Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LCLS_76-i8xfPuPZPemeOtkwoGk.roa
File: LCLS_76-i8xfPuPZPemeOtkwoGk.roa (raw, json)
Hash identifier: EuWkE/Gk+HwXNe+3k8M0r1rUYo/55/rAqgBWUBqgoWM=
Subject key identifier: 2C:22:D2:FF:BE:BE:8B:CC:5F:3E:E3:D9:3D:E9:9E:3A:D9:30:A0:69
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184765907FDE023467B5AEA047F925C83CB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LCLS_76-i8xfPuPZPemeOtkwoGk.roa
Signing time: Mon 14 Nov 2022 13:34:16 +0000
ROA not before: Mon 14 Nov 2022 13:34:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42891
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:07:fd:e0:23:46:7b:5a:ea:04:7f:92:5c:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c22d2ffbebe8bcc5f3ee3d93de99e3ad930a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:c7:fc:37:11:95:af:f0:ec:43:ca:63:02:
34:66:65:9c:49:a3:da:69:4b:ca:5d:d3:1a:8e:58:
d8:11:83:85:f0:b3:92:04:4d:92:c4:cf:d4:a2:69:
60:55:b9:b1:83:09:e3:82:11:cb:1a:7a:10:57:38:
e7:92:ce:13:5b:b8:4d:b6:b4:84:53:cf:57:e9:b0:
a9:34:dd:c2:15:37:99:e8:4d:5e:32:13:27:6e:82:
63:87:0c:0d:69:99:b8:14:2c:08:a1:70:e0:3a:07:
50:4a:f0:03:b2:9c:8f:3b:b0:f6:73:17:c2:2e:59:
01:91:a0:93:76:4e:d0:a3:91:a0:ba:64:a1:ae:98:
2e:d9:e7:e4:5e:fe:20:2c:aa:11:58:8a:d2:73:56:
2e:f6:14:9c:06:90:69:15:9a:bf:36:2a:38:98:64:
9e:86:cf:62:72:dc:1c:9c:73:13:e4:01:18:66:22:
4a:0a:03:d6:c6:50:e8:a9:3f:8d:19:fa:a7:4d:73:
d0:06:3d:f8:a2:41:4b:70:02:a0:0b:d1:12:6d:2b:
fd:77:de:28:df:8f:28:a6:2d:88:21:d9:4f:5e:27:
d3:42:ad:e8:50:07:0d:7d:d7:12:48:d3:f3:ef:af:
c7:27:1f:44:77:b6:3b:47:b1:0e:bb:fa:18:dd:33:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:D2:FF:BE:BE:8B:CC:5F:3E:E3:D9:3D:E9:9E:3A:D9:30:A0:69
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LCLS_76-i8xfPuPZPemeOtkwoGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:0e:9f:be:a6:66:05:1a:21:59:75:75:e0:a9:a3:02:dc:72:
63:90:b2:d5:27:7d:52:9a:37:f0:2b:ad:20:fb:dd:3f:7c:35:
6c:7f:86:7f:18:e1:78:a4:e8:56:79:6e:63:06:62:b7:30:f9:
16:4d:19:f8:56:fa:a4:c3:72:9c:91:7d:8e:a3:a8:3f:5e:ac:
2a:3f:47:69:db:e5:3b:1f:fd:a8:f5:6e:f7:2a:1f:c8:5c:92:
a5:da:5d:1c:5d:1a:c2:c8:ba:70:77:a1:a4:20:32:92:f4:38:
21:e7:fd:a1:14:6b:01:06:e2:8b:66:58:d3:28:75:0b:95:ee:
21:ef:60:f1:8b:8a:00:fe:da:57:21:91:3d:c3:50:f1:78:f8:
69:a7:72:37:48:55:e9:71:2e:c8:25:84:7d:1d:cb:a7:93:1e:
5a:8c:cc:ce:87:39:27:40:13:27:24:d2:c4:c3:8e:3b:b6:4e:
d4:68:e7:2e:c2:ed:3a:fb:ec:60:0c:d9:7b:4f:b8:ac:aa:d2:
1e:16:b2:28:66:f5:fd:48:df:5e:8d:5d:fd:b8:77:4c:65:32:
a2:68:bd:c6:6d:93:de:fd:e7:30:26:cb:44:6b:9c:2a:f3:98:
28:bb:fc:32:66:82:3a:67:5e:2a:62:07:c8:12:fc:8f:d3:76:
0b:b4:d9:8f
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAYR2WQf94CNGe1rqBH+SXIPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTMzNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzIyZDJmZmJlYmU4YmNjNWYzZWUzZDkzZGU5OWUzYWQ5MzBhMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ7H/DcRla/w7EPKYwI0ZmWcSaPa
aUvKXdMajljYEYOF8LOSBE2SxM/UomlgVbmxgwnjghHLGnoQVzjnks4TW7hNtrSE
U89X6bCpNN3CFTeZ6E1eMhMnboJjhwwNaZm4FCwIoXDgOgdQSvADspyPO7D2cxfC
LlkBkaCTdk7Qo5GgumShrpgu2efkXv4gLKoRWIrSc1Yu9hScBpBpFZq/Nio4mGSe
hs9ictwcnHMT5AEYZiJKCgPWxlDoqT+NGfqnTXPQBj34okFLcAKgC9ESbSv9d94o
348opi2IIdlPXifTQq3oUAcNfdcSSNPz76/HJx9Ed7Y7R7EOu/oY3TMRxwIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFCwi0v++vovMXz7j2T3pnjrZMKBpMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTENMU183Ni1pOHhmUHVQWlBlbWVPdGt3b0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQD
LujIAwQFPkAAAwQFTemgAwQGThlAAwQCTilkAwQDT6sIAwQEUPewAwQEURiAAwQG
U6nAAwQFU97AAwQHU+WAAwQHVRqAAwQFVm3AAwQCW8HUAwQHXZmAAwQHXhmAAwQH
X4kAAwQEbUpwAwQGbXxAAwMAbbwDBAaAzEADBAOyF5ADBAK5AyADBAK50owDBAO8
XqgDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQO
oAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkq
hkiG9w0BAQsFAAOCAQEADQ6fvqZmBRohWXV14KmjAtxyY5Cy1Sd9Upo38CutIPvd
P3w1bH+GfxjheKToVnluYwZitzD5Fk0Z+Fb6pMNynJF9jqOoP16sKj9HadvlOx/9
qPVu9yofyFySpdpdHF0awsi6cHehpCAykvQ4Ief9oRRrAQbii2ZY0yh1C5XuIe9g
8YuKAP7aVyGRPcNQ8Xj4aadyN0hV6XEuyCWEfR3Lp5MeWozMzoc5J0ATJyTSxMOO
O7ZO1GjnLsLtOvvsYAzZe0+4rKrSHhayKGb1/UjfXo1d/bh3TGUyomi9xm2T3v3n
MCbLRGucKvOYKLv8MmaCOmdeKmIHyBL8j9N2C7TZjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org