Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/LEZgMacGZGZVpY1iQXQMJQYEQw8.roa
File: LEZgMacGZGZVpY1iQXQMJQYEQw8.roa (raw, json)
Hash identifier: mGVAKYoDCfmpGn8+Y5R0VYBVm6kDLaKUqqTlVj+yt3Q=
Subject key identifier: 2C:46:60:31:A7:06:64:66:55:A5:8D:62:41:74:0C:25:06:04:43:0F
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 01856F824F2B57E4B80612C0428BD805FEAD
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/LEZgMacGZGZVpY1iQXQMJQYEQw8.roa
Signing time: Sun 01 Jan 2023 22:44:48 +0000
ROA not before: Sun 01 Jan 2023 22:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203759
IP address blocks: 45.83.160.0/24 maxlen: 24
45.129.40.0/21 maxlen: 24
193.148.160.0/19 maxlen: 24
185.86.188.0/22 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
2a05:b540::/29 maxlen: 48
2a06:b500::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:4f:2b:57:e4:b8:06:12:c0:42:8b:d8:05:fe:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 1 22:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c466031a706646655a58d6241740c250604430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:d0:9c:35:29:63:19:c3:fb:14:f4:17:a4:
80:15:49:7b:ca:a2:b3:15:d6:f3:ca:1d:89:de:93:
7c:aa:5f:0e:07:52:b0:99:51:d9:ec:2e:50:ca:a5:
1c:b6:bd:a8:06:6e:ff:21:ac:9e:7f:96:3a:61:c6:
a9:f3:be:3c:b5:46:48:6a:55:24:e6:99:72:88:ad:
ca:11:b7:0f:1c:0b:ea:16:05:9e:78:13:80:dd:dd:
f8:92:ad:5c:a4:de:4b:f0:21:35:de:1c:85:08:9c:
a5:b1:51:26:0c:23:6e:4e:4d:a6:9e:8e:2f:7b:3f:
20:01:b5:00:43:ec:94:53:4e:98:84:38:4f:7f:27:
59:e4:0f:45:00:60:5a:09:b3:60:71:b0:53:83:c9:
78:b3:af:88:6d:ac:c2:04:8c:42:dc:2a:a2:8c:5e:
e3:0b:41:5e:85:c7:b5:33:02:86:b8:2c:24:7c:f9:
06:76:c0:20:9b:be:8a:cb:b6:8b:46:98:1c:b0:0d:
2d:4a:54:d3:65:09:f4:72:03:15:f1:3b:a0:70:98:
88:0f:20:aa:a0:40:f9:50:ce:02:6e:84:af:ec:ac:
6e:02:83:c8:e3:5c:93:9f:35:51:d3:97:c4:09:0f:
da:bb:22:04:46:a8:03:3e:04:fa:48:5f:0b:4e:09:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:60:31:A7:06:64:66:55:A5:8D:62:41:74:0C:25:06:04:43:0F
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/LEZgMacGZGZVpY1iQXQMJQYEQw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.160.0/24
45.129.40.0/21
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.160.0/19
IPv6:
2a05:b540::/29
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
78:f1:45:a0:7c:67:a6:30:be:d4:7a:97:89:8f:db:5b:4a:f0:
80:df:15:d1:cc:b9:a1:c2:2d:2e:e3:34:16:f2:c4:d6:b3:34:
59:38:cc:c2:1b:15:cb:60:77:f7:ee:ba:8f:83:a4:ac:09:bc:
84:f3:87:52:8d:6d:7c:a3:1e:08:bb:f0:e3:c4:2f:49:b2:e7:
47:c3:1b:d3:7b:c6:de:d3:28:5d:11:6b:15:85:c5:90:4f:68:
74:4c:91:33:5c:64:5c:54:df:67:9e:2e:72:a2:13:5c:d7:68:
db:48:79:f6:2b:7a:e6:d3:69:4b:85:3a:0f:87:52:e2:97:2f:
6d:26:5d:d1:23:7b:21:49:5d:f4:e9:9c:6d:39:f3:c8:db:18:
d3:5b:9d:ad:c2:38:20:f8:6a:9a:c1:4f:a1:8f:3e:f3:93:26:
62:08:b8:b9:d5:0b:1a:cf:35:7a:cb:2c:45:de:6c:fb:db:08:
55:0d:b7:01:76:d3:4f:5d:9a:b6:fd:71:70:7d:da:fb:7f:09:
8d:5e:24:c6:89:7e:de:b9:32:81:65:2a:fb:6a:01:ad:e9:35:
aa:ad:d0:70:e8:a3:c6:64:c1:7d:41:45:dd:a7:60:4a:30:fb:
5c:c5:12:9f:d8:cb:ab:e1:b0:d9:f4:95:d0:d7:8e:78:2b:ed:
03:86:71:d5
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYVvgk8rV+S4BhLAQovYBf6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjYwYjIzZmUzYjg2NDJkNmJmNDc1ZjhlYjdmY2FkOWQx
M2M0MTMwHhcNMjMwMTAxMjI0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzQ2NjAzMWE3MDY2NDY2NTVhNThkNjI0MTc0MGMyNTA2MDQ0MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUbQnDUpYxnD+xT0F6SAFUl7yqKz
Fdbzyh2J3pN8ql8OB1KwmVHZ7C5QyqUctr2oBm7/Iayef5Y6Ycap8748tUZIalUk
5plyiK3KEbcPHAvqFgWeeBOA3d34kq1cpN5L8CE13hyFCJylsVEmDCNuTk2mno4v
ez8gAbUAQ+yUU06YhDhPfydZ5A9FAGBaCbNgcbBTg8l4s6+IbazCBIxC3CqijF7j
C0Fehce1MwKGuCwkfPkGdsAgm76Ky7aLRpgcsA0tSlTTZQn0cgMV8TugcJiIDyCq
oED5UM4CboSv7KxuAoPI41yTnzVR05fECQ/auyIERqgDPgT6SF8LTgm3JQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFCxGYDGnBmRmVaWNYkF0DCUGBEMPMB8GA1UdIwQY
MBaAFJJmCyP+O4ZC1r9HX463/K2dE8QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWIt
MTNlZjFjNDU1Y2M0LzEvTEVaZ01hY0daR1pWcFkxaVFYUU1KUVlFUXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWItMTNlZjFjNDU1Y2M0
LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQALVOgAwQD
LYEoAwQCuVa8AwQCuXzAAwQCwROAAwQFwZSgMBQEAgACMA4DBQMqBbVAAwUDKga1
ADANBgkqhkiG9w0BAQsFAAOCAQEAePFFoHxnpjC+1HqXiY/bW0rwgN8V0cy5ocIt
LuM0FvLE1rM0WTjMwhsVy2B39+66j4OkrAm8hPOHUo1tfKMeCLvw48QvSbLnR8Mb
03vG3tMoXRFrFYXFkE9odEyRM1xkXFTfZ54ucqITXNdo20h59it65tNpS4U6D4dS
4pcvbSZd0SN7IUld9OmcbTnzyNsY01udrcI4IPhqmsFPoY8+85MmYgi4udULGs81
esssRd5s+9sIVQ23AXbTT12atv1xcH3a+38JjV4kxol+3rkygWUq+2oBrek1qq3Q
cOijxmTBfUFF3adgSjD7XMUSn9jLq+Gw2fSV0NeOeCvtA4Zx1Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:03:09 2025 by rpki-client