Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/lycs7otCG8YaEiX_582FMSd38SQ.roa
File: lycs7otCG8YaEiX_582FMSd38SQ.roa (raw, json)
Hash identifier: wErwgzEbUUNcYEm1Nh+jl2nUc3vxco3YqVAlJYSg4ZM=
Subject key identifier: 97:27:2C:EE:8B:42:1B:C6:1A:12:25:FF:E7:CD:85:31:27:77:F1:24
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 018924F1C14ED4A4589B20DD4A04CE1F9BC5
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/lycs7otCG8YaEiX_582FMSd38SQ.roa
Signing time: Wed 05 Jul 2023 07:26:10 +0000
ROA not before: Wed 05 Jul 2023 07:26:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 94.143.208.0/21 maxlen: 24
213.108.29.0/24 maxlen: 24
185.63.20.0/22 maxlen: 24
185.61.224.0/22 maxlen: 24
62.112.224.0/19 maxlen: 24
2a00:1558::/32 maxlen: 48
2a02:27c8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:24:f1:c1:4e:d4:a4:58:9b:20:dd:4a:04:ce:1f:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jul 5 07:26:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97272cee8b421bc61a1225ffe7cd85312777f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:34:00:78:a5:51:67:36:53:9c:3f:5b:fb:
00:45:db:8f:24:4b:fb:85:5b:31:f9:0e:d2:e8:5c:
ea:c8:0e:94:0b:35:73:a8:49:85:32:9a:3b:e0:28:
29:31:32:1b:97:99:6e:2e:be:a0:24:1b:4a:84:e0:
c3:d8:3b:9f:ef:62:e6:e0:15:9c:d0:65:80:fe:dd:
bc:45:88:73:10:46:d3:f3:39:85:7b:cd:dd:2c:c0:
86:c3:25:ed:05:36:be:33:e8:85:90:0b:1a:ff:18:
84:49:67:9f:9d:23:2e:cb:19:18:11:5e:5d:9d:83:
da:57:62:42:0a:07:95:86:c6:ec:9f:61:da:7c:a3:
23:b8:7a:61:51:52:34:00:06:ca:79:8d:a0:39:63:
a6:c1:ff:aa:b4:a2:68:2d:42:e8:b5:71:3c:a5:c1:
64:0a:4e:a6:21:82:fc:9a:ba:c1:66:69:9a:de:8d:
1e:b0:69:0b:47:09:cf:49:b6:d6:b3:51:87:91:9c:
db:7b:04:e1:be:3d:82:a9:61:e7:4d:81:04:3f:5d:
1d:d3:56:80:11:b2:ae:14:1a:10:ef:17:aa:0e:cd:
4b:5c:90:0b:f2:a0:6f:d4:6c:fe:96:f5:8e:5b:0e:
09:e0:4e:c8:f6:6d:47:f5:6a:bc:4b:01:f2:fb:8f:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:2C:EE:8B:42:1B:C6:1A:12:25:FF:E7:CD:85:31:27:77:F1:24
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/lycs7otCG8YaEiX_582FMSd38SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.224.0/19
94.143.208.0/21
185.61.224.0/22
185.63.20.0/22
213.108.29.0/24
IPv6:
2a00:1558::/32
2a02:27c8::/32
Signature Algorithm: sha256WithRSAEncryption
8f:48:0f:6d:b1:5f:08:1c:e6:b0:bf:e1:df:d6:75:2d:3b:ce:
94:b3:0a:3b:52:13:74:03:11:26:26:ce:a3:d2:40:6d:5f:c5:
53:1a:9c:78:92:64:3a:71:50:9b:25:df:76:2b:66:df:8f:48:
23:d6:18:58:63:d4:c3:03:4a:4d:72:f8:ae:fc:4e:09:21:8d:
0a:69:91:51:21:c4:ad:a8:76:a2:14:7a:7a:a9:d1:db:ed:3e:
ab:b2:3d:81:74:5b:0a:d0:0c:24:3d:a5:80:af:18:20:d7:a3:
d9:57:26:a4:a4:e9:e1:15:18:7f:c1:e5:95:36:fd:fe:c2:c5:
3f:3e:0f:9b:1b:66:8e:9e:b4:9a:54:f2:b6:c3:2a:65:22:05:
4e:c1:0e:27:76:50:82:25:a0:85:22:65:71:21:48:01:b2:d6:
18:de:75:b1:c6:8b:78:06:e5:ba:44:a5:fc:f9:6c:8a:24:a3:
e1:01:0d:f0:2d:ab:e3:53:f0:c2:65:0e:cd:90:d5:46:7c:67:
fb:bd:36:1a:ff:40:19:a2:71:16:2d:ae:64:9e:56:6f:ef:89:
6e:c0:6f:82:aa:27:8f:c1:28:e4:f5:6a:82:6a:fc:e7:03:d7:
6e:6d:61:c8:c0:d8:25:ec:1f:7b:27:02:d8:66:4a:ec:4c:bd:
7d:b5:e8:4a
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYkk8cFO1KRYmyDdSgTOH5vFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDAzYzk3OTYwM2Y3Y2VhMTJhY2EwMWViYzIwNTdjMzZm
ZDdmMzAwHhcNMjMwNzA1MDcyNjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzI3MmNlZThiNDIxYmM2MWExMjI1ZmZlN2NkODUzMTI3NzdmMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvk0AHilUWc2U5w/W/sARduPJEv7
hVsx+Q7S6FzqyA6UCzVzqEmFMpo74CgpMTIbl5luLr6gJBtKhODD2Duf72Lm4BWc
0GWA/t28RYhzEEbT8zmFe83dLMCGwyXtBTa+M+iFkAsa/xiESWefnSMuyxkYEV5d
nYPaV2JCCgeVhsbsn2HafKMjuHphUVI0AAbKeY2gOWOmwf+qtKJoLULotXE8pcFk
Ck6mIYL8mrrBZmma3o0esGkLRwnPSbbWs1GHkZzbewThvj2CqWHnTYEEP10d01aA
EbKuFBoQ7xeqDs1LXJAL8qBv1Gz+lvWOWw4J4E7I9m1H9Wq8SwHy+4/gcwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFJcnLO6LQhvGGhIl/+fNhTEnd/EkMB8GA1UdIwQY
MBaAFMgAPJeWA/fOoSrKAevCBXw2/X8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMt
MDcyMjg4MTJkMDE3LzEvbHljczdvdENHOFlhRWlYXzU4MkZNU2QzOFNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMtMDcyMjg4MTJkMDE3
LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQFPnDgAwQD
Xo/QAwQCuT3gAwQCuT8UAwQA1WwdMBQEAgACMA4DBQAqABVYAwUAKgInyDANBgkq
hkiG9w0BAQsFAAOCAQEAj0gPbbFfCBzmsL/h39Z1LTvOlLMKO1ITdAMRJibOo9JA
bV/FUxqceJJkOnFQmyXfditm349II9YYWGPUwwNKTXL4rvxOCSGNCmmRUSHErah2
ohR6eqnR2+0+q7I9gXRbCtAMJD2lgK8YINej2VcmpKTp4RUYf8HllTb9/sLFPz4P
mxtmjp60mlTytsMqZSIFTsEOJ3ZQgiWghSJlcSFIAbLWGN51scaLeAblukSl/Pls
iiSj4QEN8C2r41PwwmUOzZDVRnxn+702Gv9AGaJxFi2uZJ5Wb++JbsBvgqonj8Eo
5PVqgmr85wPXbm1hyMDYJewfeycC2GZK7Ey9fbXoSg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:38 2025 by rpki-client