Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/LZ1qdIIqPe-iGNEAfuBc5MJOwAM.roa
File: LZ1qdIIqPe-iGNEAfuBc5MJOwAM.roa (raw, json)
Hash identifier: l9oLCam2M6+O6P8hjZbatDz2hduEhLvLKTuKv6PfUnA=
Subject key identifier: 2D:9D:6A:74:82:2A:3D:EF:A2:18:D1:00:7E:E0:5C:E4:C2:4E:C0:03
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018CC97552049B2817A04ED973C05FF251F9
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/LZ1qdIIqPe-iGNEAfuBc5MJOwAM.roa
Signing time: Tue 02 Jan 2024 09:15:58 +0000
ROA not before: Tue 02 Jan 2024 09:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59711
IP address blocks: 185.80.54.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.174.135.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
77.83.197.0/24 maxlen: 24
77.83.196.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
79.141.174.0/23 maxlen: 23
89.150.57.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
2a01:8640:12::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:75:52:04:9b:28:17:a0:4e:d9:73:c0:5f:f2:51:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 2 09:15:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d9d6a74822a3defa218d1007ee05ce4c24ec003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:66:87:79:de:cc:24:31:75:fe:4d:ce:95:
68:64:51:e4:ec:9f:5f:fb:8f:2f:e7:e0:48:b4:88:
4d:5c:17:c4:78:6a:21:47:f1:3d:61:09:c9:f2:46:
bc:74:84:48:d4:ce:7d:45:15:26:b5:dc:68:43:63:
59:c8:49:b9:5c:2b:e8:b1:7d:26:ff:99:c5:49:24:
66:49:11:d4:30:57:d0:fa:f6:9b:5f:92:51:f3:49:
6d:f5:a7:7d:89:77:dd:2a:19:22:bb:ff:e0:be:43:
f5:83:bd:b4:80:94:dd:24:77:1d:f0:0f:65:e9:a6:
55:27:bb:ce:a4:51:99:e6:16:91:c3:f1:d8:59:07:
73:9f:5e:9f:65:d6:0e:71:b5:3e:86:1e:50:c8:ab:
3a:85:23:e4:93:7f:75:2f:93:33:99:ce:c7:f5:66:
8b:17:c9:65:09:85:1a:b8:e4:41:6e:45:27:e8:1c:
70:78:51:de:55:d0:64:df:0c:7d:3d:55:7f:3b:06:
e8:ba:72:92:ac:8b:46:78:c7:fb:e3:66:b4:02:bd:
db:24:c6:5a:67:f1:d1:4b:41:c9:2f:19:16:da:9c:
3e:82:6a:68:9a:b5:64:49:0c:a5:03:51:d4:96:5a:
94:02:40:bd:28:ee:db:2a:f3:b5:63:6a:29:f6:62:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:6A:74:82:2A:3D:EF:A2:18:D1:00:7E:E0:5C:E4:C2:4E:C0:03
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/LZ1qdIIqPe-iGNEAfuBc5MJOwAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.172.0/24
79.141.174.0/23
89.150.57.0/24
91.193.18.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:50:ea:c7:99:3f:66:3c:02:9d:b3:07:a2:8e:c4:a4:12:0b:
16:91:26:e8:39:97:62:42:1b:95:7c:45:b2:05:95:45:d3:41:
8b:0b:a9:15:02:7e:04:ef:9e:b4:a2:e7:5a:bf:ef:a2:57:11:
a4:21:bd:7b:08:a2:fd:9d:fb:4a:74:e3:be:f3:49:28:57:c8:
77:7d:37:15:65:bb:de:1c:13:3b:d4:73:01:1c:e5:0d:59:8e:
d5:73:17:16:77:e9:97:0a:85:f5:27:ed:9b:9c:9a:12:e8:83:
84:54:46:4c:f7:ee:e4:5b:f5:57:48:44:43:16:9e:c4:bc:87:
d1:92:bd:c0:62:88:d6:04:ce:0c:a3:dc:f8:db:60:c5:49:14:
c7:5c:bc:78:e3:e2:98:5a:70:47:93:82:dc:a2:8a:7f:72:45:
25:5d:69:a2:5e:cc:3a:42:95:b8:65:3f:f9:3a:89:c2:1e:4b:
c8:e8:ba:fe:65:34:ef:f8:36:98:d4:c6:ae:e8:a8:82:ed:c5:
08:13:49:df:a2:70:82:fd:06:79:77:f3:63:a9:eb:20:b3:a7:
4b:84:c1:69:7f:a7:2d:50:02:d5:03:af:4a:89:18:4c:92:a2:
ca:fe:f4:8c:a0:84:3c:87:37:98:c8:8d:61:c0:e6:1b:6e:b7:
0e:74:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:56 2025 by rpki-client