Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/LcURD-kFU_N_GVeZ1gnAusPrMxo.roa
File: LcURD-kFU_N_GVeZ1gnAusPrMxo.roa (raw, json)
Hash identifier: Gs+/3Eeey60p8COGZvJIuoEWAjBNi+qEPazD8f7S7zM=
Subject key identifier: 2D:C5:11:0F:E9:05:53:F3:7F:19:57:99:D6:09:C0:BA:C3:EB:33:1A
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01837FDF5E954AAE6A7E9784DD636CF3F7E6
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/LcURD-kFU_N_GVeZ1gnAusPrMxo.roa
Signing time: Tue 27 Sep 2022 16:54:48 +0000
ROA not before: Tue 27 Sep 2022 16:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30902
IP address blocks: 87.247.174.0/24 maxlen: 24
87.247.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:df:5e:95:4a:ae:6a:7e:97:84:dd:63:6c:f3:f7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Sep 27 16:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dc5110fe90553f37f195799d609c0bac3eb331a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:a9:4a:86:c0:13:0b:bf:c0:e5:2c:1f:8c:
91:c6:84:93:f5:0a:70:16:04:9d:0a:9e:ef:4a:a0:
a1:43:00:e6:c6:bf:48:f9:c9:5a:4f:ad:a8:28:1e:
da:39:10:6b:85:05:a1:dd:eb:e2:cb:78:96:d9:99:
2d:39:66:e0:ef:7d:7a:42:08:ff:ea:92:0f:be:6b:
a7:d1:9a:a2:98:cf:06:88:d1:21:9f:1f:34:9f:56:
9f:d0:87:72:c6:08:5d:df:28:50:83:05:98:6c:91:
d7:86:ac:5a:ba:41:e6:fb:06:39:2b:fa:df:48:43:
af:9f:fa:d6:ae:ae:67:74:b3:90:e5:a8:de:99:15:
28:46:82:a8:04:14:7f:11:5e:ec:37:e3:a6:c1:28:
ab:5f:a5:33:f8:17:ec:cc:92:73:23:48:e8:c6:66:
bc:7a:78:be:8a:71:12:9a:57:35:31:7a:bb:b6:f8:
12:76:ed:9b:04:75:e5:28:d3:b3:47:8c:99:7d:fa:
fa:2a:44:93:d8:25:37:91:18:45:0f:59:a6:f0:a2:
0d:08:56:36:5a:20:a5:9e:bf:ef:4c:9e:02:af:a0:
fd:83:83:72:e3:70:1a:d8:a6:77:d5:b1:aa:86:ac:
e4:18:88:21:54:d9:b8:e3:b7:04:a6:a2:fa:84:7b:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:11:0F:E9:05:53:F3:7F:19:57:99:D6:09:C0:BA:C3:EB:33:1A
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/LcURD-kFU_N_GVeZ1gnAusPrMxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.174.0/23
Signature Algorithm: sha256WithRSAEncryption
23:5f:53:cb:38:5e:78:2b:11:3a:e8:87:55:de:43:bb:22:39:
e0:12:63:43:8c:25:ed:b2:7a:3a:d8:c0:84:7c:65:cf:7b:07:
de:e7:49:28:0e:d4:f0:83:d3:59:19:c1:21:e4:16:c2:11:cc:
f5:61:98:0f:07:9d:30:71:d2:79:69:da:57:77:e3:4b:ce:56:
83:b1:db:af:06:f2:ed:b4:fc:60:60:25:ee:3b:a2:e9:97:4c:
6b:ef:58:c7:f9:64:d0:c5:f2:40:45:5b:51:ad:66:3a:31:75:
cb:b8:19:27:74:d4:9c:a4:e7:6c:48:45:fd:00:dd:ed:14:62:
5d:9e:65:ad:a7:0c:a1:23:5a:32:ae:3e:2f:d3:45:4b:ab:38:
a4:76:2a:6c:f1:14:f6:84:d6:02:b8:87:5e:63:ea:75:1c:ea:
e0:a1:c6:88:26:36:6b:e5:b2:f8:ad:a1:d7:e8:20:9d:a6:ab:
cf:b5:15:0e:8f:7d:4a:28:f8:b8:c0:23:99:63:3a:2f:f9:38:
85:00:d7:1a:07:d7:37:e0:bd:57:6c:cf:27:f6:aa:fd:5b:1d:
81:cf:2a:94:bf:b1:38:05:ea:61:17:61:4d:1b:a6:00:e4:a4:
42:e8:91:40:84:57:38:ad:82:b7:52:a7:0a:ed:09:96:11:23:
c1:36:69:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN/316VSq5qfpeE3WNs8/fmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4
ZmFiM2UwHhcNMjIwOTI3MTY1NDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGM1MTEwZmU5MDU1M2YzN2YxOTU3OTlkNjA5YzBiYWMzZWIzMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzESpSobAEwu/wOUsH4yRxoST9Qpw
FgSdCp7vSqChQwDmxr9I+claT62oKB7aORBrhQWh3eviy3iW2ZktOWbg7316Qgj/
6pIPvmun0ZqimM8GiNEhnx80n1af0Idyxghd3yhQgwWYbJHXhqxaukHm+wY5K/rf
SEOvn/rWrq5ndLOQ5ajemRUoRoKoBBR/EV7sN+OmwSirX6Uz+BfszJJzI0joxma8
eni+inESmlc1MXq7tvgSdu2bBHXlKNOzR4yZffr6KkST2CU3kRhFD1mm8KINCFY2
WiClnr/vTJ4Cr6D9g4Ny43Aa2KZ31bGqhqzkGIghVNm447cEpqL6hHtvgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3FEQ/pBVPzfxlXmdYJwLrD6zMaMB8GA1UdIwQY
MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt
MDQxMzEyMjQyZmYzLzEvTGNVUkQta0ZVX05fR1ZlWjFnbkF1c1ByTXhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz
LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/euMA0G
CSqGSIb3DQEBCwUAA4IBAQAjX1PLOF54KxE66IdV3kO7IjngEmNDjCXtsno62MCE
fGXPewfe50koDtTwg9NZGcEh5BbCEcz1YZgPB50wcdJ5adpXd+NLzlaDsduvBvLt
tPxgYCXuO6Lpl0xr71jH+WTQxfJARVtRrWY6MXXLuBkndNScpOdsSEX9AN3tFGJd
nmWtpwyhI1oyrj4v00VLqzikdips8RT2hNYCuIdeY+p1HOrgocaIJjZr5bL4raHX
6CCdpqvPtRUOj31KKPi4wCOZYzov+TiFANcaB9c34L1XbM8n9qr9Wx2BzyqUv7E4
BephF2FNG6YA5KRC6JFAhFc4rYK3UqcK7QmWESPBNmnh
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:24:49 2025 by rpki-client