Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/LSR_yJ_zmpAbyiz5G3JLOtYWBWg.roa
File: LSR_yJ_zmpAbyiz5G3JLOtYWBWg.roa (raw, json)
Hash identifier: z85IvZLG8dStwv7DnezZpSZ0XtYW5inVYJPlToMv3/Q=
Subject key identifier: 2D:24:7F:C8:9F:F3:9A:90:1B:CA:2C:F9:1B:72:4B:3A:D6:16:05:68
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 03FCFAE7
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/LSR_yJ_zmpAbyiz5G3JLOtYWBWg.roa
Signing time: Sat 01 Jan 2022 06:04:35 +0000
ROA not before: Sat 01 Jan 2022 06:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208131
IP address blocks: 45.157.148.0/24 maxlen: 24
45.157.151.0/24 maxlen: 24
45.157.149.0/24 maxlen: 24
45.157.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66910951 (0x3fcfae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Jan 1 06:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d247fc89ff39a901bca2cf91b724b3ad6160568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:89:ed:1d:2d:b2:27:3c:4a:5e:bf:b6:0b:
87:cc:af:3b:30:7d:48:39:ca:21:37:bc:0b:cd:64:
b9:51:d7:39:3e:fe:28:50:e5:6f:69:c3:23:25:3d:
2d:d8:2d:5e:ca:91:46:8a:55:7b:4b:3a:6c:7f:f4:
3c:a1:b7:ab:90:4f:47:ae:00:d9:d3:84:5d:b2:a3:
b9:71:23:89:db:58:b4:8e:c6:23:34:ca:cc:c0:1d:
ce:d5:2e:96:48:2e:50:7b:22:0d:41:af:8a:57:d8:
80:53:37:d4:94:cb:e4:37:44:4c:d7:29:62:09:1d:
50:cc:4a:86:00:31:82:bc:8f:7e:b8:29:70:56:58:
14:fb:d7:01:31:ce:8d:fd:6a:95:2c:54:0a:fe:df:
bb:09:b9:c6:47:0a:69:b7:c8:86:69:10:bc:e0:5f:
42:27:e2:0f:65:c6:6b:3d:a4:6e:1d:69:e2:f9:6f:
0a:64:5a:7c:1e:80:a4:1a:6a:49:1e:d6:59:36:34:
9e:e1:80:e5:05:58:30:51:16:dc:ec:b4:6d:02:20:
d0:8b:00:dc:7c:6f:8b:19:66:ce:6d:82:7e:80:70:
eb:64:53:8c:21:32:7d:25:4f:b3:1f:1a:a3:56:08:
03:02:ef:32:02:2e:44:89:11:c5:95:63:7a:57:1d:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:24:7F:C8:9F:F3:9A:90:1B:CA:2C:F9:1B:72:4B:3A:D6:16:05:68
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/LSR_yJ_zmpAbyiz5G3JLOtYWBWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:63:b9:95:ab:8d:0a:09:4e:05:a1:48:db:83:67:47:33:53:
4c:66:6b:90:30:11:d3:ff:ae:e0:bc:cb:36:03:ba:cf:98:ed:
8e:ae:4f:dc:d6:46:ef:bf:e6:4c:76:01:cf:8e:18:bc:c8:d2:
d0:0e:0a:b2:b4:df:60:24:b8:77:fa:b6:86:e0:8a:e5:1d:38:
37:f7:10:4e:bd:d8:03:a7:10:09:5f:99:94:24:1c:eb:bb:7c:
e8:e8:e8:72:13:3a:ae:8f:66:17:aa:13:6b:82:76:35:df:f2:
8a:8f:69:e2:98:72:06:37:53:44:87:7e:23:33:d1:2f:9a:80:
94:96:1b:47:5c:8e:7b:ac:77:e5:44:6d:8f:24:0d:67:4f:5e:
62:41:4d:05:d7:69:21:46:a5:78:db:49:72:4a:77:b6:a6:ad:
e6:8d:33:be:8e:82:40:8c:88:4e:1a:06:c3:0a:44:ee:a8:b8:
36:62:1e:08:d8:4d:ee:76:97:3a:fc:10:c4:7b:5b:c6:0c:3a:
57:e0:eb:3a:ac:29:89:94:65:b6:e0:fd:31:8f:9a:2b:8a:80:
4a:b7:d8:fd:25:46:5c:72:ae:5b:a6:e4:b1:bf:a9:68:a0:e7:
dc:3c:b0:5b:bf:11:a4:6f:44:af:9d:fc:53:af:23:2a:91:42:
5a:fa:88:c6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA/z65zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MzRlOWY3NWM3MzI2Zjc2NWM4OTY2YzJlZGMwMGE5ODJhNWVhN2YwMB4XDTIyMDEw
MTA2MDQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQyNDdmYzg5ZmYz
OWE5MDFiY2EyY2Y5MWI3MjRiM2FkNjE2MDU2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKhAie0dLbInPEpev7YLh8yvOzB9SDnKITe8C81kuVHXOT7+
KFDlb2nDIyU9LdgtXsqRRopVe0s6bH/0PKG3q5BPR64A2dOEXbKjuXEjidtYtI7G
IzTKzMAdztUulkguUHsiDUGvilfYgFM31JTL5DdETNcpYgkdUMxKhgAxgryPfrgp
cFZYFPvXATHOjf1qlSxUCv7fuwm5xkcKabfIhmkQvOBfQifiD2XGaz2kbh1p4vlv
CmRafB6ApBpqSR7WWTY0nuGA5QVYMFEW3Oy0bQIg0IsA3Hxvixlmzm2CfoBw62RT
jCEyfSVPsx8ao1YIAwLvMgIuRIkRxZVjelcdlz0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQtJH/In/OakBvKLPkbcks61hYFaDAfBgNVHSMEGDAWgBQjTp91xzJvdlyJ
ZsLtwAqYKl6n8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0kwNmZkY2N5YjNaY2lXYkM3Y0FLbUNwZXBfQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNjM1YTBkLTkyMWYtNDcxMS1iN2Q0LTc3ZGVlMmQ3OWFlNC8x
L0xTUl95Sl96bXBBYnlpejVHM0pMT3RZV0JXZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NjM1YTBkLTkyMWYtNDcxMS1iN2Q0LTc3ZGVlMmQ3OWFlNC8xL0kwNmZkY2N5YjNa
Y2lXYkM3Y0FLbUNwZXBfQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2dlDANBgkqhkiG9w0BAQsFAAOC
AQEAo2O5lauNCglOBaFI24NnRzNTTGZrkDAR0/+u4LzLNgO6z5jtjq5P3NZG77/m
THYBz44YvMjS0A4KsrTfYCS4d/q2huCK5R04N/cQTr3YA6cQCV+ZlCQc67t86Ojo
chM6ro9mF6oTa4J2Nd/yio9p4phyBjdTRId+IzPRL5qAlJYbR1yOe6x35URtjyQN
Z09eYkFNBddpIUaleNtJckp3tqat5o0zvo6CQIyIThoGwwpE7qi4NmIeCNhN7naX
OvwQxHtbxgw6V+DrOqwpiZRltuD9MY+aK4qASrfY/SVGXHKuW6bksb+paKDn3Dyw
W78RpG9Er538U68jKpFCWvqIxg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:50 2025 by rpki-client