Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/Lpptw4ZABEEuwKL_v_yHrc07Blg.roa
File: Lpptw4ZABEEuwKL_v_yHrc07Blg.roa (raw, json)
Hash identifier: EZ5OSBK0eelqCCuwX9pkfY2757rBcc/e/S+MmSgwyY0=
Subject key identifier: 2E:9A:6D:C3:86:40:04:41:2E:C0:A2:FF:BF:FC:87:AD:CD:3B:06:58
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 37E0C472
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/Lpptw4ZABEEuwKL_v_yHrc07Blg.roa
Signing time: Sat 01 Jan 2022 16:04:51 +0000
ROA not before: Sat 01 Jan 2022 16:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8319
IP address blocks: 195.158.32.0/19 maxlen: 24
194.153.151.0/24 maxlen: 24
212.218.0.0/16 maxlen: 24
195.250.48.0/24 maxlen: 24
2001:4cd8::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937477234 (0x37e0c472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jan 1 16:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e9a6dc3864004412ec0a2ffbffc87adcd3b0658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:24:a9:61:1e:86:0e:19:d0:91:1c:97:ac:
e6:32:8d:b1:68:c9:52:bd:0e:55:75:a7:87:15:3a:
e7:07:be:39:3e:6b:b3:59:25:b1:6a:3b:3f:77:09:
f9:be:48:c1:cf:e1:16:41:88:e2:ee:2c:e4:2b:e2:
02:47:f9:06:f4:67:8f:09:b7:04:90:a3:25:c9:05:
ec:15:da:13:3a:99:12:8e:e8:4d:3e:54:d9:68:6b:
61:ad:a1:01:03:0d:6f:af:d2:fd:a8:56:86:c3:00:
b2:a0:94:cf:63:ff:36:71:95:f8:19:5c:ac:5f:6b:
9f:46:cc:7f:f0:d3:3f:b0:8e:6f:80:8c:50:85:db:
e0:61:e8:3d:b6:1e:40:a8:70:ac:e9:1c:92:0d:57:
8c:6c:bc:25:72:8a:92:20:f6:61:74:3f:c7:af:9a:
b5:43:93:29:6c:2f:63:17:2f:59:11:61:89:e6:69:
73:88:75:e9:01:5f:72:0e:03:2e:39:18:db:52:be:
57:6f:06:e8:cd:67:b7:d1:28:95:d7:32:af:07:ed:
43:00:2d:5c:22:57:1c:8f:23:09:76:bc:06:90:32:
d1:fa:1d:e1:61:e5:f8:78:da:9c:ce:f0:3c:2d:36:
3c:d4:8d:57:21:69:14:2a:96:36:e0:18:ef:7a:e4:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:6D:C3:86:40:04:41:2E:C0:A2:FF:BF:FC:87:AD:CD:3B:06:58
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/Lpptw4ZABEEuwKL_v_yHrc07Blg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.151.0/24
195.158.32.0/19
195.250.48.0/24
212.218.0.0/16
IPv6:
2001:4cd8::/32
Signature Algorithm: sha256WithRSAEncryption
0f:c5:4b:ed:8d:ef:f1:d7:a9:4e:db:aa:4e:0e:74:3b:18:a2:
d2:9b:8d:48:52:db:12:4b:ff:23:79:f1:61:d1:4d:12:c6:5b:
ac:cb:f9:62:a2:e8:aa:13:3a:de:b0:63:c7:f0:32:f4:09:2f:
04:c5:18:99:71:8d:51:fa:6d:04:c4:a7:3a:1f:1a:32:b5:97:
c3:86:6b:6e:92:31:c5:e1:62:80:43:bf:21:79:16:16:7b:5b:
29:49:ee:f2:1e:20:1b:47:ab:4c:1c:b0:b2:b1:7c:77:38:b9:
99:ae:5c:7a:7a:31:60:1c:43:d9:76:fe:e7:9f:16:3f:8e:76:
df:95:c3:e5:5b:59:b3:ce:49:d8:4e:7a:56:df:1b:d4:50:a1:
05:37:33:ca:63:6f:59:32:cb:5f:47:29:e2:51:69:df:ea:84:
ac:2c:5a:e0:dd:53:18:9c:80:58:36:7f:8b:59:6b:e4:2e:1f:
d3:c1:07:c3:e8:ba:c6:fc:82:d0:0d:bc:ed:08:ae:03:5a:09:
e6:a5:c1:af:db:87:ca:b9:12:56:2e:c1:a3:b6:c5:e2:cd:78:
4b:01:11:2a:a5:68:42:07:73:ed:c5:fa:bf:ec:7b:74:c3:b5:
e8:4e:09:d4:93:a7:d9:a6:cf:ad:a0:95:78:39:6c:80:76:54:
87:03:93:38
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEN+DEcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MmNjNjkxNDc2YTZlNzg5NWIwZTQ1NjExNjQ0NGY5MTkzN2JmMDFlMB4XDTIyMDEw
MTE2MDQ1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmU5YTZkYzM4NjQw
MDQ0MTJlYzBhMmZmYmZmYzg3YWRjZDNiMDY1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO/VJKlhHoYOGdCRHJes5jKNsWjJUr0OVXWnhxU65we+OT5r
s1klsWo7P3cJ+b5Iwc/hFkGI4u4s5CviAkf5BvRnjwm3BJCjJckF7BXaEzqZEo7o
TT5U2WhrYa2hAQMNb6/S/ahWhsMAsqCUz2P/NnGV+BlcrF9rn0bMf/DTP7COb4CM
UIXb4GHoPbYeQKhwrOkckg1XjGy8JXKKkiD2YXQ/x6+atUOTKWwvYxcvWRFhieZp
c4h16QFfcg4DLjkY21K+V28G6M1nt9EoldcyrwftQwAtXCJXHI8jCXa8BpAy0fod
4WHl+HjanM7wPC02PNSNVyFpFCqWNuAY73rk0K0CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBQumm3DhkAEQS7Aov+//IetzTsGWDAfBgNVHSMEGDAWgBQCzGkUdqbniVsO
RWEWRE+Rk3vwHjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FzeHBGSGFtNTRsYkRrVmhGa1JQa1pONzhCNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvOWE2ODYwLTIyNGYtNGIzNC1hOWI2LWJjMTkyYmI3MzAyNS8x
L0xwcHR3NFpBQkVFdXdLTF92X3lIcmMwN0JsZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
OWE2ODYwLTIyNGYtNGIzNC1hOWI2LWJjMTkyYmI3MzAyNS8xL0FzeHBGSGFtNTRs
YkRrVmhGa1JQa1pONzhCNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wHQQCAAEwFwMEAMKZlwMEBcOeIAMEAMP6MAMDANTa
MA0EAgACMAcDBQAgAUzYMA0GCSqGSIb3DQEBCwUAA4IBAQAPxUvtje/x16lO26pO
DnQ7GKLSm41IUtsSS/8jefFh0U0Sxlusy/liouiqEzresGPH8DL0CS8ExRiZcY1R
+m0ExKc6HxoytZfDhmtukjHF4WKAQ78heRYWe1spSe7yHiAbR6tMHLCysXx3OLmZ
rlx6ejFgHEPZdv7nnxY/jnbflcPlW1mzzknYTnpW3xvUUKEFNzPKY29ZMstfRyni
UWnf6oSsLFrg3VMYnIBYNn+LWWvkLh/TwQfD6LrG/ILQDbztCK4DWgnmpcGv24fK
uRJWLsGjtsXizXhLAREqpWhCB3Ptxfq/7Ht0w7XoTgnUk6fZps+toJV4OWyAdlSH
A5M4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:40 2024 by rpki-client on console-ams.rpki-client.org