Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/lHmxGv3CHlPDXdxEDm-alJfoqgc.roa
File: lHmxGv3CHlPDXdxEDm-alJfoqgc.roa (raw, json)
Hash identifier: v2j/xxuWXANeSUuHnvwzOxmtWyT/5fgeMwyqJNfXSV4=
Subject key identifier: 94:79:B1:1A:FD:C2:1E:53:C3:5D:DC:44:0E:6F:9A:94:97:E8:AA:07
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 683A05
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/lHmxGv3CHlPDXdxEDm-alJfoqgc.roa
Signing time: Sat 01 Jan 2022 03:56:54 +0000
ROA not before: Sat 01 Jan 2022 03:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54103
IP address blocks: 195.128.163.0/24 maxlen: 24
195.128.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6830597 (0x683a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Jan 1 03:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9479b11afdc21e53c35ddc440e6f9a9497e8aa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:ff:bb:b0:8e:d6:da:e8:a5:21:4b:ab:89:
73:e5:69:20:7c:fb:7c:60:88:77:7e:16:c7:b4:ca:
1d:5d:8c:ff:3a:37:a4:6b:37:5e:b4:33:d1:5d:13:
6c:e6:89:c0:3a:16:29:40:ad:c8:62:d8:0b:3c:6d:
60:9b:e4:83:c6:b2:36:65:3e:b3:63:ab:ac:fb:44:
e9:82:5a:f0:fd:0c:77:b1:ce:e5:39:93:1e:a7:66:
97:fb:2a:1b:f5:cf:0c:e3:e1:f8:c1:d3:e1:cb:82:
7f:74:de:13:15:a5:05:5a:45:28:5e:77:51:4e:30:
dd:d9:73:2b:38:e6:ff:32:b3:8e:d1:f7:2a:54:ff:
5b:9b:2a:8d:8e:9a:20:1c:cb:74:75:2e:76:ab:04:
54:81:2e:10:96:55:c5:87:83:bc:27:a0:be:ec:a9:
7b:34:3f:6c:bf:23:e6:92:61:a8:78:e6:98:e9:fb:
6a:8e:2b:6e:aa:36:27:b0:83:fc:e4:b8:2e:d6:fd:
f5:1d:b9:30:ce:10:40:2e:bf:38:1c:7b:6f:7d:a2:
6a:30:a7:78:60:dc:80:68:f1:39:98:4a:16:da:e4:
91:a7:ef:d7:a5:c5:5f:e8:1a:10:dc:e3:af:4d:4b:
be:70:c2:f8:52:28:4c:36:86:a7:ce:fb:38:11:2a:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:B1:1A:FD:C2:1E:53:C3:5D:DC:44:0E:6F:9A:94:97:E8:AA:07
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/lHmxGv3CHlPDXdxEDm-alJfoqgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.163.0/24
195.128.179.0/24
Signature Algorithm: sha256WithRSAEncryption
32:92:04:7e:6e:bb:13:fa:6d:68:63:cb:d7:ac:8c:dc:5f:bb:
96:eb:fe:b9:ab:93:ef:80:1b:5e:b8:85:96:13:01:2b:9e:36:
e3:7c:96:9d:72:40:e4:a3:e2:a8:af:8c:b3:f5:a3:21:59:5e:
ad:e1:32:f9:a6:d8:0b:4b:b2:02:5f:1b:4c:47:a6:10:ae:2b:
b7:c0:14:6c:a0:21:59:2b:a2:f5:99:3b:b4:c7:15:6a:db:cf:
d8:0a:0f:76:eb:f7:28:15:2b:a7:b3:00:89:63:6a:8e:56:b2:
2a:48:43:d1:67:bd:10:f1:6c:e4:c9:ac:87:2f:f5:aa:01:e8:
38:f9:9d:12:16:93:5d:d9:75:f3:49:19:b2:7f:8b:bf:8d:b8:
00:77:34:04:9b:d5:5e:16:5b:71:66:bd:8b:cd:e6:3c:79:08:
b0:c6:d2:be:2e:71:9b:be:e0:a0:6d:93:1c:48:a4:01:6f:43:
74:d9:7a:6d:ba:56:dc:09:ab:35:b6:82:9a:87:fd:ea:8c:c5:
0b:7f:3f:bc:46:52:2b:09:46:8c:1d:db:29:65:2b:cf:12:61:
46:6f:4d:13:ac:1b:61:67:09:40:57:3d:82:ff:f8:27:4a:da:
e3:eb:52:7a:9d:5f:69:1c:40:b4:00:7c:99:c4:8c:30:20:70:
c6:42:5f:e1
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDaDoFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
OTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFmMzg5ZjUwHhcNMjIwMTAx
MDM1NjU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5NDc5YjExYWZkYzIx
ZTUzYzM1ZGRjNDQwZTZmOWE5NDk3ZThhYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqar/u7CO1tropSFLq4lz5WkgfPt8YIh3fhbHtModXYz/Ojek
azdetDPRXRNs5onAOhYpQK3IYtgLPG1gm+SDxrI2ZT6zY6us+0Tpglrw/Qx3sc7l
OZMep2aX+yob9c8M4+H4wdPhy4J/dN4TFaUFWkUoXndRTjDd2XMrOOb/MrOO0fcq
VP9bmyqNjpogHMt0dS52qwRUgS4QllXFh4O8J6C+7Kl7ND9svyPmkmGoeOaY6ftq
jituqjYnsIP85Lgu1v31HbkwzhBALr84HHtvfaJqMKd4YNyAaPE5mEoW2uSRp+/X
pcVf6BoQ3OOvTUu+cML4UihMNoanzvs4ESqjKQIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFJR5sRr9wh5Tw13cRA5vmpSX6KoHMB8GA1UdIwQYMBaAFEGWIw5Y3swMvPsV
9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3LzEv
bEhteEd2M0NIbFBEWGR4RURtLWFsSmZvcWdjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9k
YTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3LzEvUVpZakRsamV6QXk4
LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4CjAwQAw4CzMA0GCSqGSIb3DQEB
CwUAA4IBAQAykgR+brsT+m1oY8vXrIzcX7uW6/65q5PvgBteuIWWEwErnjbjfJad
ckDko+Kor4yz9aMhWV6t4TL5ptgLS7ICXxtMR6YQriu3wBRsoCFZK6L1mTu0xxVq
28/YCg926/coFSunswCJY2qOVrIqSEPRZ70Q8WzkyayHL/WqAeg4+Z0SFpNd2XXz
SRmyf4u/jbgAdzQEm9VeFltxZr2LzeY8eQiwxtK+LnGbvuCgbZMcSKQBb0N02Xpt
ulbcCas1toKah/3qjMULfz+8RlIrCUaMHdspZSvPEmFGb00TrBthZwlAVz2C//gn
Strj61J6nV9pHEC0AHyZxIwwIHDGQl/h
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:56 2025 by rpki-client