Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/LvKgCeJLiUUZGnXIvFirHfq_3Is.roa
File: LvKgCeJLiUUZGnXIvFirHfq_3Is.roa (raw, json)
Hash identifier: 1wcESZibhLNBtsx1fOEai7ZhTzu8+sjzq/gfCA/b6tQ=
Subject key identifier: 2E:F2:A0:09:E2:4B:89:45:19:1A:75:C8:BC:58:AB:1D:FA:BF:DC:8B
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0B1F5717
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/LvKgCeJLiUUZGnXIvFirHfq_3Is.roa
Signing time: Sat 01 Jan 2022 08:00:32 +0000
ROA not before: Sat 01 Jan 2022 08:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200747
IP address blocks: 2a04:5d00:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186603287 (0xb1f5717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 08:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef2a009e24b8945191a75c8bc58ab1dfabfdc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:52:1d:a1:3d:8b:4a:e6:6d:6b:45:58:44:
11:70:92:4b:ab:5b:ee:e3:67:f0:5c:a9:31:0c:c6:
49:9e:df:79:70:c5:c3:b6:51:12:57:ee:f1:1e:f5:
96:82:6c:2c:0c:6e:fd:03:2a:cc:29:3c:61:95:05:
50:b0:e9:fe:96:cf:ab:9c:36:4b:2a:70:da:de:0d:
54:3f:39:6e:e4:17:06:e3:f1:99:aa:57:db:fb:c5:
05:62:40:aa:66:4b:ae:d9:19:7c:cf:e3:70:55:06:
cb:97:87:d1:0a:e7:f7:b2:62:24:01:f9:65:39:0f:
aa:c7:f3:27:ff:9b:24:86:cf:c5:37:bb:b7:22:37:
bf:e6:30:60:b7:60:74:ea:25:6e:91:1e:10:00:96:
27:ed:c6:3d:cf:2f:f9:31:2f:53:03:35:e1:8e:27:
01:96:54:62:48:0a:c1:44:9a:f4:ff:da:dd:b9:65:
49:d3:aa:8e:0f:6a:76:03:5f:41:0c:0d:79:b1:41:
37:2f:9a:2f:6b:f4:0c:8f:fb:05:83:22:3c:a9:c5:
ab:fe:47:72:22:2d:e3:60:ea:c0:bc:00:a6:70:39:
51:d8:95:e5:93:f2:03:66:38:82:98:24:18:10:90:
a3:20:30:af:82:3b:1d:be:b3:fb:a5:56:aa:c8:34:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:A0:09:E2:4B:89:45:19:1A:75:C8:BC:58:AB:1D:FA:BF:DC:8B
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/LvKgCeJLiUUZGnXIvFirHfq_3Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d00:10::/44
Signature Algorithm: sha256WithRSAEncryption
6d:bc:a6:d7:d1:fd:2f:da:92:85:5a:2d:bb:09:11:dc:85:d7:
fc:bd:cf:c6:d0:9f:84:1f:4f:77:ec:bf:25:d2:14:da:eb:e4:
14:7d:e0:b9:3d:bf:9a:c0:4b:12:4d:4b:57:a5:4a:70:a4:db:
98:78:d3:0e:1f:a9:b2:a9:19:a3:bd:e6:15:0c:80:7e:bb:1a:
e3:1e:ea:98:6d:12:13:2b:cc:ac:3f:47:e4:4b:06:fe:56:cb:
38:79:b2:22:45:ee:bc:f5:f1:d8:3e:cc:26:9a:17:00:5c:45:
ee:b5:1b:bf:a5:a5:12:00:9c:ed:0b:e9:5f:92:c2:e2:c1:7d:
ca:8a:01:0e:2a:86:4e:24:73:2d:fe:e2:78:7c:ad:ef:5e:bd:
f4:81:5d:85:c3:b9:b2:66:16:91:51:7f:68:8b:83:f3:bc:a0:
40:ed:cd:4b:fb:31:cc:f6:09:97:75:2e:77:db:92:ed:fc:2a:
0c:d0:15:86:3b:cd:20:b6:ba:f5:72:00:33:0e:d1:1d:23:62:
eb:05:77:fe:75:ae:61:d5:4d:a8:12:90:f7:d7:c0:86:45:39:
b1:36:ab:7d:63:7f:fa:0b:9d:5e:aa:70:f8:0c:d6:0d:0c:20:
0c:8d:61:c8:04:9c:e2:56:d9:6b:57:d9:3e:ac:3b:4b:c6:f7:
90:fc:8d:51
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECx9XFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTFmMGI3M2U2N2Q2M2M1YTRjOTA0NjgxNDE2NmE5ZTIxNjI1ZjI4MB4XDTIyMDEw
MTA4MDAzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmVmMmEwMDllMjRi
ODk0NTE5MWE3NWM4YmM1OGFiMWRmYWJmZGM4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXfUh2hPYtK5m1rRVhEEXCSS6tb7uNn8FypMQzGSZ7feXDF
w7ZRElfu8R71loJsLAxu/QMqzCk8YZUFULDp/pbPq5w2Sypw2t4NVD85buQXBuPx
mapX2/vFBWJAqmZLrtkZfM/jcFUGy5eH0Qrn97JiJAH5ZTkPqsfzJ/+bJIbPxTe7
tyI3v+YwYLdgdOolbpEeEACWJ+3GPc8v+TEvUwM14Y4nAZZUYkgKwUSa9P/a3bll
SdOqjg9qdgNfQQwNebFBNy+aL2v0DI/7BYMiPKnFq/5HciIt42DqwLwApnA5UdiV
5ZPyA2Y4gpgkGBCQoyAwr4I7Hb6z+6VWqsg0PFcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQu8qAJ4kuJRRkadci8WKsd+r/cizAfBgNVHSMEGDAWgBQpHwtz5n1jxaTJ
BGgUFmqeIWJfKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tSOExjLVo5WThXa3lRUm9GQlpxbmlGaVh5Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmEvNDhkNjA5LTA4OGQtNDFlNC1iZWM0LTM4ZWU4ZmQ2NGU3ZC8x
L0x2S2dDZUpMaVVVWkduWEl2RmlySGZxXzNJcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEv
NDhkNjA5LTA4OGQtNDFlNC1iZWM0LTM4ZWU4ZmQ2NGU3ZC8xL0tSOExjLVo5WThX
a3lRUm9GQlpxbmlGaVh5Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoEXQAAEDANBgkqhkiG9w0BAQsF
AAOCAQEAbbym19H9L9qShVotuwkR3IXX/L3PxtCfhB9Pd+y/JdIU2uvkFH3guT2/
msBLEk1LV6VKcKTbmHjTDh+psqkZo73mFQyAfrsa4x7qmG0SEyvMrD9H5EsG/lbL
OHmyIkXuvPXx2D7MJpoXAFxF7rUbv6WlEgCc7QvpX5LC4sF9yooBDiqGTiRzLf7i
eHyt71699IFdhcO5smYWkVF/aIuD87ygQO3NS/sxzPYJl3Uud9uS7fwqDNAVhjvN
ILa69XIAMw7RHSNi6wV3/nWuYdVNqBKQ99fAhkU5sTarfWN/+gudXqpw+AzWDQwg
DI1hyASc4lbZa1fZPqw7S8b3kPyNUQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:40 2025 by rpki-client