Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/lMQ2xGonLCUGJjm5hJkQlVTVNHQ.roa
File: lMQ2xGonLCUGJjm5hJkQlVTVNHQ.roa (raw, json)
Hash identifier: AimT0zRAZkDH4G6g6KnK9U45BVnDiQ4tLBFsgR4wJz8=
Subject key identifier: 94:C4:36:C4:6A:27:2C:25:06:26:39:B9:84:99:10:95:54:D5:34:74
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01841EE452D7912DD223844BAD5136998B4A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/lMQ2xGonLCUGJjm5hJkQlVTVNHQ.roa
Signing time: Fri 28 Oct 2022 13:59:50 +0000
ROA not before: Fri 28 Oct 2022 13:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
188.130.232.0/24 maxlen: 24
188.130.254.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:e4:52:d7:91:2d:d2:23:84:4b:ad:51:36:99:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 28 13:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94c436c46a272c25062639b98499109554d53474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:29:1c:e4:d6:9b:a1:4c:6f:34:48:dc:a9:
61:78:36:9a:ec:a5:4a:8c:23:54:b3:27:d3:47:dd:
fe:ed:05:e8:07:b4:e7:dc:7e:c1:73:f2:ee:0d:15:
bd:4f:79:e3:2c:85:89:04:99:eb:5b:fb:15:74:d2:
cd:35:a8:13:f5:a2:e0:cf:9a:69:ea:5a:94:24:24:
05:2d:21:31:3c:12:3d:15:c8:59:cf:98:d8:65:96:
4d:6c:34:69:0f:cf:93:1b:aa:05:34:44:12:59:b9:
56:05:c5:9b:89:50:8f:1d:e7:13:3d:40:4b:6f:92:
3c:83:ae:64:42:f2:fe:9d:4c:5c:a5:88:fc:1f:11:
41:47:fa:e9:0a:af:83:4f:72:6a:1a:57:2b:97:52:
3d:0e:05:35:b5:ed:f3:a7:a9:a6:2c:14:a5:b2:45:
c9:a3:b4:43:67:a7:a2:94:3f:cd:02:0a:e2:c6:84:
be:a7:a3:ab:f9:cf:cc:f0:f3:33:b5:c4:4b:d3:d5:
80:57:e0:f3:04:37:73:73:35:60:27:3b:8f:2c:68:
c2:96:67:2f:b2:c7:4a:3f:7c:40:ee:b1:88:7d:ea:
88:c5:aa:37:38:7c:0f:37:45:ac:a2:5c:f0:0f:0e:
6c:1a:3e:0b:51:21:c8:32:5f:2c:09:c1:f9:03:6c:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:36:C4:6A:27:2C:25:06:26:39:B9:84:99:10:95:54:D5:34:74
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/lMQ2xGonLCUGJjm5hJkQlVTVNHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
188.130.232.0/24
188.130.254.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
5a:77:a9:00:f4:78:42:68:41:4a:41:4a:10:3c:83:25:c7:ac:
0f:5a:31:d5:bb:3c:3a:93:e4:83:09:95:9e:6f:bf:df:3d:2b:
6e:49:eb:25:67:21:34:1c:7a:10:ff:1d:0a:c4:06:1d:2e:a8:
28:0b:ff:b7:ac:b6:1d:9e:d9:e6:88:b0:9d:4d:66:a1:9c:d0:
9d:33:1a:36:3a:42:6b:69:e1:82:b6:7a:d5:c2:5c:c5:cd:d2:
47:46:80:87:ba:c6:35:ef:88:fe:1b:70:9f:72:03:93:12:a6:
dd:4a:3f:a0:cd:c1:c8:47:27:f6:cd:5c:8f:19:90:72:4d:8c:
f7:b5:ec:4b:9f:17:48:8b:1a:f3:4f:9a:80:71:0f:cd:b9:78:
20:2b:64:4a:54:87:25:bd:da:39:8a:11:50:33:98:7e:69:df:
6f:0a:68:1b:54:25:af:4c:2b:09:10:2a:31:af:47:fd:0d:b5:
ee:92:d8:e1:a9:6a:95:f1:ce:26:3c:c1:96:4d:f7:98:ba:7f:
52:7a:59:24:9e:a8:3a:cb:af:5c:6f:e8:b6:f4:4a:14:9a:01:
11:6f:6d:ed:1a:fd:f7:fd:23:92:46:29:e4:bb:85:62:ae:b6:
b9:af:6f:f6:4e:26:89:2d:bf:50:b7:16:9e:5e:ef:aa:bd:cb:
0c:18:19:d4
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYQe5FLXkS3SI4RLrVE2mYtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjIxMDI4MTM1OTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGM0MzZjNDZhMjcyYzI1MDYyNjM5Yjk4NDk5MTA5NTU0ZDUzNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkMpHOTWm6FMbzRI3KlheDaa7KVK
jCNUsyfTR93+7QXoB7Tn3H7Bc/LuDRW9T3njLIWJBJnrW/sVdNLNNagT9aLgz5pp
6lqUJCQFLSExPBI9FchZz5jYZZZNbDRpD8+TG6oFNEQSWblWBcWbiVCPHecTPUBL
b5I8g65kQvL+nUxcpYj8HxFBR/rpCq+DT3JqGlcrl1I9DgU1te3zp6mmLBSlskXJ
o7RDZ6eilD/NAgrixoS+p6Or+c/M8PMztcRL09WAV+DzBDdzczVgJzuPLGjClmcv
ssdKP3xA7rGIfeqIxao3OHwPN0WsolzwDw5sGj4LUSHIMl8sCcH5A2zqcQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJTENsRqJywlBiY5uYSZEJVU1TR0MB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvbE1RMnhHb25MQ1VHSmptNWhKa1FsVlRWTkhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAvIK2AwQA
vILoAwQAvIL+AwQAw9M1MA0EAgACMAcDBQAgARRoMA0GCSqGSIb3DQEBCwUAA4IB
AQBad6kA9HhCaEFKQUoQPIMlx6wPWjHVuzw6k+SDCZWeb7/fPStuSeslZyE0HHoQ
/x0KxAYdLqgoC/+3rLYdntnmiLCdTWahnNCdMxo2OkJraeGCtnrVwlzFzdJHRoCH
usY174j+G3CfcgOTEqbdSj+gzcHIRyf2zVyPGZByTYz3texLnxdIixrzT5qAcQ/N
uXggK2RKVIclvdo5ihFQM5h+ad9vCmgbVCWvTCsJECoxr0f9DbXuktjhqWqV8c4m
PMGWTfeYun9Selkknqg6y69cb+i29EoUmgERb23tGv33/SOSRinku4Virra5r2/2
TiaJLb9QtxaeXu+qvcsMGBnU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org