Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LwMvQHyJR35pDb7S-bje2uP-PoU.roa
File: LwMvQHyJR35pDb7S-bje2uP-PoU.roa (raw, json)
Hash identifier: oS0IZiH1YXQc1XjE695jJ6y8mJwLFhFIgWEf2JRujYk=
Subject key identifier: 2F:03:2F:40:7C:89:47:7E:69:0D:BE:D2:F9:B8:DE:DA:E3:FE:3E:85
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188205F80BEB4BB02E29219D7F840FBE4BF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LwMvQHyJR35pDb7S-bje2uP-PoU.roa
Signing time: Mon 15 May 2023 17:05:09 +0000
ROA not before: Mon 15 May 2023 17:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.223.78.0/24 maxlen: 24
45.131.132.0/24 maxlen: 24
45.131.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:5f:80:be:b4:bb:02:e2:92:19:d7:f8:40:fb:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 15 17:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f032f407c89477e690dbed2f9b8dedae3fe3e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:5a:ca:c9:7d:5a:3f:e4:30:db:53:20:08:
7f:12:14:ec:a1:d5:34:84:8d:b0:87:f6:95:08:b1:
2b:6a:c0:01:ef:f4:af:27:ea:92:44:11:f3:1a:65:
9c:a1:e9:45:dc:9d:fd:16:8a:4e:db:7e:e4:80:94:
2c:76:8e:56:e5:59:f5:47:35:43:bc:48:92:e8:17:
58:1b:8a:99:e9:a0:29:51:15:79:64:d1:fb:d6:d7:
17:0e:de:cc:5a:09:d2:07:a6:cd:45:2f:55:86:f0:
44:45:be:7a:4c:05:f5:89:7b:6a:68:f1:ef:80:61:
5e:0b:96:23:f8:d8:ff:ca:2a:06:4c:3c:e4:0d:06:
c2:ef:8f:46:48:7e:24:af:8b:a3:f4:ef:f6:0b:a3:
81:db:b3:a1:bc:3b:1f:0d:e7:6b:e3:7a:91:ca:fe:
f5:2c:65:39:6b:22:3f:f4:18:e1:74:e4:f2:4e:07:
b6:de:e9:7b:9f:6a:12:36:81:ef:04:f5:4f:d7:8f:
c1:44:7f:91:d2:48:e8:6a:f9:48:86:04:f4:81:d1:
e6:88:32:1d:7c:e0:59:73:f8:1d:c4:59:08:8e:bc:
96:35:ea:74:d5:9b:e1:c6:af:c6:ae:2d:2a:43:66:
b9:20:49:ba:be:7a:75:d1:9f:1f:72:4e:2d:90:97:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:2F:40:7C:89:47:7E:69:0D:BE:D2:F9:B8:DE:DA:E3:FE:3E:85
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LwMvQHyJR35pDb7S-bje2uP-PoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.132.0/23
185.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
99:26:07:0d:a1:f6:3d:0d:92:84:8c:54:d6:ca:8a:dc:b8:f6:
2b:8b:91:0d:93:8a:fa:90:ff:6c:49:61:3e:43:93:48:6e:88:
a0:a8:0b:61:2d:a1:15:10:8d:66:67:84:16:ed:fb:87:14:f5:
08:c3:4d:ee:e6:cd:a0:23:c7:9f:04:3c:ce:3e:9b:f5:b1:22:
2a:91:0c:b8:0b:ff:ea:46:0d:ee:3e:8b:4d:28:d7:88:f0:c9:
cf:d8:ba:19:ae:15:bd:ec:5f:ab:5a:5a:60:33:f8:80:51:55:
f2:e2:a0:53:61:69:e5:85:f0:ec:1e:44:8a:0d:83:61:08:9d:
d7:26:37:bb:03:58:2b:5f:11:55:f3:a7:8e:e4:c1:85:c8:c1:
08:97:30:44:2d:b2:08:90:a2:a4:76:5d:b1:3c:f8:76:7b:e6:
ba:b2:33:42:f0:4e:a0:15:80:33:89:3e:a9:9a:19:85:2f:b8:
a4:b9:3a:7a:12:1e:9e:aa:73:fc:a4:01:bf:e1:c8:65:f1:b6:
b1:b9:79:89:be:f5:b3:25:ab:eb:df:3f:ff:82:5f:31:40:85:
34:23:c4:78:3b:62:9b:a4:94:3a:19:a0:78:29:08:d3:01:2c:
25:87:56:51:c1:db:47:90:aa:e5:d3:62:fe:9d:07:f6:6b:a3:
e7:25:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:30:40 2025 by rpki-client