Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/LBVZr_VozMLQFa-WJ4UXaRnVBys.roa
File: LBVZr_VozMLQFa-WJ4UXaRnVBys.roa (raw, json)
Hash identifier: 5fcPC+N2aKeac9CxpqqZJr9RV+QRIT3+heK/sJvfXE0=
Subject key identifier: 2C:15:59:AF:F5:68:CC:C2:D0:15:AF:96:27:85:17:69:19:D5:07:2B
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0241F920
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/LBVZr_VozMLQFa-WJ4UXaRnVBys.roa
Signing time: Tue 05 Apr 2022 13:17:51 +0000
ROA not before: Tue 05 Apr 2022 13:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211820
IP address blocks: 157.180.214.0/24 maxlen: 24
157.180.215.0/24 maxlen: 24
194.45.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37878048 (0x241f920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Apr 5 13:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c1559aff568ccc2d015af962785176919d5072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:d8:46:ef:36:24:2d:9b:09:d7:0e:24:a1:
39:3a:1f:89:1b:61:58:de:1b:b6:10:e7:0e:4f:54:
ce:39:b3:75:f2:be:c7:ac:42:bb:ef:2e:b1:d1:48:
59:f9:2c:31:d7:89:30:a5:50:c9:4b:8d:e9:7d:82:
8c:8e:fd:10:01:0f:ad:08:7c:32:4f:39:a0:c6:02:
f0:82:80:d3:6c:17:fe:83:97:a2:3c:77:cc:50:4b:
ac:d2:f3:24:48:51:b7:97:13:6e:fe:b0:01:0e:f8:
aa:75:54:df:54:9e:17:c9:44:ba:dc:8e:f3:92:94:
18:b2:21:55:bf:56:48:4c:6c:91:42:5a:59:9c:fa:
ca:a4:34:92:9d:86:c0:c3:2f:41:63:af:ae:81:d9:
12:d5:62:cc:4b:0b:88:47:4d:c6:cd:b7:d3:5c:2e:
e0:94:e5:5e:ba:2a:aa:e9:eb:f3:aa:b3:da:c4:5b:
78:97:b5:7c:a9:71:a0:5a:77:aa:a3:a1:b7:85:b1:
50:42:54:a0:86:bd:8c:ba:ee:5b:91:f1:7c:de:41:
0a:84:3d:3d:a4:6b:a1:0d:59:0d:05:b1:bc:d6:20:
f8:41:7b:bf:4b:e0:6e:cc:ab:d1:f6:b7:f9:4a:66:
0b:94:48:4e:0f:7c:5e:32:c1:51:c5:5a:d4:1a:42:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:59:AF:F5:68:CC:C2:D0:15:AF:96:27:85:17:69:19:D5:07:2B
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/LBVZr_VozMLQFa-WJ4UXaRnVBys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.180.214.0/23
194.45.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2d:85:ae:c1:e3:4a:4d:4e:8f:42:3c:79:ca:0a:69:48:0f:
6d:b6:31:95:1d:1e:1d:53:8f:56:a1:34:74:fd:01:77:ce:88:
6f:22:24:10:e4:42:a2:0e:3b:22:47:ba:70:ac:0d:37:4a:c4:
6f:5f:5b:e3:2d:93:1a:42:7d:6d:4e:1d:f1:12:04:c5:06:8c:
42:67:68:5d:33:97:ab:77:7a:f1:3e:9c:b9:64:cb:18:0f:24:
f8:ea:93:ce:09:f3:4b:8b:99:26:8c:1f:67:76:2f:c6:f6:4c:
5b:25:8c:12:23:fc:d3:1b:cd:46:22:fe:c8:14:ba:b5:8d:99:
c9:b9:4b:c3:95:ee:ed:98:2d:30:3a:a5:97:7a:9b:78:08:a7:
94:5f:37:70:6b:d5:af:a9:1b:07:44:d5:4c:1e:67:89:d8:55:
c4:fa:27:5d:17:85:90:87:8f:d1:bc:e3:45:4c:66:56:dc:6c:
88:f4:d4:07:c4:04:11:3b:c2:2f:b2:49:9f:6b:22:ca:b9:76:
c8:67:f7:70:13:57:71:31:2f:09:64:eb:15:12:af:b2:8d:c2:
f0:3f:45:15:13:12:c9:57:c2:65:b9:d3:a0:09:00:f7:b4:f6:
19:62:28:1a:ab:72:28:4c:68:c1:90:86:44:fa:34:d4:92:e9:
4b:16:bb:a4
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAkH5IDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Y2E4YTEzMjUxOWEyNDI5NDk0OTczNjNiOGNhYTMzZTcyYzY3M2Y4MB4XDTIyMDQw
NTEzMTc1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmMxNTU5YWZmNTY4
Y2NjMmQwMTVhZjk2Mjc4NTE3NjkxOWQ1MDcyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMn+2EbvNiQtmwnXDiShOTofiRthWN4bthDnDk9UzjmzdfK+
x6xCu+8usdFIWfksMdeJMKVQyUuN6X2CjI79EAEPrQh8Mk85oMYC8IKA02wX/oOX
ojx3zFBLrNLzJEhRt5cTbv6wAQ74qnVU31SeF8lEutyO85KUGLIhVb9WSExskUJa
WZz6yqQ0kp2GwMMvQWOvroHZEtVizEsLiEdNxs2301wu4JTlXroqqunr86qz2sRb
eJe1fKlxoFp3qqOht4WxUEJUoIa9jLruW5HxfN5BCoQ9PaRroQ1ZDQWxvNYg+EF7
v0vgbsyr0fa3+UpmC5RITg98XjLBUcVa1BpCyCUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQsFVmv9WjMwtAVr5YnhRdpGdUHKzAfBgNVHSMEGDAWgBScqKEyUZokKUlJ
c2O4yqM+csZz+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25LaWhNbEdhSkNsSlNYTmp1TXFqUG5MR2NfZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvM2UwZTlhLTUxZjMtNDlkZS05ZDFiLTAwY2Q4NmFmODQ5ZC8x
L0xCVlpyX1Zvek1MUUZhLVdKNFVYYVJuVkJ5cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
M2UwZTlhLTUxZjMtNDlkZS05ZDFiLTAwY2Q4NmFmODQ5ZC8xL25LaWhNbEdhSkNs
SlNYTmp1TXFqUG5MR2NfZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAZ201gMEAMItFDANBgkqhkiG9w0B
AQsFAAOCAQEAKi2FrsHjSk1Oj0I8ecoKaUgPbbYxlR0eHVOPVqE0dP0Bd86IbyIk
EORCog47Ike6cKwNN0rEb19b4y2TGkJ9bU4d8RIExQaMQmdoXTOXq3d68T6cuWTL
GA8k+OqTzgnzS4uZJowfZ3YvxvZMWyWMEiP80xvNRiL+yBS6tY2ZyblLw5Xu7Zgt
MDqll3qbeAinlF83cGvVr6kbB0TVTB5nidhVxPonXReFkIeP0bzjRUxmVtxsiPTU
B8QEETvCL7JJn2siyrl2yGf3cBNXcTEvCWTrFRKvso3C8D9FFRMSyVfCZbnToAkA
97T2GWIoGqtyKExowZCGRPo01JLpSxa7pA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:10 2023 by rpki-client on console-fra.rpki-client.org