Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/LM_EmVKXBAU4Vc_uVRHjtkX1z88.roa
File: LM_EmVKXBAU4Vc_uVRHjtkX1z88.roa (raw, json)
Hash identifier: siKQfyUuOfELK1k1CDULdSNJ987mlwTbMdhXF1qwcRE=
Subject key identifier: 2C:CF:C4:99:52:97:04:05:38:55:CF:EE:55:11:E3:B6:45:F5:CF:CF
Certificate issuer: /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Certificate serial: 01894AA235C481AD14E410B04FF539A14501
Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/LM_EmVKXBAU4Vc_uVRHjtkX1z88.roa
Signing time: Wed 12 Jul 2023 15:04:51 +0000
ROA not before: Wed 12 Jul 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61401
IP address blocks: 194.54.147.0/24 maxlen: 24
2a12:c840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:a2:35:c4:81:ad:14:e4:10:b0:4f:f5:39:a1:45:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Validity
Not Before: Jul 12 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ccfc499529704053855cfee5511e3b645f5cfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:63:b7:41:a1:15:58:c6:f0:68:5a:2a:4c:
ea:c1:58:14:6b:af:36:a5:e7:33:b9:53:63:9d:de:
b2:45:86:71:86:21:f8:64:45:9f:0a:76:da:c8:36:
05:f1:f4:11:bb:af:c9:e1:a8:b5:77:b1:22:88:83:
94:54:3e:f7:5a:28:77:91:23:34:67:b5:05:85:91:
6f:f4:68:e8:0c:6c:ef:7e:c3:1f:1f:11:f6:64:b8:
ca:f1:a5:09:5f:0e:a7:c7:21:00:03:bc:05:7e:60:
da:66:0b:9a:bf:40:b6:2e:92:4b:f5:a1:12:03:ab:
fd:12:fc:d1:b8:91:3f:16:7a:2a:7c:5c:4e:e5:e6:
78:e5:16:9e:98:8d:98:ff:73:c6:12:dc:d1:6e:de:
a6:80:eb:f5:15:88:ee:b6:42:98:6f:73:81:c5:e5:
84:03:63:7b:3b:6d:19:54:0d:ef:35:90:7f:01:8a:
13:54:6b:53:a0:df:30:9a:84:53:3e:ff:14:3a:82:
a7:3b:a0:82:73:97:57:cf:d6:0e:97:57:27:c3:81:
74:b8:01:77:01:10:2f:bf:66:b4:35:05:65:cb:de:
7d:ff:30:f2:12:c2:ef:9f:84:ce:1b:ee:51:dc:4f:
11:69:11:9f:ee:21:a9:df:05:5a:e5:e4:44:36:2a:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:C4:99:52:97:04:05:38:55:CF:EE:55:11:E3:B6:45:F5:CF:CF
X509v3 Authority Key Identifier:
keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/LM_EmVKXBAU4Vc_uVRHjtkX1z88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.147.0/24
IPv6:
2a12:c840::/29
Signature Algorithm: sha256WithRSAEncryption
2a:bd:33:d3:5b:3c:7f:39:7d:d3:e6:36:42:ce:e8:71:8d:98:
2c:c2:79:ab:11:84:6b:72:61:4f:b2:ef:f4:bc:17:5c:91:ee:
bd:0d:9e:c7:a9:dc:2f:0b:d4:52:da:d8:7d:a5:2c:e4:57:a0:
64:4e:eb:4f:9e:ec:b4:ea:ac:83:a4:61:3d:25:df:4d:52:b3:
89:33:40:35:c4:60:24:f1:10:af:13:c2:3e:2f:e2:4f:45:3d:
51:19:02:1a:48:41:10:f7:22:e4:b9:5e:fd:03:b9:b6:69:44:
64:64:ff:77:74:6d:07:bd:3a:72:03:cd:65:76:9f:0a:94:5f:
28:4e:c5:93:4f:b3:0c:06:d1:32:21:e0:de:df:59:34:23:0b:
54:2d:2b:2d:1d:92:79:b9:ca:fa:59:2c:82:ba:10:b5:98:fe:
b2:2e:be:d2:4b:bd:7f:c1:3a:6d:bc:8b:77:30:05:6e:fb:d0:
d7:d2:4c:f7:98:2c:b1:0c:b7:26:86:91:a6:8c:fb:8d:89:74:
28:6b:d6:6c:86:e8:b0:36:88:2e:bf:80:7a:85:fc:36:52:d7:
77:3f:21:3c:f4:c3:f9:0d:24:4a:ce:56:05:6d:97:11:6c:0c:
74:4a:b3:ff:71:fb:f9:85:ac:d6:c4:91:1c:10:0a:65:61:32:
a4:5e:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:54 2025 by rpki-client