Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ldS_0AUSd7-GU8g67y8h1M2LUS8.roa
File: ldS_0AUSd7-GU8g67y8h1M2LUS8.roa (raw, json)
Hash identifier: ApLw7U3ki0Vl19eamN4bY/NQ3u0W4WMQIdKp1FoJ5XA=
Subject key identifier: 95:D4:BF:D0:05:12:77:BF:86:53:C8:3A:EF:2F:21:D4:CD:8B:51:2F
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 3DC4B354
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ldS_0AUSd7-GU8g67y8h1M2LUS8.roa
Signing time: Sat 01 Jan 2022 08:56:53 +0000
ROA not before: Sat 01 Jan 2022 08:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2865
IP address blocks: 193.44.172.0/22 maxlen: 24
193.44.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036301140 (0x3dc4b354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 08:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95d4bfd0051277bf8653c83aef2f21d4cd8b512f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:ca:9a:f3:42:b8:06:45:85:c7:87:ca:e9:
d1:ee:18:41:21:c4:91:77:ad:4d:59:e4:18:74:7b:
fc:87:c6:98:46:e3:a7:f7:cb:e0:e0:5a:f3:63:2a:
fd:90:8e:00:7a:fb:42:6d:c6:e5:1b:e8:9f:89:16:
dd:45:57:5f:00:73:08:83:3c:c1:43:14:96:92:a2:
77:89:8f:0c:42:18:0c:bc:f8:01:c1:9f:28:8c:ae:
3d:82:d4:b2:b3:a1:38:09:4e:21:35:f2:44:16:c0:
73:3e:bb:b4:b8:0d:f8:d0:62:be:c4:6f:77:1b:55:
36:d2:6d:66:97:c2:3e:46:32:b6:54:63:c3:78:fa:
b2:69:08:99:42:40:cf:70:1f:a9:97:c9:b5:cf:bc:
2b:9d:f7:8a:cb:6a:d8:6d:d6:b9:97:af:e8:f1:aa:
99:1d:f3:a0:96:18:ac:f7:ac:84:76:3e:6c:db:be:
16:4e:38:85:9e:19:49:d6:19:9d:19:3a:23:52:c5:
26:db:39:23:1c:7b:8f:a9:c8:30:70:e4:5a:0f:58:
6a:6e:09:08:f5:1e:c2:19:73:54:87:bc:b7:fc:ec:
8d:a2:36:aa:32:79:3b:b7:8b:ca:94:c1:5a:2c:c2:
db:7a:b4:60:c8:70:0a:f7:c3:5c:d6:8e:03:f3:0b:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:BF:D0:05:12:77:BF:86:53:C8:3A:EF:2F:21:D4:CD:8B:51:2F
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ldS_0AUSd7-GU8g67y8h1M2LUS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
31:c8:ce:d3:b9:45:7d:bb:52:25:2e:de:40:25:c6:b5:3a:c9:
2c:a2:d0:d3:f9:58:1a:50:e7:f8:0f:6d:bc:e9:a7:0e:7c:a9:
4a:47:48:c5:0b:6f:75:93:ee:a0:5b:e9:cf:33:f4:27:15:f5:
06:7b:79:62:41:88:44:9c:50:e5:3b:46:6f:f0:9b:82:81:f0:
0a:ed:5a:cc:f0:86:66:e1:8b:2e:7c:08:9e:52:46:98:05:2b:
0e:ee:58:6a:5c:76:ef:9b:cb:f1:d2:22:23:34:e4:d0:f3:fe:
91:d6:a8:61:9a:ed:23:c1:b9:6b:0b:fa:3f:35:48:29:ea:4b:
4e:e3:0a:69:89:f1:a3:61:64:e1:89:97:38:cd:7e:fb:c8:c5:
d6:ab:74:08:33:42:81:83:e9:ae:a3:ee:b3:c1:fa:23:0d:ae:
55:43:56:c9:eb:2a:74:f0:25:de:5d:1b:7f:f3:e6:83:c5:be:
67:60:cc:d8:5d:37:8a:04:92:c7:d1:b1:f5:7c:ec:2c:96:52:
a4:78:58:da:1f:fb:24:2c:20:77:40:28:f1:5d:10:70:3f:c3:
6e:f2:6d:2e:ab:11:e0:08:9e:45:7d:08:1e:af:88:89:f1:65:
eb:d2:39:68:bd:45:40:ac:fe:ff:cd:2e:d9:cf:89:37:6b:ce:
6f:c6:b6:dc
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEPcSzVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjY4MTM4ZDRlYzJlYTUxY2FjZWYwOWZmMTA1OGEzNzBhNWJlMTkwMB4XDTIyMDEw
MTA4NTY1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTVkNGJmZDAwNTEy
NzdiZjg2NTNjODNhZWYyZjIxZDRjZDhiNTEyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrLyprzQrgGRYXHh8rp0e4YQSHEkXetTVnkGHR7/IfGmEbj
p/fL4OBa82Mq/ZCOAHr7Qm3G5Rvon4kW3UVXXwBzCIM8wUMUlpKid4mPDEIYDLz4
AcGfKIyuPYLUsrOhOAlOITXyRBbAcz67tLgN+NBivsRvdxtVNtJtZpfCPkYytlRj
w3j6smkImUJAz3AfqZfJtc+8K533istq2G3WuZev6PGqmR3zoJYYrPeshHY+bNu+
Fk44hZ4ZSdYZnRk6I1LFJts5Ixx7j6nIMHDkWg9Yam4JCPUewhlzVIe8t/zsjaI2
qjJ5O7eLypTBWizC23q0YMhwCvfDXNaOA/ML2XMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSV1L/QBRJ3v4ZTyDrvLyHUzYtRLzAfBgNVHSMEGDAWgBQfaBONTsLqUcrO
8J/xBYo3ClvhkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gyZ1RqVTdDNmxIS3p2Q2Y4UVdLTndwYjRaQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvYjlhZGY0LWY5MTAtNDM1NS1iZmM4LTYwODU2NDgzOWZkMC8x
L2xkU18wQVVTZDctR1U4ZzY3eThoMU0yTFVTOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
YjlhZGY0LWY5MTAtNDM1NS1iZmM4LTYwODU2NDgzOWZkMC8xL0gyZ1RqVTdDNmxI
S3p2Q2Y4UVdLTndwYjRaQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAsEsTAMEAsEsrDANBgkqhkiG9w0B
AQsFAAOCAQEAMcjO07lFfbtSJS7eQCXGtTrJLKLQ0/lYGlDn+A9tvOmnDnypSkdI
xQtvdZPuoFvpzzP0JxX1Bnt5YkGIRJxQ5TtGb/CbgoHwCu1azPCGZuGLLnwInlJG
mAUrDu5Yalx275vL8dIiIzTk0PP+kdaoYZrtI8G5awv6PzVIKepLTuMKaYnxo2Fk
4YmXOM1++8jF1qt0CDNCgYPprqPus8H6Iw2uVUNWyesqdPAl3l0bf/Pmg8W+Z2DM
2F03igSSx9Gx9XzsLJZSpHhY2h/7JCwgd0Ao8V0QcD/DbvJtLqsR4AieRX0IHq+I
ifFl69I5aL1FQKz+/80u2c+JN2vOb8a23A==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:06 2025 by rpki-client