Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lapgw9f17OeX4SzlVn2Ldb0iB84.roa
File: lapgw9f17OeX4SzlVn2Ldb0iB84.roa (raw, json)
Hash identifier: DXp/szgD0pj+WRnGFpd67M8UoFR3R/jkvjFjVGW967Y=
Subject key identifier: 95:AA:60:C3:D7:F5:EC:E7:97:E1:2C:E5:56:7D:8B:75:BD:22:07:CE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01894026CBAE8A1173CADCE331968404164D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lapgw9f17OeX4SzlVn2Ldb0iB84.roa
Signing time: Mon 10 Jul 2023 14:13:51 +0000
ROA not before: Mon 10 Jul 2023 14:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 109.176.219.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
89.213.41.0/24 maxlen: 24
109.176.247.0/24 maxlen: 24
89.213.46.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
89.213.151.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:26:cb:ae:8a:11:73:ca:dc:e3:31:96:84:04:16:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 10 14:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95aa60c3d7f5ece797e12ce5567d8b75bd2207ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:eb:b6:d6:79:a0:61:93:19:34:c1:49:3d:
71:8c:63:74:b0:8a:45:22:b5:51:ef:47:24:8e:eb:
d1:51:d7:38:73:30:3b:0a:0a:0c:0b:8d:04:8a:e1:
50:dd:53:5d:01:f7:cf:73:35:39:d0:21:f1:37:37:
82:11:9b:03:2a:4b:75:3b:77:05:68:75:4f:23:0c:
58:62:86:64:a3:a6:8f:a7:b4:36:52:f5:d2:4f:ce:
d6:d1:e3:21:ea:8e:d2:80:9b:b2:7b:5a:93:52:77:
e0:a7:09:51:e0:10:28:2a:14:ea:77:29:90:cd:a6:
85:04:73:94:88:c1:17:0a:a7:3d:72:40:74:ab:e0:
7e:a6:86:33:c2:02:12:c4:b9:cf:39:1e:c1:49:97:
24:10:ae:ac:26:18:e6:cb:f4:8d:a2:c5:11:50:d8:
16:0f:a4:80:cc:a8:3a:ea:fb:9e:79:2e:42:06:11:
a7:b9:ed:be:87:d4:78:87:89:9f:91:78:5e:51:37:
fa:3d:e2:3f:e7:de:19:3d:6c:3a:15:18:7a:d1:64:
4c:ce:f7:1e:89:9a:6d:52:1c:b9:44:58:37:1a:6c:
21:86:c1:ee:15:8c:e1:7a:63:83:c4:e7:64:3a:1a:
61:6f:6c:08:e4:6b:22:29:12:03:62:5c:c9:3f:ac:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:60:C3:D7:F5:EC:E7:97:E1:2C:E5:56:7D:8B:75:BD:22:07:CE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lapgw9f17OeX4SzlVn2Ldb0iB84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.78.0/24
89.213.41.0/24
89.213.46.0/24
89.213.151.0/24
89.213.169.0-89.213.170.255
109.176.208.0/23
109.176.211.0-109.176.212.255
109.176.217.0/24
109.176.219.0/24
109.176.221.0/24
109.176.223.0/24
109.176.245.0/24
109.176.247.0/24
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:32:24:6c:02:62:42:a6:0f:58:4f:bc:94:ab:87:b3:d7:64:
0a:31:d8:23:bc:38:a1:16:cd:b0:0e:d0:06:df:70:2b:f1:7d:
ea:55:91:b2:6d:4c:6f:f2:de:0a:e2:ba:3f:ce:46:ea:74:d8:
48:3c:73:34:95:be:7b:cc:ce:2e:8b:5e:ed:b0:ff:3c:80:2e:
c9:25:17:b9:49:be:45:bc:d1:d5:21:2f:c6:3b:c6:6f:bb:a2:
db:7b:5b:b9:ea:6b:ce:4c:66:2b:3a:0c:bc:d6:07:3f:e9:47:
b9:9b:87:0b:89:b0:18:a7:ba:fb:c3:1e:6d:86:a8:e2:25:b7:
d1:ca:ab:15:62:5b:38:33:0e:f3:e6:49:1b:0c:03:93:86:e6:
34:4e:b4:36:de:c9:1e:a1:97:b4:cf:79:1b:ae:a8:76:09:ed:
d6:d4:98:da:7a:cb:37:88:17:b0:67:51:7b:30:dc:b0:c3:a2:
bd:15:16:eb:bc:b1:d3:35:ae:14:01:7c:22:08:6b:be:5d:e6:
51:01:28:19:7d:bc:ce:38:9b:3c:9e:81:81:5f:bd:48:51:1e:
bc:e6:4c:fe:24:35:be:04:2b:0d:89:f7:cc:0b:b5:ee:a2:6c:
e1:d1:9c:5d:e2:39:96:4d:81:3a:85:dd:9d:52:67:39:2e:54:
3d:78:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:11:35 2025 by rpki-client