Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/lmvCCYlj_hdHltitv5LPudWYXKs.roa
File: lmvCCYlj_hdHltitv5LPudWYXKs.roa (raw, json)
Hash identifier: xlYWSP7Ii2c5lfr4nJsNjQbQZQXRIZjXkRCsNt2JF4Q=
Subject key identifier: 96:6B:C2:09:89:63:FE:17:47:96:D8:AD:BF:92:CF:B9:D5:98:5C:AB
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 095FC368
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/lmvCCYlj_hdHltitv5LPudWYXKs.roa
Signing time: Sat 01 Jan 2022 01:57:45 +0000
ROA not before: Sat 01 Jan 2022 01:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44384
IP address blocks: 92.61.192.0/20 maxlen: 20
185.111.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157270888 (0x95fc368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Jan 1 01:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=966bc2098963fe174796d8adbf92cfb9d5985cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:51:c6:a1:5c:4c:00:7f:38:b8:88:f2:4b:
55:55:99:c9:79:91:df:76:16:7a:d2:18:95:46:a6:
24:52:8f:62:1d:72:e9:b8:60:36:56:a8:45:44:6b:
85:32:e2:7d:09:65:07:0a:d5:55:0c:f7:0a:6d:ad:
73:6e:89:9a:5e:6f:0d:26:43:9a:42:f7:a3:49:e0:
da:1f:06:c3:80:d6:e4:c8:ce:9c:53:6f:ae:e8:b4:
36:94:a9:4a:f4:8a:4b:4f:45:32:b4:20:98:92:9a:
de:67:7b:dc:ba:5a:cb:a6:0d:e9:95:75:c8:b4:2f:
ba:e1:a9:37:9f:fe:53:9b:53:a6:69:01:01:3b:2a:
ed:e8:a0:7b:57:0c:22:1e:5a:f5:62:3c:e0:6f:45:
64:4c:c7:d4:de:77:27:45:c0:bc:73:84:01:4b:9e:
07:6b:8a:8a:38:67:f9:16:a4:88:1c:03:20:3f:fd:
1e:eb:9c:0a:d6:22:c8:1e:95:a6:e5:5e:19:33:2f:
bd:cf:92:de:09:55:c1:f5:ba:a2:53:96:6a:9e:27:
e1:51:e4:4d:e1:24:a3:da:b2:64:06:31:cd:ff:cb:
37:ee:d2:df:1b:ce:54:9f:e4:6a:87:64:68:16:22:
27:85:f6:08:4e:e7:d1:11:97:5e:f3:99:1c:dd:18:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:C2:09:89:63:FE:17:47:96:D8:AD:BF:92:CF:B9:D5:98:5C:AB
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/lmvCCYlj_hdHltitv5LPudWYXKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.192.0/20
185.111.140.0/22
Signature Algorithm: sha256WithRSAEncryption
36:ac:c1:cf:be:c6:5c:e4:98:53:85:d2:b3:6a:cf:af:ab:3b:
ea:98:2e:af:f3:45:96:45:41:3f:34:99:b7:3d:b4:a6:6b:94:
77:78:f3:bd:78:78:4c:64:99:40:99:4e:77:e4:76:64:ca:96:
fe:29:2e:dd:e1:a3:85:58:da:57:51:99:e5:37:73:88:bb:c2:
3a:a5:fe:97:95:95:38:2d:e4:2d:62:7d:36:12:ce:62:a1:86:
ee:6b:6f:01:e6:03:7d:9b:c4:7e:69:f8:f4:c2:94:ca:bc:20:
3d:f1:f9:bf:fc:77:80:ee:b2:c9:d0:c4:c5:cf:5b:71:3c:49:
b3:86:57:ab:04:d1:cf:c4:c2:8b:43:59:7e:74:66:9c:b0:a7:
98:35:0b:b7:9a:7b:ce:1d:7d:6e:f4:f1:00:22:e7:d5:e4:16:
bf:c8:d6:58:77:18:87:35:7f:ea:a0:3a:ba:14:b7:b2:96:41:
2b:a5:b1:ef:20:30:d6:96:2e:49:99:27:6c:67:31:cb:3d:4d:
80:75:22:7d:09:49:f0:3b:b8:59:44:42:10:80:de:5b:3a:8e:
cd:e8:00:0b:2d:33:79:5e:30:a9:1a:ff:37:1e:26:0c:e7:81:
98:6e:1b:76:bb:58:ff:7d:18:36:72:cd:41:2c:ae:c3:7c:63:
ce:cd:53:7b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECV/DaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NGM0NDU1ZWJiMDkxODJkNGZiZWIzYjQ1NjBlMjA4OTg2ZTFhZTIxMB4XDTIyMDEw
MTAxNTc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTY2YmMyMDk4OTYz
ZmUxNzQ3OTZkOGFkYmY5MmNmYjlkNTk4NWNhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJtDUcahXEwAfzi4iPJLVVWZyXmR33YWetIYlUamJFKPYh1y
6bhgNlaoRURrhTLifQllBwrVVQz3Cm2tc26Jml5vDSZDmkL3o0ng2h8Gw4DW5MjO
nFNvrui0NpSpSvSKS09FMrQgmJKa3md73Lpay6YN6ZV1yLQvuuGpN5/+U5tTpmkB
ATsq7eige1cMIh5a9WI84G9FZEzH1N53J0XAvHOEAUueB2uKijhn+RakiBwDID/9
HuucCtYiyB6VpuVeGTMvvc+S3glVwfW6olOWap4n4VHkTeEko9qyZAYxzf/LN+7S
3xvOVJ/kaodkaBYiJ4X2CE7n0RGXXvOZHN0YeVcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSWa8IJiWP+F0eW2K2/ks+51ZhcqzAfBgNVHSMEGDAWgBRExEVeuwkYLU++
s7RWDiCJhuGuITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JNUkZYcnNKR0MxUHZyTzBWZzRnaVliaHJpRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMDVhOTAzLWQ5YzAtNDY4OS05YWM4LWMzMmRlOTBlM2ZjMy8x
L2xtdkNDWWxqX2hkSGx0aXR2NUxQdWRXWVhLcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MDVhOTAzLWQ5YzAtNDY4OS05YWM4LWMzMmRlOTBlM2ZjMy8xL1JNUkZYcnNKR0Mx
UHZyTzBWZzRnaVliaHJpRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFw9wAMEArlvjDANBgkqhkiG9w0B
AQsFAAOCAQEANqzBz77GXOSYU4XSs2rPr6s76pgur/NFlkVBPzSZtz20pmuUd3jz
vXh4TGSZQJlOd+R2ZMqW/iku3eGjhVjaV1GZ5TdziLvCOqX+l5WVOC3kLWJ9NhLO
YqGG7mtvAeYDfZvEfmn49MKUyrwgPfH5v/x3gO6yydDExc9bcTxJs4ZXqwTRz8TC
i0NZfnRmnLCnmDULt5p7zh19bvTxACLn1eQWv8jWWHcYhzV/6qA6uhS3spZBK6Wx
7yAw1pYuSZknbGcxyz1NgHUifQlJ8Du4WURCEIDeWzqOzegACy0zeV4wqRr/Nx4m
DOeBmG4bdrtY/30YNnLNQSyuw3xjzs1Tew==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:12 2025 by rpki-client