Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/OBJNN7TtWxRz2cLMe8DrOHBpcFY.roa
File: OBJNN7TtWxRz2cLMe8DrOHBpcFY.roa (raw, json)
Hash identifier: 0EKRpmQEET5pCnoMSDHTZ5u3GZH7t3EgNTLRztTLXPw=
Subject key identifier: 38:12:4D:37:B4:ED:5B:14:73:D9:C2:CC:7B:C0:EB:38:70:69:70:56
Certificate issuer: /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial: 02E77C81
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/OBJNN7TtWxRz2cLMe8DrOHBpcFY.roa
Signing time: Sat 01 Jan 2022 04:55:24 +0000
ROA not before: Sat 01 Jan 2022 04:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209092
IP address blocks: 5.182.157.0/24 maxlen: 24
5.182.158.0/23 maxlen: 23
5.182.158.0/24 maxlen: 24
5.182.159.0/24 maxlen: 24
5.182.156.0/24 maxlen: 24
5.182.156.0/23 maxlen: 23
5.182.156.0/22 maxlen: 22
185.214.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48725121 (0x2e77c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Validity
Not Before: Jan 1 04:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38124d37b4ed5b1473d9c2cc7bc0eb3870697056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:0f:c2:59:2b:01:33:d8:8e:95:6d:48:86:
1a:4a:e0:6c:c0:61:6c:0d:90:46:c1:fa:15:8d:0b:
45:24:72:4c:30:d0:b0:88:a4:66:de:97:68:cb:17:
01:c2:a3:02:a2:78:20:85:ba:2c:96:22:03:3a:70:
c7:e1:c1:b2:c7:f5:0b:17:36:bc:03:64:72:d2:e6:
72:34:2c:ac:7b:01:52:38:41:93:1e:f1:34:28:49:
fa:ef:96:81:a1:61:28:a5:43:e8:5c:b8:bf:d0:27:
d3:e6:53:38:7d:59:5c:48:e2:c0:45:ab:7f:40:40:
47:6a:72:2b:37:46:3c:2b:46:3c:af:9a:93:b9:6c:
95:b2:ad:80:e9:c1:0f:e2:d3:80:f9:43:2c:03:98:
9b:a6:f7:a0:8d:e1:4f:79:d9:88:72:a0:45:a1:9f:
b1:d7:5d:ac:b2:dd:ec:88:3b:9c:df:9f:14:85:a5:
09:a9:d8:5d:22:54:d8:b9:4d:6c:b2:0d:12:e9:7a:
52:5c:92:3c:76:93:f1:40:a1:09:61:97:fc:01:aa:
18:27:74:4d:43:2b:3f:cc:4f:01:6d:86:61:99:6e:
cc:ee:c8:f3:ae:d5:55:11:9f:2f:4a:39:14:59:ab:
05:89:e0:06:7d:36:f3:09:9a:5b:68:d0:99:81:12:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:4D:37:B4:ED:5B:14:73:D9:C2:CC:7B:C0:EB:38:70:69:70:56
X509v3 Authority Key Identifier:
keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/OBJNN7TtWxRz2cLMe8DrOHBpcFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.156.0/22
185.214.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ee:9e:77:9e:20:c0:72:b6:54:ef:79:ae:77:a0:21:de:fb:
42:ae:18:70:12:64:26:2a:22:cb:68:83:d6:c8:85:a8:f7:2d:
43:5e:02:57:f6:b4:cd:14:a2:4c:8b:ce:67:5a:d6:36:38:2e:
62:60:b8:4c:1e:8f:bb:30:69:8d:86:ab:9c:85:85:4a:d9:0a:
33:20:ba:91:8b:bc:7a:f7:91:1e:77:eb:b0:b3:1c:e0:cb:7b:
a8:6f:33:aa:24:c8:ab:3f:9c:2a:32:b2:c2:2d:e9:dc:94:04:
79:16:7a:47:58:e4:45:8b:d7:97:d2:03:8e:4c:46:90:1e:e2:
2a:77:cc:46:a3:c7:a4:2b:9f:49:8f:8e:b8:90:a0:ab:b8:eb:
d6:99:49:e1:2f:08:3c:07:a6:93:fd:40:0f:e7:3a:6e:f4:63:
94:90:06:6b:79:a7:c1:97:ca:b3:a0:4f:89:63:34:82:4e:49:
50:bb:a5:32:8c:5a:7c:66:1d:fd:36:bc:56:ff:a4:b6:90:88:
86:26:7e:1d:f1:b9:64:6a:9c:5f:55:0f:37:e8:34:85:1e:cf:
65:51:b2:16:ce:78:4f:c4:13:e7:f4:06:5a:65:7e:84:84:55:
5a:4d:3c:c6:4f:09:d1:ff:ec:30:c7:62:4e:8e:03:1c:11:7b:
96:df:da:cd
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAud8gTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTIxYzkxYjYzYmJiZGE4ODA0YTc0OWYzZDYxMGU4YjIxN2Y5YjczMB4XDTIyMDEw
MTA0NTUyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzgxMjRkMzdiNGVk
NWIxNDczZDljMmNjN2JjMGViMzg3MDY5NzA1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgfD8JZKwEz2I6VbUiGGkrgbMBhbA2QRsH6FY0LRSRyTDDQ
sIikZt6XaMsXAcKjAqJ4IIW6LJYiAzpwx+HBssf1Cxc2vANkctLmcjQsrHsBUjhB
kx7xNChJ+u+WgaFhKKVD6Fy4v9An0+ZTOH1ZXEjiwEWrf0BAR2pyKzdGPCtGPK+a
k7lslbKtgOnBD+LTgPlDLAOYm6b3oI3hT3nZiHKgRaGfsdddrLLd7Ig7nN+fFIWl
CanYXSJU2LlNbLINEul6UlySPHaT8UChCWGX/AGqGCd0TUMrP8xPAW2GYZluzO7I
867VVRGfL0o5FFmrBYngBn028wmaW2jQmYESTFkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ4Ek03tO1bFHPZwsx7wOs4cGlwVjAfBgNVHSMEGDAWgBRKIckbY7u9qIBK
dJ89YQ6LIX+bczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NpSEpHMk83dmFpQVNuU2ZQV0VPaXlGX20zTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmEvNmU4Y2EwLWNkNDAtNDZmZC04ZWU0LTQ3ZmJlNGM0YTRmZC8x
L09CSk5ON1R0V3hSejJjTE1lOERyT0hCcGNGWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEv
NmU4Y2EwLWNkNDAtNDZmZC04ZWU0LTQ3ZmJlNGM0YTRmZC8xL1NpSEpHMk83dmFp
QVNuU2ZQV0VPaXlGX20zTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAgW2nAMEALnWNzANBgkqhkiG9w0B
AQsFAAOCAQEAC+6ed54gwHK2VO95rnegId77Qq4YcBJkJioiy2iD1siFqPctQ14C
V/a0zRSiTIvOZ1rWNjguYmC4TB6PuzBpjYarnIWFStkKMyC6kYu8eveRHnfrsLMc
4Mt7qG8zqiTIqz+cKjKywi3p3JQEeRZ6R1jkRYvXl9IDjkxGkB7iKnfMRqPHpCuf
SY+OuJCgq7jr1plJ4S8IPAemk/1AD+c6bvRjlJAGa3mnwZfKs6BPiWM0gk5JULul
MoxafGYd/Ta8Vv+ktpCIhiZ+HfG5ZGqcX1UPN+g0hR7PZVGyFs54T8QT5/QGWmV+
hIRVWk08xk8J0f/sMMdiTo4DHBF7lt/azQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:52 2023 by rpki-client on console.sobornost.net