Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/lx7L4Sw_bEv2FAWeqvQQUPYUYNM.roa
File: lx7L4Sw_bEv2FAWeqvQQUPYUYNM.roa (raw, json)
Hash identifier: rQyhemW0WEnsRScAjbm9dGHRqyQ0Xi0uvgCxRly8CrQ=
Subject key identifier: 97:1E:CB:E1:2C:3F:6C:4B:F6:14:05:9E:AA:F4:10:50:F6:14:60:D3
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 0C2ED03B
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/lx7L4Sw_bEv2FAWeqvQQUPYUYNM.roa
Signing time: Sat 01 Jan 2022 06:54:03 +0000
ROA not before: Sat 01 Jan 2022 06:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20649
IP address blocks: 188.132.169.0/24 maxlen: 24
188.132.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204394555 (0xc2ed03b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 06:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=971ecbe12c3f6c4bf614059eaaf41050f61460d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:b0:a8:a6:72:b9:7d:ee:d7:3f:b4:cf:28:
b9:56:8f:cb:31:f5:fe:d6:4f:45:13:8a:4c:15:b2:
c6:99:87:b0:5e:44:23:47:27:2f:3b:45:09:b2:f8:
1d:00:7a:18:9c:83:d1:9f:60:84:c9:1d:bb:e6:16:
1f:ce:08:9e:2a:0c:16:6f:5e:42:51:bc:4d:d3:b7:
c5:25:e1:be:a3:70:12:31:fa:2d:c7:9e:3a:74:5b:
db:b7:ba:b4:a9:d0:c4:19:ac:02:f8:95:06:22:08:
d9:49:4a:52:61:fc:b8:5f:19:be:60:cc:07:01:86:
ca:1a:94:70:bd:6a:64:d2:ae:22:51:c3:ba:ea:e0:
b7:d5:df:7e:65:af:eb:a2:92:a3:7b:9e:f5:a0:1d:
5d:81:10:a2:d1:4b:1c:a9:b0:55:a9:93:12:cb:79:
e2:53:3d:ce:76:61:21:d0:d1:db:88:e5:3c:a2:25:
ec:2d:cc:89:5e:a9:25:6e:c7:19:cd:48:15:9d:9f:
d8:71:7b:a6:4a:eb:b7:dc:a6:b7:8b:97:b4:1c:31:
dc:ea:54:30:11:bd:fd:41:73:48:5b:3c:97:cb:2f:
c7:b5:26:fb:e5:41:40:e8:7e:96:bf:83:2e:36:cc:
60:b1:10:ec:1b:34:f1:08:b6:93:86:bd:15:18:09:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:CB:E1:2C:3F:6C:4B:F6:14:05:9E:AA:F4:10:50:F6:14:60:D3
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/lx7L4Sw_bEv2FAWeqvQQUPYUYNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.169.0/24
188.132.179.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:f6:63:b1:f9:35:67:22:82:bf:85:64:f0:e3:c7:aa:21:58:
a4:39:e0:83:d1:27:9b:6d:97:92:eb:36:97:cf:ca:08:8d:04:
a5:3a:7a:cf:26:d9:ba:4e:5a:1e:c6:45:ab:9a:91:c1:5c:14:
9a:94:12:35:0c:8e:be:ed:0b:fd:99:19:21:1f:bc:e4:4a:a9:
ec:d6:a0:45:87:5d:42:b5:95:13:c1:6b:e2:1a:bd:06:8d:4b:
4d:90:b1:78:ee:90:ee:54:a6:32:67:22:dd:2d:39:bb:cb:b8:
4f:f3:c7:52:ee:11:ea:3d:d2:b0:b6:e1:32:85:52:ba:cd:ba:
2e:73:a5:cd:68:ab:46:0d:0b:d1:54:21:86:ea:64:5d:c6:c0:
ec:9f:66:2b:9c:cd:79:f5:b9:c9:13:59:3e:d1:0b:f9:49:a6:
cb:6b:30:22:ad:e2:13:43:fa:7d:9f:63:b2:15:f8:fb:13:40:
b3:cc:dc:3c:36:fe:16:ea:3c:a2:63:9d:c7:3d:50:f8:f7:4a:
d2:59:03:69:d3:06:be:21:0a:c1:89:7c:86:95:90:94:92:20:
49:e0:fb:c0:3f:8c:d5:a4:00:98:4b:fc:da:a1:aa:d2:7d:a3:
66:b2:86:48:1c:41:9d:1a:9d:f8:69:3c:f7:d3:bd:5e:14:59:
4d:4c:4f:bb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDC7QOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NGEyYjhlOTBkMTU3ZWEwMjJmOGU3MDAwMjRhOTNkYzM1NmE1MTRkMB4XDTIyMDEw
MTA2NTQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTcxZWNiZTEyYzNm
NmM0YmY2MTQwNTllYWFmNDEwNTBmNjE0NjBkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALS2sKimcrl97tc/tM8ouVaPyzH1/tZPRROKTBWyxpmHsF5E
I0cnLztFCbL4HQB6GJyD0Z9ghMkdu+YWH84InioMFm9eQlG8TdO3xSXhvqNwEjH6
LceeOnRb27e6tKnQxBmsAviVBiII2UlKUmH8uF8ZvmDMBwGGyhqUcL1qZNKuIlHD
uurgt9XffmWv66KSo3ue9aAdXYEQotFLHKmwVamTEst54lM9znZhIdDR24jlPKIl
7C3MiV6pJW7HGc1IFZ2f2HF7pkrrt9ymt4uXtBwx3OpUMBG9/UFzSFs8l8svx7Um
++VBQOh+lr+DLjbMYLEQ7Bs08Qi2k4a9FRgJSNMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSXHsvhLD9sS/YUBZ6q9BBQ9hRg0zAfBgNVHSMEGDAWgBTkorjpDRV+oCL4
5wACSpPcNWpRTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVLSzQ2UTBWZnFBaS1PY0FBa3FUM0RWcVVVMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTcvNjk5ZTg1LTEwMjctNGM3ZS04YWU3LWRmNGEyZTc2MGNjYi8x
L2x4N0w0U3dfYkV2MkZBV2VxdlFRVVBZVVlOTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcv
Njk5ZTg1LTEwMjctNGM3ZS04YWU3LWRmNGEyZTc2MGNjYi8xLzVLSzQ2UTBWZnFB
aS1PY0FBa3FUM0RWcVVVMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALyEqQMEALyEszANBgkqhkiG9w0B
AQsFAAOCAQEAzfZjsfk1ZyKCv4Vk8OPHqiFYpDngg9Enm22Xkus2l8/KCI0EpTp6
zybZuk5aHsZFq5qRwVwUmpQSNQyOvu0L/ZkZIR+85Eqp7NagRYddQrWVE8Fr4hq9
Bo1LTZCxeO6Q7lSmMmci3S05u8u4T/PHUu4R6j3SsLbhMoVSus26LnOlzWirRg0L
0VQhhupkXcbA7J9mK5zNefW5yRNZPtEL+Ummy2swIq3iE0P6fZ9jshX4+xNAs8zc
PDb+Fuo8omOdxz1Q+PdK0lkDadMGviEKwYl8hpWQlJIgSeD7wD+M1aQAmEv82qGq
0n2jZrKGSBxBnRqd+Gk899O9XhRZTUxPuw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:44 2023 by rpki-client on console-fra.rpki-client.org