Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LV-wXdRyywF09OQo6NlPfiTjq7g.roa
File: LV-wXdRyywF09OQo6NlPfiTjq7g.roa (raw, json)
Hash identifier: AqVHpM4HwoJh7HFCjhWDgEtmFwy6dOVuBvFSh6gjcEk=
Subject key identifier: 2D:5F:B0:5D:D4:72:CB:01:74:F4:E4:28:E8:D9:4F:7E:24:E3:AB:B8
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018946B9880D3D713A2484BD73D68ED697A8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LV-wXdRyywF09OQo6NlPfiTjq7g.roa
Signing time: Tue 11 Jul 2023 20:51:51 +0000
ROA not before: Tue 11 Jul 2023 20:51:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207636
IP address blocks: 80.243.128.0/20 maxlen: 24
46.3.85.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.8.0/22 maxlen: 22
46.232.12.0/22 maxlen: 22
46.3.0.0/16 maxlen: 24
46.3.12.0/22 maxlen: 22
46.3.22.0/24 maxlen: 24
46.3.20.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.21.0/24 maxlen: 24
46.3.192.0/19 maxlen: 19
46.3.129.0/24 maxlen: 24
46.3.131.0/24 maxlen: 24
46.3.128.0/24 maxlen: 24
149.126.241.0/24 maxlen: 24
149.126.199.0/24 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.194.0/24 maxlen: 24
149.126.211.0/24 maxlen: 24
149.126.209.0/24 maxlen: 24
46.3.224.0/19 maxlen: 19
149.126.212.0/24 maxlen: 24
46.3.237.0/24 maxlen: 24
149.126.227.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:b9:88:0d:3d:71:3a:24:84:bd:73:d6:8e:d6:97:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 11 20:51:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d5fb05dd472cb0174f4e428e8d94f7e24e3abb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:c8:3f:b5:8e:ec:f9:54:97:cf:57:30:18:
01:a9:09:13:a6:27:60:44:1e:77:b1:8b:de:f5:68:
c7:25:8c:2b:a6:ef:45:3a:3b:10:db:ac:cd:72:0a:
1b:66:94:0a:19:b7:a1:a9:6c:31:48:38:ce:56:f0:
34:63:20:f7:69:a6:a7:f8:c4:16:75:9c:61:35:8a:
42:53:61:46:81:2d:be:76:1a:0b:6f:c0:49:c6:d7:
3b:31:8e:7c:de:0a:59:b4:5e:1f:9d:ed:e6:0d:d2:
e7:6d:33:2c:fd:55:f0:ab:a6:f4:5d:43:71:f7:6d:
fd:c9:f0:6d:96:90:dc:75:0c:b9:9a:d3:2a:ba:a7:
ea:03:39:7d:63:50:55:7b:c5:73:55:66:79:d9:4f:
ff:68:be:86:ef:70:da:e3:b5:14:99:a4:5b:10:d7:
b1:a2:c9:4b:2d:31:41:6e:99:60:4f:5f:d9:a3:5e:
9c:fa:62:0e:d3:24:d3:27:a1:3a:5e:39:39:46:a4:
4c:3a:c0:bf:05:50:6e:69:f0:0a:7f:1a:f8:0f:a1:
5b:69:09:01:03:1d:75:90:d8:50:a8:fd:f6:e2:df:
07:17:e9:73:06:72:72:d7:bc:e7:77:71:67:cd:fe:
80:1e:8f:fe:26:fc:94:7e:53:c9:ff:e4:c7:70:cc:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5F:B0:5D:D4:72:CB:01:74:F4:E4:28:E8:D9:4F:7E:24:E3:AB:B8
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/LV-wXdRyywF09OQo6NlPfiTjq7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:e7:a4:c5:1e:23:88:e8:b0:b1:6b:4c:d6:d6:c6:64:6f:ec:
4a:e4:3a:7a:51:61:fc:cc:59:50:0f:70:05:39:00:42:a8:7b:
ef:f2:6d:6d:a0:4f:ba:fa:80:63:a6:80:67:ad:c5:b9:98:7a:
4e:00:32:31:e6:4d:be:9c:21:9b:7d:0e:c0:61:b9:a4:ed:89:
4f:9a:d4:61:27:f2:3a:49:cb:b7:4e:33:24:37:40:c0:9e:32:
b1:4d:e0:d2:0b:d1:52:d2:e3:4b:73:bf:d3:86:99:82:88:2c:
c2:37:8b:39:7e:0f:ea:ff:58:e4:4a:c3:27:05:d5:d4:d7:94:
db:61:b7:6e:25:a9:45:d8:49:46:b6:a1:d2:5d:23:ee:b8:95:
12:8d:59:61:7f:8f:98:09:30:78:fa:bb:a8:c0:98:e9:00:f1:
0a:bc:ae:c2:2b:8f:bd:d0:9a:66:fc:12:2f:fe:fe:b6:8a:b8:
26:fa:74:f6:3f:45:22:2a:58:48:21:bb:cc:f9:69:48:dc:a9:
6d:49:d6:4d:0d:c7:64:50:d0:32:a5:f2:4f:01:da:b9:81:41:
1b:14:6d:fd:e3:fa:2c:7c:88:cc:f0:fb:9a:08:b3:68:17:11:
3b:8a:30:60:2e:e7:77:41:2c:30:df:63:da:b5:1c:e5:3f:6b:
4e:98:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:31:45 2025 by rpki-client