Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LT-UkqLg1zIk9kAlH_dnHJRvROY.roa
File: LT-UkqLg1zIk9kAlH_dnHJRvROY.roa (raw, json)
Hash identifier: sohiLi9qxXYGFis5x/vfpjkldZgxsH5KXBt3f1Q8iQU=
Subject key identifier: 2D:3F:94:92:A2:E0:D7:32:24:F6:40:25:1F:F7:67:1C:94:6F:44:E6
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 02C2CB6E
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LT-UkqLg1zIk9kAlH_dnHJRvROY.roa
Signing time: Tue 22 Feb 2022 11:50:47 +0000
ROA not before: Tue 22 Feb 2022 11:50:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 164.215.98.0/24 maxlen: 24
164.215.97.0/24 maxlen: 24
164.215.96.0/24 maxlen: 24
164.215.99.0/24 maxlen: 24
88.151.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46320494 (0x2c2cb6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 22 11:50:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3f9492a2e0d73224f640251ff7671c946f44e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:e5:24:a5:61:f6:30:af:db:c1:0a:b3:7e:
fc:d0:09:8c:5a:f2:7a:84:b3:49:3a:c8:fd:62:32:
9e:25:b4:d7:7b:89:04:43:a7:1d:35:88:01:d9:ed:
89:b3:e4:d3:00:6a:40:8a:b5:67:54:4b:47:28:08:
e1:31:88:7f:b5:c2:24:16:b9:0f:3a:2b:91:23:f7:
c0:e4:92:33:83:ec:f4:9a:fb:f4:45:ed:ee:39:1b:
2d:0a:92:cc:6f:35:0a:30:f6:7c:38:36:2b:16:d9:
56:8d:f4:a3:bf:66:84:54:ce:6d:76:26:99:b4:e3:
5c:61:ed:2e:5c:57:a2:9a:f0:81:71:fd:af:72:3a:
61:60:dd:be:42:7c:ab:e6:be:14:a3:08:c4:35:f9:
6e:c0:ed:71:9f:6c:7c:16:39:d6:d1:36:ed:71:9a:
b9:c5:64:83:9e:45:41:37:59:e6:bb:05:e8:d8:cd:
1b:8c:e9:8b:a6:a8:3d:8f:69:c6:1d:c3:07:c3:ec:
19:e9:88:25:bd:97:ab:e6:7f:66:7c:ec:0a:44:73:
28:41:6f:db:96:e1:a5:4f:f8:84:d8:fe:7d:72:d3:
1b:41:a7:77:92:49:7c:ef:9c:70:63:c3:b1:75:c5:
c3:0f:93:be:99:5d:f7:1a:9f:7a:11:67:11:b6:5c:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:94:92:A2:E0:D7:32:24:F6:40:25:1F:F7:67:1C:94:6F:44:E6
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LT-UkqLg1zIk9kAlH_dnHJRvROY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.194.0/24
164.215.96.0/22
Signature Algorithm: sha256WithRSAEncryption
34:21:57:a6:1a:22:81:6e:f4:e0:94:15:88:01:9d:4e:02:e8:
f3:65:0c:47:09:2d:44:9e:d5:b5:13:d0:03:aa:66:1c:73:77:
8f:bc:64:9e:05:ea:d0:af:f1:17:6b:ce:6e:4e:f0:a7:ee:aa:
0b:58:31:6b:10:d5:9f:dd:2d:88:c4:e5:c6:9a:e2:6e:25:e6:
1d:d1:f5:ce:ff:b9:b1:32:30:7e:71:d7:fd:e6:57:32:9a:2d:
d4:d3:96:37:27:35:5e:e9:11:2f:45:a7:39:2f:95:c2:72:bf:
fe:ab:3b:83:02:4d:c1:9d:34:0d:62:a5:66:b5:33:65:65:4d:
46:f4:bb:74:50:11:a5:cf:46:c4:e4:08:33:ab:2e:5d:7a:47:
ff:bd:f1:4b:db:53:25:29:57:70:8c:d1:a9:97:4a:cd:d5:14:
3e:d1:d6:3d:04:ad:b6:7f:02:5d:f0:98:5f:93:bd:61:4b:59:
0f:91:96:12:64:9f:80:55:16:d8:e5:20:d6:56:4d:a2:8a:b3:
23:64:76:d2:d7:2d:6b:5f:43:96:73:86:12:7d:a0:ca:4f:e4:
06:33:e2:96:b7:e1:ef:06:22:c7:96:1b:d2:3c:bc:6a:61:11:
c8:12:a4:38:2e:72:f4:0f:23:b0:7e:dd:b5:15:84:48:fe:bc:
b8:ad:7a:23
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAsLLbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMB4XDTIyMDIy
MjExNTA0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQzZjk0OTJhMmUw
ZDczMjI0ZjY0MDI1MWZmNzY3MWM5NDZmNDRlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAR5SSlYfYwr9vBCrN+/NAJjFryeoSzSTrI/WIyniW013uJ
BEOnHTWIAdntibPk0wBqQIq1Z1RLRygI4TGIf7XCJBa5DzorkSP3wOSSM4Ps9Jr7
9EXt7jkbLQqSzG81CjD2fDg2KxbZVo30o79mhFTObXYmmbTjXGHtLlxXoprwgXH9
r3I6YWDdvkJ8q+a+FKMIxDX5bsDtcZ9sfBY51tE27XGaucVkg55FQTdZ5rsF6NjN
G4zpi6aoPY9pxh3DB8PsGemIJb2Xq+Z/ZnzsCkRzKEFv25bhpU/4hNj+fXLTG0Gn
d5JJfO+ccGPDsXXFww+Tvpld9xqfehFnEbZcz1sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQtP5SSouDXMiT2QCUf92cclG9E5jAfBgNVHSMEGDAWgBR9BqQrskRuUfGS
6jdb337sWlHHfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8x
L0xULVVrcUxnMXpJazlrQWxIX2RuSEpSdlJPWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxI
eGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFiXwgMEAqTXYDANBgkqhkiG9w0B
AQsFAAOCAQEANCFXphoigW704JQViAGdTgLo82UMRwktRJ7VtRPQA6pmHHN3j7xk
ngXq0K/xF2vObk7wp+6qC1gxaxDVn90tiMTlxpribiXmHdH1zv+5sTIwfnHX/eZX
Mpot1NOWNyc1XukRL0WnOS+VwnK//qs7gwJNwZ00DWKlZrUzZWVNRvS7dFARpc9G
xOQIM6suXXpH/73xS9tTJSlXcIzRqZdKzdUUPtHWPQSttn8CXfCYX5O9YUtZD5GW
EmSfgFUW2OUg1lZNooqzI2R20tcta19DlnOGEn2gyk/kBjPilrfh7wYix5Yb0jy8
amERyBKkOC5y9A8jsH7dtRWESP68uK16Iw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:40 2025 by rpki-client