Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LvuMYfU_1_goLj7FDOz7-Vc2iRw.roa
File: LvuMYfU_1_goLj7FDOz7-Vc2iRw.roa (raw, json)
Hash identifier: MEVVefpFjXfGosbmBfRv+n1wsxRp25I3KpBmcmGNFQg=
Subject key identifier: 2E:FB:8C:61:F5:3F:D7:F8:28:2E:3E:C5:0C:EC:FB:F9:57:36:89:1C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F12719ABC284E2465B6DA2A61DB8F58D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LvuMYfU_1_goLj7FDOz7-Vc2iRw.roa
Signing time: Thu 08 Dec 2022 09:53:02 +0000
ROA not before: Thu 08 Dec 2022 09:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:27:19:ab:c2:84:e2:46:5b:6d:a2:a6:1d:b8:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 09:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2efb8c61f53fd7f8282e3ec50cecfbf95736891c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:a6:2c:97:7a:76:61:75:6b:8f:4e:83:aa:
8e:7b:74:ef:99:bf:b6:45:49:22:9f:84:a3:3f:97:
d8:84:eb:a5:32:de:66:67:4b:d5:9f:e5:cf:03:b2:
03:69:57:96:51:cf:e9:6d:ab:c2:88:ac:9c:59:4c:
a5:5b:9e:7a:0a:fe:11:ce:eb:13:71:91:8f:be:5b:
5e:9c:41:29:8f:fe:09:c8:e7:89:80:b1:fe:1d:e9:
0b:3e:73:e9:c9:f4:5e:4f:a2:41:9c:6c:c0:38:74:
16:07:ff:10:16:65:2f:9a:19:0c:60:26:85:8c:99:
f6:87:d2:8b:f1:02:fa:ea:07:66:54:83:37:60:d5:
ff:e6:d8:2e:d1:5a:13:e6:95:40:ce:b0:e9:0f:9a:
02:38:33:2a:03:3b:33:b9:bf:08:d0:17:62:72:a8:
05:78:29:82:69:85:90:d4:dd:a0:e8:74:f9:39:5e:
17:b9:fb:2d:7c:b2:a4:ef:54:e2:8d:be:8a:c6:ca:
60:98:fa:dd:01:b5:3b:be:e0:fe:45:70:e1:56:27:
54:49:45:43:9f:c3:2c:17:a5:db:fa:4f:5b:a3:bd:
b5:fd:3a:28:b6:2c:48:c0:82:fd:03:6e:fa:79:65:
9e:da:e9:17:69:8a:9c:3f:1f:64:9f:79:48:fb:65:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:8C:61:F5:3F:D7:F8:28:2E:3E:C5:0C:EC:FB:F9:57:36:89:1C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/LvuMYfU_1_goLj7FDOz7-Vc2iRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:dd:ca:ba:a4:f0:68:d9:d5:93:9a:74:0b:6e:71:a8:d7:ca:
6b:50:e8:6e:0b:71:25:c3:2d:da:49:e6:85:a7:79:d5:af:ed:
04:60:48:b2:82:e3:25:8f:31:ee:76:43:0f:46:3a:fa:ab:9c:
02:2d:70:61:60:ca:6b:e9:90:b6:c1:ea:99:30:3e:b0:32:0c:
9f:b8:df:6b:e3:85:89:f4:69:1e:92:7e:d3:b4:ab:ea:b1:b4:
0c:97:29:bd:46:7d:90:56:c9:2b:28:ec:7a:2b:e5:1b:33:96:
c3:e6:28:16:60:12:ba:12:80:80:1b:7a:f6:2c:a1:8d:9b:26:
41:50:d0:c0:91:21:6b:bc:bf:c3:7a:04:56:9c:7f:80:fe:78:
24:38:f8:2e:89:30:6d:5b:d8:b3:9d:6d:c5:c0:ea:a1:44:11:
30:6a:d8:85:a2:c7:b2:65:d2:5e:d7:7c:2f:89:04:d9:55:74:
44:80:9b:b6:09:17:f4:46:b3:1d:bc:0c:b6:5b:89:60:c8:21:
55:f0:27:e0:2b:9a:39:c0:fe:2d:a5:a8:00:03:dd:91:ee:e4:
c1:aa:b1:0e:d3:07:6d:3d:b5:0a:4b:f8:b2:db:3d:67:7d:e5:
96:cb:f2:9c:6b:62:9c:eb:6d:7e:80:ef:e0:55:0b:1f:20:0b:
ac:28:be:1b
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAYTxJxmrwoTiRlttoqYduPWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MDk1MzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWZiOGM2MWY1M2ZkN2Y4MjgyZTNlYzUwY2VjZmJmOTU3MzY4OTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWamLJd6dmF1a49Og6qOe3Tvmb+2
RUkin4SjP5fYhOulMt5mZ0vVn+XPA7IDaVeWUc/pbavCiKycWUylW556Cv4RzusT
cZGPvltenEEpj/4JyOeJgLH+HekLPnPpyfReT6JBnGzAOHQWB/8QFmUvmhkMYCaF
jJn2h9KL8QL66gdmVIM3YNX/5tgu0VoT5pVAzrDpD5oCODMqAzszub8I0BdicqgF
eCmCaYWQ1N2g6HT5OV4XufstfLKk71Tijb6KxspgmPrdAbU7vuD+RXDhVidUSUVD
n8MsF6Xb+k9bo721/TootixIwIL9A276eWWe2ukXaYqcPx9kn3lI+2XAZwIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFC77jGH1P9f4KC4+xQzs+/lXNokcMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTHZ1TVlmVV8xX2dvTGo3RkRPejctVmMyaVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAde
GYADBAdfiQADBARtSnADBAZtfEADAwBtvAMEBoDMQAMEA7IXkAMEArkDIAMEArnS
jAMEA7xeqAMDALyiAwQCwcnkAwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZA
AwQF1A6gAwQF1CxAAwQF1EVgAwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAu3cq6pPBo2dWTmnQLbnGo18prUOhuC3Elwy3a
SeaFp3nVr+0EYEiyguMljzHudkMPRjr6q5wCLXBhYMpr6ZC2weqZMD6wMgyfuN9r
44WJ9Gkekn7TtKvqsbQMlym9Rn2QVskrKOx6K+UbM5bD5igWYBK6EoCAG3r2LKGN
myZBUNDAkSFrvL/DegRWnH+A/ngkOPguiTBtW9iznW3FwOqhRBEwatiFoseyZdJe
13wviQTZVXREgJu2CRf0RrMdvAy2W4lgyCFV8CfgK5o5wP4tpagAA92R7uTBqrEO
0wdtPbUKS/iy2z1nfeWWy/Kca2Kc621+gO/gVQsfIAusKL4b
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:43 2025 by rpki-client