Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/lfFLA7_LufECxXjodBP7Z3hTOiM.roa
File: lfFLA7_LufECxXjodBP7Z3hTOiM.roa (raw, json)
Hash identifier: gauuqW01VFEHdS02FPHyGWGpoInytRQvSEmRUBAJR6E=
Subject key identifier: 95:F1:4B:03:BF:CB:B9:F1:02:C5:78:E8:74:13:FB:67:78:53:3A:23
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01847D000B2442AC3C53D784365C82FFD763
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/lfFLA7_LufECxXjodBP7Z3hTOiM.roa
Signing time: Tue 15 Nov 2022 20:34:25 +0000
ROA not before: Tue 15 Nov 2022 20:34:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210756
IP address blocks: 5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7d:00:0b:24:42:ac:3c:53:d7:84:36:5c:82:ff:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Nov 15 20:34:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95f14b03bfcbb9f102c578e87413fb6778533a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:31:6b:60:34:01:cb:76:a0:4c:f6:fa:3b:
6c:9c:13:09:23:65:74:f5:9b:b3:d3:de:b4:c1:43:
3f:e9:a0:10:a9:5f:44:4e:f2:31:9f:31:9b:fd:14:
e7:cf:24:33:ec:bc:97:4a:f3:a4:39:66:fa:dd:6a:
b1:5c:0c:98:e4:2d:c0:fe:b6:76:5c:69:b5:e6:57:
6e:f7:3d:38:87:bc:a6:02:62:43:84:5d:d1:69:9c:
ff:dc:de:fa:e6:ec:3e:c8:b9:bf:b9:00:80:22:38:
bf:a3:da:c2:81:38:66:1f:31:e1:87:e2:8a:f8:99:
7f:69:ef:ca:9d:d0:3b:9d:1a:76:76:7c:41:1c:f6:
9d:1c:1d:9c:52:a4:9f:e1:85:8c:4b:a8:18:79:93:
13:60:0d:10:ea:7b:02:e8:3a:64:44:5d:e6:8c:9c:
1e:6a:f5:97:8d:9e:88:46:7a:e7:0f:98:6c:80:f5:
cf:80:e1:f1:a0:77:2d:9b:8c:c0:f0:d1:a9:8e:0d:
23:a6:9e:a6:77:8b:9a:5b:bc:4d:a5:7f:ad:37:6d:
01:ba:37:d7:9c:1d:70:e2:df:5b:c7:16:1d:91:b2:
29:f0:ef:7a:8c:e9:88:28:46:34:5d:cd:7a:ee:a2:
f5:58:24:f6:d6:3c:ee:b5:64:81:ce:f7:db:ac:b6:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:4B:03:BF:CB:B9:F1:02:C5:78:E8:74:13:FB:67:78:53:3A:23
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/lfFLA7_LufECxXjodBP7Z3hTOiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.68.0-5.101.70.255
5.188.176.0/22
37.9.36.0/22
146.185.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:24:c9:5d:eb:e7:57:39:19:0e:3f:56:5d:7d:c1:e2:4e:cc:
12:19:17:a0:f9:a7:1c:6f:dd:5f:28:6c:39:cf:78:ff:0c:9c:
60:1d:05:ee:1d:c3:fe:85:56:ad:84:96:7c:ef:6b:02:94:e2:
5b:bd:dd:6d:e6:42:a4:a2:69:5f:27:51:cd:cd:b3:27:65:fe:
25:c7:50:09:32:23:19:18:20:98:97:57:1c:e6:a8:6c:b1:11:
0a:c1:19:56:b9:35:1d:45:11:fd:61:60:45:f6:76:d8:2c:5c:
56:15:c8:34:b0:fd:38:26:48:2c:0a:94:5e:ea:e8:c1:76:74:
9c:50:01:89:5e:a6:e0:a9:a0:24:4f:a6:4c:49:5c:56:4d:b2:
a1:2a:35:c7:3f:6e:65:ac:f8:de:95:9d:17:28:9b:cf:95:90:
54:4d:8c:3c:b3:45:d3:98:0c:59:b7:59:82:a3:18:24:39:b1:
ea:b0:b8:69:90:f4:a4:c1:a3:55:f5:54:8e:e3:18:be:5b:69:
da:fb:a7:f4:ef:be:0a:8d:03:29:af:10:93:3f:22:5d:25:71:
fc:0e:88:d9:29:cf:40:ff:f3:df:ac:93:ae:8c:c5:7f:41:75:
3c:f9:2a:fe:c3:11:34:c9:5c:ca:74:e2:21:93:29:a7:52:27:
7a:ee:b9:28
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYR9AAskQqw8U9eENlyC/9djMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjIxMTE1MjAzNDI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWYxNGIwM2JmY2JiOWYxMDJjNTc4ZTg3NDEzZmI2Nzc4NTMzYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Yxa2A0Act2oEz2+jtsnBMJI2V0
9Zuz0960wUM/6aAQqV9ETvIxnzGb/RTnzyQz7LyXSvOkOWb63WqxXAyY5C3A/rZ2
XGm15ldu9z04h7ymAmJDhF3RaZz/3N765uw+yLm/uQCAIji/o9rCgThmHzHhh+KK
+Jl/ae/KndA7nRp2dnxBHPadHB2cUqSf4YWMS6gYeZMTYA0Q6nsC6DpkRF3mjJwe
avWXjZ6IRnrnD5hsgPXPgOHxoHctm4zA8NGpjg0jpp6md4uaW7xNpX+tN20BujfX
nB1w4t9bxxYdkbIp8O96jOmIKEY0Xc167qL1WCT21jzutWSBzvfbrLakhQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJXxSwO/y7nxAsV46HQT+2d4UzojMB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvbGZGTEE3X0x1ZkVDeFhqb2RCUDdaM2hUT2lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAIFZUQD
BAAFZUYDBAIFvLADBAIlCSQDBAKSucQwDQYJKoZIhvcNAQELBQADggEBAC0kyV3r
51c5GQ4/Vl19weJOzBIZF6D5pxxv3V8obDnPeP8MnGAdBe4dw/6FVq2ElnzvawKU
4lu93W3mQqSiaV8nUc3Nsydl/iXHUAkyIxkYIJiXVxzmqGyxEQrBGVa5NR1FEf1h
YEX2dtgsXFYVyDSw/TgmSCwKlF7q6MF2dJxQAYlepuCpoCRPpkxJXFZNsqEqNcc/
bmWs+N6VnRcom8+VkFRNjDyzRdOYDFm3WYKjGCQ5seqwuGmQ9KTBo1X1VI7jGL5b
adr7p/TvvgqNAymvEJM/Il0lcfwOiNkpz0D/89+sk66MxX9BdTz5Kv7DETTJXMp0
4iGTKadSJ3ruuSg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net