Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/LYM_kuPHXhwBsrTkv-DAJ85X0B4.roa
File: LYM_kuPHXhwBsrTkv-DAJ85X0B4.roa (raw, json)
Hash identifier: Oz6gzGAp/Ocl17bZbGbgI+t6S43u3OuTq1oZExLDk+0=
Subject key identifier: 2D:83:3F:92:E3:C7:5E:1C:01:B2:B4:E4:BF:E0:C0:27:CE:57:D0:1E
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 02E382DA
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/LYM_kuPHXhwBsrTkv-DAJ85X0B4.roa
Signing time: Sat 01 Jan 2022 01:55:16 +0000
ROA not before: Sat 01 Jan 2022 01:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213009
IP address blocks: 194.150.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48464602 (0x2e382da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Jan 1 01:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d833f92e3c75e1c01b2b4e4bfe0c027ce57d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:2c:ba:54:6b:69:2c:fb:fd:a5:54:97:72:
c6:dd:3e:57:f9:ae:5f:4c:74:bc:02:3a:09:6f:4a:
87:85:b0:31:31:6f:02:94:70:98:75:01:0c:16:bc:
b2:02:d6:35:95:88:3a:fe:21:d4:c4:27:df:56:d4:
f9:06:6c:18:f1:09:98:ac:12:c2:79:16:ce:f3:9c:
0c:c6:9b:b2:fe:62:b3:82:1f:07:94:aa:12:05:63:
6c:f9:4e:32:ea:a7:44:d5:94:4f:a5:c9:c2:15:31:
9f:66:eb:14:a0:35:b7:ea:cc:00:30:8c:44:bb:58:
31:0d:36:ea:c1:39:5f:25:93:8c:55:a3:8d:60:3e:
80:d2:41:d5:22:f5:8c:03:a4:ee:5c:81:e2:5e:f0:
a3:49:53:d5:eb:be:f4:6c:96:86:29:9f:45:5d:04:
32:7f:a7:93:9f:4b:61:7d:a6:d0:a0:81:72:3d:f9:
c2:51:36:67:55:ad:07:08:78:3e:94:b8:58:8f:c8:
e2:28:e8:3c:6b:4a:d1:98:48:f2:42:1b:48:ab:12:
77:35:03:c2:04:99:1d:25:41:4d:c8:87:7b:44:d6:
19:35:28:a6:34:b4:58:23:40:59:dd:01:bb:7f:9c:
dd:0a:02:75:d9:6c:df:b1:96:8c:c1:40:f9:d8:10:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:3F:92:E3:C7:5E:1C:01:B2:B4:E4:BF:E0:C0:27:CE:57:D0:1E
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/LYM_kuPHXhwBsrTkv-DAJ85X0B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c0:57:5d:11:2f:51:de:27:48:40:2f:47:69:79:19:fd:71:
8a:ce:b7:c1:f6:c3:26:c3:b4:1b:50:7f:7e:f8:cc:31:7f:9d:
5c:f5:b1:4c:35:d8:ff:af:f1:c9:c7:7a:81:91:c9:28:7f:70:
7d:cb:6c:73:00:82:1a:90:02:a7:91:d1:3a:89:f4:63:19:0f:
ef:1d:ef:e0:16:ca:47:fa:8c:b0:73:a1:60:bc:3a:a2:2c:eb:
3e:24:b9:5b:08:63:c6:84:81:63:14:df:33:74:fd:11:b6:e0:
5c:b8:a5:2c:24:93:61:82:09:e1:f5:2e:d4:f2:cc:13:cb:20:
30:ff:5e:e5:16:c9:8f:a5:6b:83:81:fc:b0:61:bd:c6:20:08:
76:55:4b:4e:56:89:3b:f8:bf:d3:56:f5:12:e4:c8:3d:31:5d:
c0:23:ce:92:01:68:7a:b2:46:ee:36:72:9a:29:88:d7:d1:c5:
92:b9:5b:e1:f1:e5:a9:5a:3f:54:5c:d9:09:93:f4:8e:ea:29:
24:58:3e:d6:63:64:f9:34:0b:c5:cd:03:ec:13:3e:30:86:a7:
dd:3f:2c:5a:7c:62:28:2b:64:dc:fe:b3:e2:65:24:b8:ac:cc:
8f:60:78:6a:ec:49:b1:9a:6d:5f:95:19:23:76:27:a8:de:19:
01:8b:17:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAuOC2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NjllNDVhNDQ4MTQ1NjE0OGUyZTAwMzQ5ZDg3YWE1N2M1NmIyNGEwMB4XDTIyMDEw
MTAxNTUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQ4MzNmOTJlM2M3
NWUxYzAxYjJiNGU0YmZlMGMwMjdjZTU3ZDAxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANQgLLpUa2ks+/2lVJdyxt0+V/muX0x0vAI6CW9Kh4WwMTFv
ApRwmHUBDBa8sgLWNZWIOv4h1MQn31bU+QZsGPEJmKwSwnkWzvOcDMabsv5is4If
B5SqEgVjbPlOMuqnRNWUT6XJwhUxn2brFKA1t+rMADCMRLtYMQ026sE5XyWTjFWj
jWA+gNJB1SL1jAOk7lyB4l7wo0lT1eu+9GyWhimfRV0EMn+nk59LYX2m0KCBcj35
wlE2Z1WtBwh4PpS4WI/I4ijoPGtK0ZhI8kIbSKsSdzUDwgSZHSVBTciHe0TWGTUo
pjS0WCNAWd0Bu3+c3QoCddls37GWjMFA+dgQcDECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQtgz+S48deHAGytOS/4MAnzlfQHjAfBgNVHSMEGDAWgBTmnkWkSBRWFI4u
ADSdh6pXxWskoDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVwNUZwRWdVVmhTT0xnQTBuWWVxVjhWckpLQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzYvNDRkNTllLWRjN2ItNGQyYy1iYTQ1LTRhOTFmYWJkOGE4ZS8x
L0xZTV9rdVBIWGh3QnNyVGt2LURBSjg1WDBCNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYv
NDRkNTllLWRjN2ItNGQyYy1iYTQ1LTRhOTFmYWJkOGE4ZS8xLzVwNUZwRWdVVmhT
T0xnQTBuWWVxVjhWckpLQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKWazANBgkqhkiG9w0BAQsFAAOC
AQEAbcBXXREvUd4nSEAvR2l5Gf1xis63wfbDJsO0G1B/fvjMMX+dXPWxTDXY/6/x
ycd6gZHJKH9wfctscwCCGpACp5HROon0YxkP7x3v4BbKR/qMsHOhYLw6oizrPiS5
WwhjxoSBYxTfM3T9EbbgXLilLCSTYYIJ4fUu1PLME8sgMP9e5RbJj6Vrg4H8sGG9
xiAIdlVLTlaJO/i/01b1EuTIPTFdwCPOkgFoerJG7jZymimI19HFkrlb4fHlqVo/
VFzZCZP0juopJFg+1mNk+TQLxc0D7BM+MIan3T8sWnxiKCtk3P6z4mUkuKzMj2B4
auxJsZptX5UZI3YnqN4ZAYsXcQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-fra.rpki-client.org