Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/LepWSIHCK2szVxqZd6ha4IiSbJQ.roa
File: LepWSIHCK2szVxqZd6ha4IiSbJQ.roa (raw, json)
Hash identifier: Klw7Pf9pyoG6YBePUKi+C874xNeyV29/zkKi9XraUv8=
Subject key identifier: 2D:EA:56:48:81:C2:2B:6B:33:57:1A:99:77:A8:5A:E0:88:92:6C:94
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 1BA672F5
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/LepWSIHCK2szVxqZd6ha4IiSbJQ.roa
Signing time: Tue 15 Mar 2022 15:16:04 +0000
ROA not before: Tue 15 Mar 2022 15:16:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47631
IP address blocks: 93.187.226.0/24 maxlen: 24
93.187.224.0/21 maxlen: 21
93.187.225.0/24 maxlen: 24
93.187.224.0/24 maxlen: 24
93.187.228.0/24 maxlen: 24
93.187.227.0/24 maxlen: 24
93.187.231.0/24 maxlen: 24
93.187.230.0/24 maxlen: 24
93.187.229.0/24 maxlen: 24
185.34.124.0/24 maxlen: 24
185.34.127.0/24 maxlen: 24
2a00:9460::/32 maxlen: 32
2a00:9461::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463893237 (0x1ba672f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Mar 15 15:16:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dea564881c22b6b33571a9977a85ae088926c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:0c:64:bf:37:8b:50:e1:51:4d:0a:10:6b:
88:d4:ae:2a:4d:c3:0a:e8:ae:35:e5:97:82:cb:a5:
11:97:67:f4:32:bb:74:31:c9:86:61:a0:0d:3b:85:
61:22:8d:b4:c0:34:c9:c0:65:85:dd:c1:47:4c:f9:
9d:32:c3:5c:56:65:f1:46:7b:cf:a6:7e:cd:9f:55:
21:14:b1:85:d8:aa:40:38:f0:25:74:53:15:ed:1c:
5d:2f:03:01:06:92:fa:e4:6c:16:3f:fe:43:96:aa:
cc:3a:69:fb:fb:23:93:a1:31:46:e7:5d:54:9c:28:
06:0a:2a:7b:d7:03:19:5e:8d:fc:3e:05:16:be:28:
33:bc:72:a2:e0:16:e4:bd:9a:c9:82:67:04:c3:11:
a7:c4:f7:67:e7:0e:3d:17:12:0d:4c:c3:35:76:ed:
e8:c6:04:74:75:de:5c:92:62:44:6c:5f:23:78:84:
ef:a0:3a:4f:5f:4c:4e:ac:03:2c:95:18:3f:33:93:
9b:15:10:59:f7:74:98:e4:cf:64:46:c5:e5:40:2a:
bd:4d:b3:42:ff:ba:c2:34:09:18:26:59:70:39:ee:
9b:cc:84:21:58:59:24:07:e3:82:4f:42:72:5c:7a:
4a:64:25:2e:28:bb:da:3b:7f:43:7b:61:dc:5b:7a:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EA:56:48:81:C2:2B:6B:33:57:1A:99:77:A8:5A:E0:88:92:6C:94
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/LepWSIHCK2szVxqZd6ha4IiSbJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.224.0/21
185.34.124.0/24
185.34.127.0/24
IPv6:
2a00:9460::/31
Signature Algorithm: sha256WithRSAEncryption
1b:35:24:35:3e:34:5d:99:d7:f2:b7:2f:37:06:a1:2f:0d:7d:
4e:6f:88:56:21:24:cc:f9:7e:cd:9a:5d:6a:bc:61:ef:c5:2b:
4c:06:b0:3d:da:7b:1d:e4:56:e2:9a:6b:cb:db:77:2f:9d:6a:
cf:14:6b:7a:8a:5b:5a:a4:8f:ea:d0:23:ae:28:0e:f9:c0:a7:
74:2a:8b:78:42:1d:df:c5:c5:d1:14:4b:a9:8f:00:02:c5:13:
f9:17:2a:24:2c:74:87:ed:3c:67:9d:0b:b3:ba:f5:09:e8:b8:
07:5a:40:f8:88:0d:1f:b3:92:0d:a4:f9:98:22:98:bb:ff:96:
8f:c4:bf:94:81:7b:b2:f0:a1:48:a7:37:51:d2:af:48:dc:b7:
b1:05:4d:3a:93:85:c4:fd:fd:b8:c0:64:a2:2e:77:78:72:01:
80:4f:ce:1a:46:c1:8b:45:53:e5:4e:59:1b:f3:69:ad:29:86:
01:c9:e7:b6:6d:54:c8:b5:52:62:45:56:8c:d6:4e:0b:cd:34:
e1:e3:65:4a:49:b3:8e:37:54:29:79:a8:9b:62:9b:7e:5e:cf:
b3:59:5e:72:98:01:13:89:f4:c2:f1:9d:69:2a:eb:ba:8d:f5:
4b:a2:de:49:08:14:2d:c4:40:5b:8f:86:f4:7e:0b:b3:bf:09:
a5:31:dc:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:11 2025 by rpki-client