJVS0V1VU1sOVFZUGlnNkh3YjRvSjNpUEdQay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvYTI0MDk1LTA5MDgtNDg4NC05MjQ0LTk1ZDU5NDY1ZTlhOC8x
L0xLUV9zVWdVdmZLdTc3eVdLMjdIQkE0SW9sYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
YTI0MDk1LTA5MDgtNDg4NC05MjQ0LTk1ZDU5NDY1ZTlhOC8xLzJVS0V1VU1sOVFZ
UGlnNkh3YjRvSjNpUEdQay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2PVDANBgkqhkiG9w0BAQsFAAOC
AQEAD8Ohhb8SB2bBXXsDP4BrPUtZZcWy4r8vy8j9vqkCCnK1iPAUoXLnyoRSdp7J
5jVzEl5BCIlyTjnrLiE67r0qmr7mCP/J3aCXbiFQJfF3wwr5i4Z7JbXT+7rrMc5/
VCRT6RPInX5gx9BUEcZHwrrSt7f/9VAw1D+LPJLpRNoR5H7bl915Dn/d0iExeODe
WfY14JM9XFr6r42f57qr4AIbeFGvcrDVemYlSq8jgqyZivCU9kV74L8S2oHfKuCh
0NYNuRQa1WHr39hFCZBGqU9iWILyz2i/PzW3B6PxMZuT+z2HOVj/U3k1untt1eJU
HnBJ8p31VThlmyc17cWbywWsNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:41 2024 by rpki-client on console-ams.rpki-client.org