Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Lm270GLmTkvqC9gmi-wavIp2i-E.roa
File: Lm270GLmTkvqC9gmi-wavIp2i-E.roa (raw, json)
Hash identifier: Jdt0VxlWtCqkkt7DFz9T7mNSDXnIEQthVAadfFiWGug=
Subject key identifier: 2E:6D:BB:D0:62:E6:4E:4B:EA:0B:D8:26:8B:EC:1A:BC:8A:76:8B:E1
Certificate issuer: /CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Certificate serial: 7C43D6
Authority key identifier: F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Lm270GLmTkvqC9gmi-wavIp2i-E.roa
Signing time: Wed 05 Jan 2022 10:09:38 +0000
ROA not before: Wed 05 Jan 2022 10:09:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 146.19.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8143830 (0x7c43d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Validity
Not Before: Jan 5 10:09:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e6dbbd062e64e4bea0bd8268bec1abc8a768be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:46:b0:46:3c:47:3a:de:59:67:ec:0f:5b:
ff:5d:fc:ff:ae:8a:83:af:ef:e0:89:70:5d:7f:e8:
ab:09:01:2a:a4:c2:29:f1:e5:d0:b3:ec:46:4d:04:
29:21:50:1f:c7:f4:36:34:ac:87:cc:65:b6:45:2a:
8b:0a:2f:db:5a:66:68:9d:ca:ce:c8:9f:30:26:bd:
e0:0b:00:ce:c1:59:0a:e1:03:71:a6:21:a0:f3:0c:
37:ff:2c:58:88:69:14:71:b0:87:dc:3a:b6:0e:a8:
7e:37:52:bb:a1:0d:81:9b:f6:7b:6e:16:04:69:9e:
3b:d9:48:26:85:ea:44:e6:fe:9d:6f:37:63:e7:e1:
3e:76:95:6f:67:18:38:2a:63:27:fb:bd:3d:83:c8:
20:20:24:55:5e:5c:58:1c:e3:45:02:bf:b8:c5:aa:
19:f1:10:6c:dc:57:42:72:64:56:d9:2e:4a:0c:06:
f8:71:5f:67:40:df:40:97:e5:30:13:54:20:8a:a3:
df:08:bb:1b:50:68:7c:81:68:87:4a:a4:7e:22:fd:
dc:33:31:c0:ce:18:38:43:94:c6:9e:d6:98:9e:9b:
71:6e:b0:eb:33:3b:36:74:a8:d5:b4:a0:a0:bb:15:
62:3a:96:9d:c0:3e:18:f3:c0:1f:0e:5f:a1:c5:2f:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:BB:D0:62:E6:4E:4B:EA:0B:D8:26:8B:EC:1A:BC:8A:76:8B:E1
X509v3 Authority Key Identifier:
keyid:F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Lm270GLmTkvqC9gmi-wavIp2i-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d7:b3:df:25:d1:a7:5b:2e:1f:5a:0c:20:a1:e4:58:ca:5b:
28:8c:b7:1a:bd:3c:81:35:11:81:a0:fd:e2:0a:58:5e:a7:3f:
6d:19:9e:dc:fe:0a:9e:cc:07:99:e3:88:b5:09:fa:1e:64:d1:
10:58:70:49:53:79:75:45:d2:ac:82:b9:e2:56:5f:88:09:6b:
a0:2e:10:c5:19:e8:c8:1f:dd:bd:16:e3:d5:b8:0d:83:dd:f9:
ae:34:f5:ca:84:59:2c:73:10:60:e4:bd:0f:35:78:41:8b:e1:
02:d0:e7:5c:ba:b4:25:88:3c:40:78:33:f0:f7:6f:5b:bd:58:
ff:8e:9a:7e:a8:d8:05:fc:b3:f4:5b:2a:a4:e9:2f:1b:2a:6a:
ba:2c:d0:af:81:74:04:ad:a6:78:89:79:4f:e7:4e:68:d8:15:
62:74:f3:80:23:af:d5:c1:cb:a1:f4:2b:3f:0a:8a:bd:a2:65:
81:b0:50:ad:4d:9a:df:c8:42:a4:50:25:bf:84:91:1a:b5:0c:
97:46:f6:dd:38:b4:4f:c3:2d:54:27:75:16:17:87:e1:5f:0f:
95:a5:95:95:8d:d3:7a:2f:cd:b4:84:45:88:0c:fa:9c:13:ae:
6e:d0:d5:ee:0f:96:80:38:6c:06:7b:b3:3b:fe:de:d6:df:a6:
43:4a:65:b8
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDfEPWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY3
ZWQ2ZTA2NjQzNmUwYTBiNjE3NDc0OTU1YThhNzU4ZTZlMzVkNzYwHhcNMjIwMTA1
MTAwOTM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyZTZkYmJkMDYyZTY0
ZTRiZWEwYmQ4MjY4YmVjMWFiYzhhNzY4YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoCVGsEY8RzreWWfsD1v/Xfz/roqDr+/giXBdf+irCQEqpMIp
8eXQs+xGTQQpIVAfx/Q2NKyHzGW2RSqLCi/bWmZoncrOyJ8wJr3gCwDOwVkK4QNx
piGg8ww3/yxYiGkUcbCH3Dq2Dqh+N1K7oQ2Bm/Z7bhYEaZ472UgmhepE5v6dbzdj
5+E+dpVvZxg4KmMn+709g8ggICRVXlxYHONFAr+4xaoZ8RBs3FdCcmRW2S5KDAb4
cV9nQN9Al+UwE1QgiqPfCLsbUGh8gWiHSqR+Iv3cMzHAzhg4Q5TGntaYnptxbrDr
Mzs2dKjVtKCguxViOpadwD4Y88AfDl+hxS/KfQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFC5tu9Bi5k5L6gvYJovsGryKdovhMB8GA1UdIwQYMBaAFPftbgZkNuCgthdH
SVWop1jm4112MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OS0xdUJtUTI0S0MyRjBkSlZhaW5XT2JqWFhZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZi83YzExMzEtOTY2Zi00M2FmLThmNGMtYzNmYmM4ZDhmOTY2LzEv
TG0yNzBHTG1Ua3ZxQzlnbWktd2F2SXAyaS1FLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83
YzExMzEtOTY2Zi00M2FmLThmNGMtYzNmYmM4ZDhmOTY2LzEvOS0xdUJtUTI0S0My
RjBkSlZhaW5XT2JqWFhZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNcMA0GCSqGSIb3DQEBCwUAA4IB
AQCw17PfJdGnWy4fWgwgoeRYylsojLcavTyBNRGBoP3iClhepz9tGZ7c/gqezAeZ
44i1CfoeZNEQWHBJU3l1RdKsgrniVl+ICWugLhDFGejIH929FuPVuA2D3fmuNPXK
hFkscxBg5L0PNXhBi+EC0OdcurQliDxAeDPw929bvVj/jpp+qNgF/LP0Wyqk6S8b
Kmq6LNCvgXQEraZ4iXlP505o2BVidPOAI6/Vwcuh9Cs/Coq9omWBsFCtTZrfyEKk
UCW/hJEatQyXRvbdOLRPwy1UJ3UWF4fhXw+VpZWVjdN6L820hEWIDPqcE65u0NXu
D5aAOGwGe7M7/t7W36ZDSmW4
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org