Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/LvYn9S4Z6GYMhj_KHnjgB82y9po.roa
File: LvYn9S4Z6GYMhj_KHnjgB82y9po.roa (raw, json)
Hash identifier: bseWaekPnExdsis498ErPlxTouVmXUVK7NLUw2xVH4M=
Subject key identifier: 2E:F6:27:F5:2E:19:E8:66:0C:86:3F:CA:1E:78:E0:07:CD:B2:F6:9A
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 018452562D72EB7183266B73663DE1EDE641
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/LvYn9S4Z6GYMhj_KHnjgB82y9po.roa
Signing time: Mon 07 Nov 2022 13:44:50 +0000
ROA not before: Mon 07 Nov 2022 13:44:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 195.13.61.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:56:2d:72:eb:71:83:26:6b:73:66:3d:e1:ed:e6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Nov 7 13:44:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef627f52e19e8660c863fca1e78e007cdb2f69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:be:22:3d:f0:cd:29:70:fb:16:10:36:39:
8c:3c:a0:d9:c2:a1:e2:ec:fb:1f:9e:cf:1e:ae:06:
0e:3c:cf:f6:57:3d:3c:1f:23:26:3a:14:bd:a8:13:
17:ae:bf:ab:b9:33:a7:9d:b1:8b:e8:29:ae:06:eb:
5f:f3:f0:68:09:ce:c5:2b:5d:1d:9d:f2:a4:12:06:
82:78:b4:ff:0c:9e:06:89:b2:1b:00:e5:da:52:7d:
a3:05:04:56:07:08:94:b7:f3:d0:48:28:84:5c:53:
72:bc:db:10:6b:5b:ab:30:3f:7b:6b:45:42:6a:a9:
b5:e1:b7:ed:ec:a4:b9:71:68:a8:f0:e9:c0:3b:fc:
08:cb:d4:22:79:1d:5a:25:97:6c:2b:0b:c3:5b:e8:
ee:6f:09:09:00:e7:63:7f:fd:1b:df:8f:0c:9a:46:
6d:84:00:5f:d5:dd:89:af:19:cb:eb:c9:d9:f4:ad:
19:31:fc:ef:46:39:e6:bf:83:21:67:18:8d:a4:4b:
a2:72:e2:bc:73:16:c6:a3:bd:0b:c0:f7:bf:8a:47:
22:76:76:4e:ab:50:22:ca:bc:8a:1c:c3:ef:43:8a:
cb:78:d5:b1:0e:cc:a2:04:e8:09:3b:ce:65:bf:e2:
cd:9d:56:60:fa:04:2e:20:3e:ba:fc:9d:c8:4c:30:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:27:F5:2E:19:E8:66:0C:86:3F:CA:1E:78:E0:07:CD:B2:F6:9A
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/LvYn9S4Z6GYMhj_KHnjgB82y9po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.61.0/24
195.13.63.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4f:db:c8:cd:29:05:f5:c9:e5:91:5b:f7:60:91:14:7b:3e:
1f:95:8b:9e:18:6f:7b:97:18:5e:d5:d4:32:62:85:6b:6a:39:
af:56:0a:61:15:70:76:53:9c:a5:2a:98:af:44:d3:72:e3:be:
a9:17:5b:83:80:5b:d9:a0:fc:7d:7d:f2:3f:36:67:71:ce:9a:
78:4f:99:97:98:26:0e:59:f1:fb:43:9a:7f:f9:bb:61:6c:c6:
30:6e:64:44:5f:f6:f4:19:c8:41:17:12:4c:d9:f7:28:a6:e2:
11:df:03:bf:4b:c3:d4:2d:4e:ac:36:eb:53:dc:41:a6:33:11:
82:a9:4b:d4:23:b4:c5:cf:24:25:a7:32:24:a1:88:86:54:92:
0f:91:cc:ef:5e:85:8c:3b:35:66:80:ed:86:ae:75:eb:b3:b6:
46:dd:d7:8f:83:de:c3:4e:c6:a2:a1:46:6b:d0:10:f0:f2:6a:
f0:1a:05:d5:50:82:b3:6e:9b:06:e0:76:cf:fb:e8:8e:5f:9c:
aa:da:19:63:c7:a0:1e:ec:3c:dc:a3:48:31:a2:df:d0:4d:3c:
4b:9a:eb:55:72:66:d1:42:5f:73:09:da:b1:da:42:6e:a3:ed:
ab:c4:9e:4e:03:b9:45:69:10:15:54:13:90:b4:7d:35:1d:84:
d3:53:be:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRSVi1y63GDJmtzZj3h7eZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4
MjRjMjgwHhcNMjIxMTA3MTM0NDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWY2MjdmNTJlMTllODY2MGM4NjNmY2ExZTc4ZTAwN2NkYjJmNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1a+Ij3wzSlw+xYQNjmMPKDZwqHi
7Psfns8ergYOPM/2Vz08HyMmOhS9qBMXrr+ruTOnnbGL6CmuButf8/BoCc7FK10d
nfKkEgaCeLT/DJ4GibIbAOXaUn2jBQRWBwiUt/PQSCiEXFNyvNsQa1urMD97a0VC
aqm14bft7KS5cWio8OnAO/wIy9QieR1aJZdsKwvDW+jubwkJAOdjf/0b348MmkZt
hABf1d2JrxnL68nZ9K0ZMfzvRjnmv4MhZxiNpEuicuK8cxbGo70LwPe/ikcidnZO
q1AiyryKHMPvQ4rLeNWxDsyiBOgJO85lv+LNnVZg+gQuID66/J3ITDBNUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC72J/UuGehmDIY/yh544AfNsvaaMB8GA1UdIwQY
MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt
YTc4MzQxMzA5OWQzLzEvTHZZbjlTNFo2R1lNaGpfS0huamdCODJ5OXBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz
LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAww09AwQA
ww0/MA0GCSqGSIb3DQEBCwUAA4IBAQAmT9vIzSkF9cnlkVv3YJEUez4flYueGG97
lxhe1dQyYoVrajmvVgphFXB2U5ylKpivRNNy476pF1uDgFvZoPx9ffI/Nmdxzpp4
T5mXmCYOWfH7Q5p/+bthbMYwbmREX/b0GchBFxJM2fcopuIR3wO/S8PULU6sNutT
3EGmMxGCqUvUI7TFzyQlpzIkoYiGVJIPkczvXoWMOzVmgO2GrnXrs7ZG3dePg97D
TsaioUZr0BDw8mrwGgXVUIKzbpsG4HbP++iOX5yq2hljx6Ae7Dzco0gxot/QTTxL
mutVcmbRQl9zCdqx2kJuo+2rxJ5OA7lFaRAVVBOQtH01HYTTU75W
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:31:20 2025 by rpki-client