Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LpLpae-0shH_OzaTc79jgY0Xhy4.roa
File: LpLpae-0shH_OzaTc79jgY0Xhy4.roa (raw, json)
Hash identifier: MKT7khoaymee5DbZ9riFXXXER57TKzg0ywL5c9lZ5HQ=
Subject key identifier: 2E:92:E9:69:EF:B4:B2:11:FF:3B:36:93:73:BF:63:81:8D:17:87:2E
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 03BC7C4F
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LpLpae-0shH_OzaTc79jgY0Xhy4.roa
Signing time: Tue 21 Jun 2022 15:28:44 +0000
ROA not before: Tue 21 Jun 2022 15:28:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34674
IP address blocks: 128.140.176.0/21 maxlen: 21
128.140.176.0/22 maxlen: 22
128.140.176.0/24 maxlen: 24
128.140.176.0/23 maxlen: 23
128.140.177.0/24 maxlen: 24
128.140.178.0/23 maxlen: 23
128.140.179.0/24 maxlen: 24
128.140.182.0/23 maxlen: 23
128.140.181.0/24 maxlen: 24
128.140.180.0/22 maxlen: 22
128.140.180.0/24 maxlen: 24
128.140.180.0/23 maxlen: 23
128.140.182.0/24 maxlen: 24
128.140.183.0/24 maxlen: 24
128.140.184.0/23 maxlen: 23
128.140.184.0/24 maxlen: 24
128.140.185.0/24 maxlen: 24
128.140.186.0/24 maxlen: 24
128.140.186.0/23 maxlen: 23
128.140.184.0/22 maxlen: 22
128.140.187.0/24 maxlen: 24
185.184.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62684239 (0x3bc7c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Jun 21 15:28:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e92e969efb4b211ff3b369373bf63818d17872e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:cb:ae:20:2e:f0:9b:e6:5e:bc:12:de:14:
fc:30:dc:02:09:87:64:52:35:35:b8:5c:27:fe:0f:
f1:57:76:bd:52:86:2d:3a:89:c3:a5:d4:ea:aa:87:
e1:61:66:db:8c:28:c9:aa:29:17:5d:2e:45:da:f9:
0a:6b:9f:2e:1f:c1:dc:06:0d:28:02:45:cf:85:a2:
e8:e7:0e:71:eb:62:f1:5d:0f:36:f4:8b:b7:28:c2:
2b:e0:a7:2d:1c:f0:12:92:53:29:49:7e:4c:2b:a3:
8f:4b:4b:7a:e9:df:4f:b4:9e:f4:a3:f2:4b:e8:bd:
81:24:f1:dc:89:9d:60:ba:a2:b0:3e:a4:8c:5c:ef:
d8:d4:00:90:48:c2:d9:bb:2c:23:1c:ca:7d:3b:42:
e2:2d:12:fc:63:bb:b6:92:97:6e:e4:c3:49:59:15:
fc:46:11:7b:fb:af:8d:0a:d2:8d:99:d8:dc:b0:5b:
cf:20:7e:3f:02:46:86:64:38:46:68:bd:25:7d:f7:
0c:d6:bf:1c:96:3f:87:ab:d0:cf:47:8d:39:2a:10:
74:a6:83:8a:53:26:82:2b:db:66:0f:47:0c:fc:a0:
73:c1:f0:08:6e:70:4a:a0:68:00:d6:c1:71:60:37:
35:8e:48:d4:b3:48:35:23:bb:c8:02:32:e2:ac:30:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:E9:69:EF:B4:B2:11:FF:3B:36:93:73:BF:63:81:8D:17:87:2E
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LpLpae-0shH_OzaTc79jgY0Xhy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.176.0-128.140.187.255
185.184.60.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e4:ef:d1:7e:c3:fa:32:89:09:4c:b8:61:c2:d1:ff:bc:ea:
cc:79:1c:32:64:be:b0:1b:ce:b3:92:f6:15:d8:2a:21:ec:6e:
b5:87:6f:55:85:86:83:3a:67:a3:66:3d:21:bf:18:22:e7:42:
db:46:b0:55:70:b9:c4:e9:8f:e4:79:5e:be:c6:fa:87:4f:50:
e9:73:0c:64:cc:af:3c:73:6d:78:f2:ca:ca:a7:97:36:a5:f0:
95:71:0f:78:f9:c9:2a:4c:ba:49:40:6f:21:b0:96:f4:a3:74:
13:88:c6:0d:b0:b5:22:a6:2d:aa:a3:b3:b4:38:33:d8:3b:c0:
90:c9:fc:57:ac:05:2d:36:52:ad:5b:f9:53:61:79:6e:77:f7:
09:a0:39:6a:5f:aa:c1:c0:3c:96:59:f8:70:ba:06:f1:69:d2:
79:ab:02:a7:21:d6:88:ed:77:55:ab:5a:15:24:bb:e1:61:fc:
eb:0d:d8:fc:e3:76:62:10:91:9e:e5:e0:80:ea:0d:15:e2:a5:
55:46:d0:a6:28:74:c2:b5:b0:12:34:74:c9:bd:04:78:36:c4:
2e:40:0e:72:f5:89:33:43:73:46:44:09:d6:bf:1b:a7:7e:a6:
22:59:56:f0:c3:a2:4d:4c:63:39:b7:45:f5:0a:df:c4:f0:e6:
7c:ac:9e:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEA7x8TzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTU2NjRlMDI5MzZjYjViNTQ1NGQ1OTVjNTM4MmI3ZTdhMGM3OTQ0MB4XDTIyMDYy
MTE1Mjg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmU5MmU5NjllZmI0
YjIxMWZmM2IzNjkzNzNiZjYzODE4ZDE3ODcyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANUvy64gLvCb5l68Et4U/DDcAgmHZFI1NbhcJ/4P8Vd2vVKG
LTqJw6XU6qqH4WFm24woyaopF10uRdr5CmufLh/B3AYNKAJFz4Wi6OcOceti8V0P
NvSLtyjCK+CnLRzwEpJTKUl+TCujj0tLeunfT7Se9KPyS+i9gSTx3ImdYLqisD6k
jFzv2NQAkEjC2bssIxzKfTtC4i0S/GO7tpKXbuTDSVkV/EYRe/uvjQrSjZnY3LBb
zyB+PwJGhmQ4Rmi9JX33DNa/HJY/h6vQz0eNOSoQdKaDilMmgivbZg9HDPygc8Hw
CG5wSqBoANbBcWA3NY5I1LNINSO7yAIy4qwwVe8CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQukulp77SyEf87NpNzv2OBjReHLjAfBgNVHSMEGDAWgBQuVmTgKTbLW1RU
1ZXFOCt+egx5RDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xsWms0Q2syeTF0VVZOV1Z4VGdyZm5vTWVVUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDYvMjdjOTE5LWNjY2UtNDZhOS04NGIzLWVmODFmY2E2MzAyOS8x
L0xwTHBhZS0wc2hIX096YVRjNzlqZ1kwWGh5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYv
MjdjOTE5LWNjY2UtNDZhOS04NGIzLWVmODFmY2E2MzAyOS8xL0xsWms0Q2syeTF0
VVZOV1Z4VGdyZm5vTWVVUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQEgIywAwQCgIy4AwQAubg8MA0G
CSqGSIb3DQEBCwUAA4IBAQAn5O/RfsP6MokJTLhhwtH/vOrMeRwyZL6wG86zkvYV
2Coh7G61h29VhYaDOmejZj0hvxgi50LbRrBVcLnE6Y/keV6+xvqHT1DpcwxkzK88
c2148srKp5c2pfCVcQ94+ckqTLpJQG8hsJb0o3QTiMYNsLUipi2qo7O0ODPYO8CQ
yfxXrAUtNlKtW/lTYXlud/cJoDlqX6rBwDyWWfhwugbxadJ5qwKnIdaI7XdVq1oV
JLvhYfzrDdj843ZiEJGe5eCA6g0V4qVVRtCmKHTCtbASNHTJvQR4NsQuQA5y9Ykz
Q3NGRAnWvxunfqYiWVbww6JNTGM5t0X1Ct/E8OZ8rJ6N
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:59 2025 by rpki-client