Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/LAZm6PBX7NA6yAMJrz_yRITElJw.roa
File: LAZm6PBX7NA6yAMJrz_yRITElJw.roa (raw, json)
Hash identifier: TPcwBai0UnOM5ry5yhAcGjTd8EzG6uIBwA2f7ia3Vcc=
Subject key identifier: 2C:06:66:E8:F0:57:EC:D0:3A:C8:03:09:AF:3F:F2:44:84:C4:94:9C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0184A5DDA0643774B56A29030A211AA2B400
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/LAZm6PBX7NA6yAMJrz_yRITElJw.roa
Signing time: Wed 23 Nov 2022 19:01:15 +0000
ROA not before: Wed 23 Nov 2022 19:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 176.105.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:dd:a0:64:37:74:b5:6a:29:03:0a:21:1a:a2:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 23 19:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c0666e8f057ecd03ac80309af3ff24484c4949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:42:4f:91:72:6a:dc:1c:be:c5:92:69:a8:
e9:66:34:68:1c:09:17:0d:3e:fe:81:51:c6:f0:86:
01:3d:6f:93:11:67:26:15:62:c7:6f:f1:6a:24:44:
da:29:7a:25:d7:13:72:86:3d:51:92:db:0a:fd:58:
11:3d:57:b7:02:c9:60:5c:58:5f:fc:21:93:13:09:
19:3e:e5:14:97:3a:e4:b7:9d:b7:0b:e3:86:25:ba:
41:4f:f2:66:d2:6b:0d:e1:2a:a2:96:64:8d:bd:10:
5e:b2:9c:c4:f1:db:3b:dd:ca:d4:2e:90:bf:55:d3:
bc:b7:6a:07:4a:88:42:8f:52:d1:fe:34:ca:f6:94:
7d:e1:f1:ee:54:e2:92:ec:9f:d4:dc:d0:6f:32:6b:
1f:24:3e:48:02:1a:8c:ea:bf:a5:27:a0:a0:85:e3:
8a:c3:4a:d8:97:50:4e:68:5f:c6:cd:1a:be:ed:3e:
86:be:65:31:26:0a:d4:4d:17:ab:fb:5b:11:9f:06:
0d:f9:69:2b:2a:89:83:ed:73:1f:62:58:5d:ef:ef:
0e:4d:69:85:65:2c:09:71:51:d2:c4:e1:83:59:ae:
6d:44:4d:33:55:80:4c:59:fe:c4:ec:f9:7d:01:78:
b8:e6:21:e4:b2:b9:f6:c8:d0:e5:07:a2:85:dd:23:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:66:E8:F0:57:EC:D0:3A:C8:03:09:AF:3F:F2:44:84:C4:94:9C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/LAZm6PBX7NA6yAMJrz_yRITElJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ce:75:00:b9:8f:10:d6:4f:8f:7f:4c:03:18:11:bc:bc:cd:
7b:12:1c:35:c4:e4:0a:e0:ce:25:b2:ad:ad:db:39:22:d0:4e:
2b:9d:01:0e:a6:f5:c4:7f:b5:31:fb:6e:c0:bf:49:b9:c2:bb:
bb:4b:8f:b6:a9:38:85:92:d1:7d:00:49:a6:f5:a3:a4:41:30:
20:92:49:a7:12:cd:6b:da:f1:53:11:55:43:68:ef:4c:ed:fb:
0a:37:7c:15:4a:ee:90:b9:ba:0c:4d:37:ad:57:fc:af:b9:bc:
4c:d4:73:db:53:5a:3b:9e:c5:52:9c:16:28:02:65:76:11:a3:
72:68:f9:3a:b7:0c:fb:a8:55:b6:c7:4d:74:f2:69:a4:7a:7e:
21:e0:47:b1:74:29:de:30:65:ed:b6:44:b6:4b:4c:8f:3b:fb:
2b:ae:29:65:47:ea:d7:e2:3e:49:00:eb:f9:16:9d:3b:08:64:
bf:20:0b:5b:f3:c0:c4:35:5f:08:79:bf:fa:18:f7:5a:a5:a3:
c4:28:5c:11:b1:38:de:35:a0:d8:20:65:b8:33:4b:ab:c1:b4:
eb:83:0f:53:4c:e3:fd:29:2b:85:55:28:c3:36:ea:36:cf:53:
7e:38:03:b9:e9:3a:48:83:d4:df:fa:5c:e8:df:ba:3f:1e:f0:
b6:4e:80:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSl3aBkN3S1aikDCiEaorQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjIxMTIzMTkwMTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzA2NjZlOGYwNTdlY2QwM2FjODAzMDlhZjNmZjI0NDg0YzQ5NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLlCT5FyatwcvsWSaajpZjRoHAkX
DT7+gVHG8IYBPW+TEWcmFWLHb/FqJETaKXol1xNyhj1RktsK/VgRPVe3AslgXFhf
/CGTEwkZPuUUlzrkt523C+OGJbpBT/Jm0msN4SqilmSNvRBespzE8ds73crULpC/
VdO8t2oHSohCj1LR/jTK9pR94fHuVOKS7J/U3NBvMmsfJD5IAhqM6r+lJ6CgheOK
w0rYl1BOaF/GzRq+7T6GvmUxJgrUTRer+1sRnwYN+WkrKomD7XMfYlhd7+8OTWmF
ZSwJcVHSxOGDWa5tRE0zVYBMWf7E7Pl9AXi45iHksrn2yNDlB6KF3SMpMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwGZujwV+zQOsgDCa8/8kSExJScMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvTEFabTZQQlg3TkE2eUFNSnJ6X3lSSVRFbEp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGnlMA0G
CSqGSIb3DQEBCwUAA4IBAQBbznUAuY8Q1k+Pf0wDGBG8vM17Ehw1xOQK4M4lsq2t
2zki0E4rnQEOpvXEf7Ux+27Av0m5wru7S4+2qTiFktF9AEmm9aOkQTAgkkmnEs1r
2vFTEVVDaO9M7fsKN3wVSu6QuboMTTetV/yvubxM1HPbU1o7nsVSnBYoAmV2EaNy
aPk6twz7qFW2x0108mmken4h4EexdCneMGXttkS2S0yPO/srrillR+rX4j5JAOv5
Fp07CGS/IAtb88DENV8Ieb/6GPdapaPEKFwRsTjeNaDYIGW4M0urwbTrgw9TTOP9
KSuFVSjDNuo2z1N+OAO56TpIg9Tf+lzo37o/HvC2ToDP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org