Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/l-LAE-k_IDOViIzdzULYjhLG-p8.roa
File: l-LAE-k_IDOViIzdzULYjhLG-p8.roa (raw, json)
Hash identifier: /a4wbIHSs9iGPnW7+ObUXZ49d9h6URkQJ35VL4K5pmc=
Subject key identifier: 97:E2:C0:13:E9:3F:20:33:95:88:8C:DD:CD:42:D8:8E:12:C6:FA:9F
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 30A25A90
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/l-LAE-k_IDOViIzdzULYjhLG-p8.roa
Signing time: Sun 13 Mar 2022 06:43:26 +0000
ROA not before: Sun 13 Mar 2022 06:43:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 109.160.34.0/24 maxlen: 24
109.160.35.0/24 maxlen: 24
109.160.33.0/24 maxlen: 24
109.160.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815946384 (0x30a25a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Mar 13 06:43:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97e2c013e93f203395888cddcd42d88e12c6fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:b7:ad:89:15:da:15:88:f6:f1:97:c2:e1:
f2:86:40:08:2a:74:7a:4b:1d:61:ed:43:14:1a:6a:
50:d4:7c:24:83:58:be:9f:b2:28:c4:3f:12:72:1f:
32:8a:5c:c3:b6:bd:81:40:99:be:f3:35:96:7f:cd:
48:9b:af:94:70:6b:89:e2:c9:c2:e6:dd:c7:02:7b:
bb:c8:ae:4f:23:0a:8d:92:8e:ab:60:94:14:d6:9d:
03:9a:62:40:20:b0:58:8d:6f:ca:18:6c:7b:ea:29:
3e:dd:f4:7b:24:c3:fc:08:ba:74:67:53:0c:e9:3d:
c2:f4:3e:07:02:c8:d5:2c:e4:b2:d5:55:fb:ae:29:
a2:0a:9b:ee:9f:57:42:ef:df:b3:ea:26:b1:d0:8b:
16:b7:cd:ed:e2:72:54:2b:49:e9:38:71:cb:d8:21:
bc:cc:85:98:83:f0:c6:f6:50:33:6d:7d:b0:29:e1:
71:64:2e:5f:37:1a:4a:54:fb:7c:5e:e5:df:75:f7:
87:e9:93:7c:f8:18:9b:f1:3c:83:b0:b2:44:cc:fc:
4b:2c:08:ad:34:ee:20:ec:6f:ab:cc:34:eb:e8:6f:
e2:c9:98:58:ea:bf:6d:e6:24:df:eb:9d:2f:fc:79:
d7:93:e8:1c:2d:9f:23:1f:18:27:b5:73:1a:8e:44:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E2:C0:13:E9:3F:20:33:95:88:8C:DD:CD:42:D8:8E:12:C6:FA:9F
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/l-LAE-k_IDOViIzdzULYjhLG-p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.33.0-109.160.36.255
Signature Algorithm: sha256WithRSAEncryption
05:71:73:6a:c1:1e:bd:3d:e1:ea:b7:6f:8a:bf:93:72:4c:27:
20:0b:bc:93:76:97:51:8d:4f:30:49:68:18:80:32:b1:f7:5c:
45:57:7c:b6:27:4b:70:38:d4:4b:64:9e:ff:70:5f:bd:09:af:
9e:1f:20:d2:01:fb:22:ef:5e:d1:cd:48:c4:30:69:cd:55:b7:
93:75:45:49:95:60:d2:72:1b:1b:cf:b5:2b:d1:45:1e:8b:3a:
4f:8d:12:b8:6a:cf:96:2c:66:b9:2d:3a:df:95:c8:90:66:7d:
ec:7b:85:af:47:1f:c4:51:20:c4:66:05:dc:fd:68:02:1a:80:
b5:0b:18:9d:6d:45:47:c6:c7:b2:95:9d:62:53:14:39:4f:61:
74:b9:b8:26:d4:7e:5e:b9:2a:ba:1e:b6:5a:a2:1d:e0:b6:14:
00:c3:b4:aa:1f:e3:b9:66:ca:1d:3b:48:65:54:0a:df:5e:95:
51:ff:e5:22:9a:c3:b8:e6:54:33:e4:25:61:6c:d7:04:28:be:
b7:9a:e1:8f:81:0b:89:9c:59:3e:48:ae:a1:53:28:a9:fb:7a:
99:3f:3b:d8:2e:b9:09:79:7f:5c:46:ea:b0:e5:f6:05:a2:a0:
5e:69:f5:82:91:01:cc:a0:5c:7a:7f:95:ad:36:ae:62:47:ed:
0a:3f:60:06
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEMKJakDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjJhOGMxZDMxMTg5NTAxNjEwOGZmYmQxNDU3NWM3N2NjMjg3NzNhMB4XDTIyMDMx
MzA2NDMyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTdlMmMwMTNlOTNm
MjAzMzk1ODg4Y2RkY2Q0MmQ4OGUxMmM2ZmE5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnCt62JFdoViPbxl8Lh8oZACCp0eksdYe1DFBpqUNR8JINY
vp+yKMQ/EnIfMopcw7a9gUCZvvM1ln/NSJuvlHBrieLJwubdxwJ7u8iuTyMKjZKO
q2CUFNadA5piQCCwWI1vyhhse+opPt30eyTD/Ai6dGdTDOk9wvQ+BwLI1SzkstVV
+64pogqb7p9XQu/fs+omsdCLFrfN7eJyVCtJ6Thxy9ghvMyFmIPwxvZQM219sCnh
cWQuXzcaSlT7fF7l33X3h+mTfPgYm/E8g7CyRMz8SywIrTTuIOxvq8w06+hv4smY
WOq/beYk3+udL/x515PoHC2fIx8YJ7VzGo5E5MkCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSX4sAT6T8gM5WIjN3NQtiOEsb6nzAfBgNVHSMEGDAWgBRyKowdMRiVAWEI
/70UV1x3zCh3OjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NpcU1IVEVZbFFGaENQLTlGRmRjZDh3b2R6by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvYjFmNmVlLWM0ZWYtNDM1NS1hZjM2LWE1NThlZTY1NDMxZi8x
L2wtTEFFLWtfSURPVmlJemR6VUxZamhMRy1wOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
YjFmNmVlLWM0ZWYtNDM1NS1hZjM2LWE1NThlZTY1NDMxZi8xL2NpcU1IVEVZbFFG
aENQLTlGRmRjZDh3b2R6by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAbaAhAwQAbaAkMA0GCSqGSIb3
DQEBCwUAA4IBAQAFcXNqwR69PeHqt2+Kv5NyTCcgC7yTdpdRjU8wSWgYgDKx91xF
V3y2J0twONRLZJ7/cF+9Ca+eHyDSAfsi717RzUjEMGnNVbeTdUVJlWDSchsbz7Ur
0UUeizpPjRK4as+WLGa5LTrflciQZn3se4WvRx/EUSDEZgXc/WgCGoC1CxidbUVH
xseylZ1iUxQ5T2F0ubgm1H5euSq6HrZaoh3gthQAw7SqH+O5ZsodO0hlVArfXpVR
/+UimsO45lQz5CVhbNcEKL63muGPgQuJnFk+SK6hUyip+3qZPzvYLrkJeX9cRuqw
5fYFoqBeafWCkQHMoFx6f5WtNq5iR+0KP2AG
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:16 2025 by rpki-client