Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/5eoLibb9JEByASbq2IRo01i6zAk.roa
File: 5eoLibb9JEByASbq2IRo01i6zAk.roa (raw, json)
Hash identifier: EVwY//goSXKh4hwY/6VIq/UzJo1H7CyJaaCP9k7DQ/8=
Subject key identifier: E5:EA:0B:89:B6:FD:24:40:72:01:26:EA:D8:84:68:D3:58:BA:CC:09
Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b
Certificate serial: 952885
Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/5eoLibb9JEByASbq2IRo01i6zAk.roa
Signing time: Sat 01 Jan 2022 02:53:20 +0000
ROA not before: Sat 01 Jan 2022 02:53:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30833
IP address blocks: 217.78.176.0/21 maxlen: 21
217.78.176.0/20 maxlen: 20
217.78.184.0/21 maxlen: 21
79.98.136.0/22 maxlen: 22
79.98.136.0/21 maxlen: 21
79.98.140.0/22 maxlen: 22
80.249.202.0/23 maxlen: 23
80.249.200.0/22 maxlen: 22
80.249.200.0/23 maxlen: 23
2a00:d98::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9775237 (0x952885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b
Validity
Not Before: Jan 1 02:53:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5ea0b89b6fd2440720126ead88468d358bacc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:3e:b0:ff:3f:86:07:44:05:19:3c:88:76:
9c:d6:93:5b:b7:24:95:6d:8c:40:1f:2f:c0:e7:12:
19:c9:3a:15:b7:0e:40:d2:17:11:1d:22:62:9f:57:
f4:aa:48:92:31:32:73:bb:36:51:ac:ec:c1:73:f2:
d1:d6:d5:59:89:a3:3b:f0:fd:60:aa:6e:cd:f0:61:
33:88:98:db:5b:49:c0:09:5d:b9:e1:f2:57:02:de:
98:c7:6a:d1:68:48:ce:1c:83:44:a1:fe:a1:26:c5:
3b:06:99:7f:56:3e:d3:7f:ae:e1:15:fe:03:d2:a7:
1e:86:2d:e5:b9:fb:71:fe:06:4f:17:1c:9e:c1:da:
e1:07:13:40:20:68:cc:8e:e5:76:3e:f2:d4:bc:ea:
d1:7a:e3:3f:c3:2a:94:69:01:ed:68:fd:6e:9a:6e:
df:7c:49:ec:d3:24:c6:6b:e2:f5:2c:9e:f8:7d:cd:
c6:e7:7e:91:5f:0e:fe:96:32:15:93:5d:64:fc:21:
84:bd:94:f5:4b:8a:4f:7e:24:39:02:37:ad:02:35:
38:e5:41:ed:fb:55:dd:b4:1d:0b:b2:d7:ea:39:c4:
29:98:d6:a1:c9:8d:28:73:88:52:76:8a:2f:5c:08:
0a:76:5e:2c:a1:e9:47:69:50:5c:61:01:7c:6c:41:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EA:0B:89:B6:FD:24:40:72:01:26:EA:D8:84:68:D3:58:BA:CC:09
X509v3 Authority Key Identifier:
keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/5eoLibb9JEByASbq2IRo01i6zAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.136.0/21
80.249.200.0/22
217.78.176.0/20
IPv6:
2a00:d98::/32
Signature Algorithm: sha256WithRSAEncryption
5a:1b:eb:33:14:2f:d0:a5:43:40:d3:f8:22:a3:03:b6:9e:18:
12:80:6e:a6:34:95:2a:18:cd:35:0e:d4:1f:5b:48:f0:31:c5:
fb:ea:3d:24:b6:1b:93:4d:f6:2a:ec:f0:25:90:ff:a7:82:70:
fa:ec:b4:51:20:6a:63:0a:35:cf:0a:d8:a5:a1:ad:46:35:ca:
61:11:88:fb:c2:d7:6e:4b:86:e1:03:15:27:44:be:0f:8b:59:
bc:f7:37:0c:88:cb:c0:a4:04:fe:e0:b4:72:4e:8f:a5:6a:01:
a4:8e:70:07:69:e7:cf:ca:d1:ac:c9:b1:42:7a:c9:0b:b9:fd:
23:69:f0:4f:06:44:fd:88:51:9e:34:54:56:d4:d0:0a:b9:68:
e8:9c:d1:fd:fe:c4:99:f3:62:d4:32:17:93:a2:57:66:61:4c:
93:51:97:95:88:10:86:4d:c2:7b:5c:88:b8:87:15:73:c1:fc:
da:4d:fc:c2:7e:2c:e6:59:da:95:26:9e:e8:70:90:92:da:f0:
37:f4:9c:f8:06:15:ee:c5:36:a0:b2:e0:09:35:d2:b4:67:63:
72:a9:bb:a5:83:69:cd:9d:34:05:16:1b:eb:36:22:17:a0:a8:
c1:f0:6c:1a:d7:a2:09:10:b1:c4:f8:4e:10:2e:37:2a:97:d8:
26:43:09:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net