Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LrrCfzUjhy9UaCd4YZxTw87IJz8.roa
File: LrrCfzUjhy9UaCd4YZxTw87IJz8.roa (raw, json)
Hash identifier: Coy9OWJ7On5KYEyhwagpRNf0m4/Y7YTylyXUWi7lF4k=
Subject key identifier: 2E:BA:C2:7F:35:23:87:2F:54:68:27:78:61:9C:53:C3:CE:C8:27:3F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01850769D0E4CB5DCBBC35A63973BC08A46D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LrrCfzUjhy9UaCd4YZxTw87IJz8.roa
Signing time: Mon 12 Dec 2022 17:37:33 +0000
ROA not before: Mon 12 Dec 2022 17:37:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 5.178.0.0/24 maxlen: 24
5.178.1.0/24 maxlen: 24
5.178.4.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.200.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
37.128.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:69:d0:e4:cb:5d:cb:bc:35:a6:39:73:bc:08:a4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 12 17:37:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ebac27f3523872f54682778619c53c3cec8273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:d6:a4:61:79:7a:b7:05:01:f0:16:2c:b2:
2f:6f:e7:9e:8a:49:3c:42:73:9a:b7:5a:1f:68:1f:
f4:e9:9a:23:f5:54:b5:76:5b:57:5e:e5:11:c8:81:
97:2d:4a:2f:8a:38:0d:d2:48:88:cc:9c:78:c1:f9:
c2:10:ad:08:91:1e:31:76:13:0c:37:17:b2:76:68:
c8:cb:24:9e:ae:43:6c:99:64:a8:ae:95:9a:df:45:
f1:8c:5a:25:e4:b0:d8:37:2d:b5:15:0a:42:2a:3b:
8b:d4:dc:3f:f4:70:bd:a2:6b:aa:e8:f4:3e:d5:a4:
ba:46:a7:68:0b:2a:f8:35:48:a9:0a:59:60:a9:9a:
8b:5c:8a:22:06:80:61:a4:60:ca:38:33:69:45:7f:
a8:2b:25:b0:00:a3:bb:bb:7e:6d:ca:96:56:af:16:
95:d5:e3:87:db:08:05:7a:7a:c6:83:f6:43:46:7e:
e4:04:6d:02:84:e9:75:e3:2b:f4:e9:19:c9:81:b1:
32:c5:9f:3f:60:47:2d:41:63:07:3d:e3:9f:ac:4d:
6b:4e:8d:f9:aa:86:ca:5a:97:ec:af:6d:a1:e5:f7:
ec:3c:70:39:79:7d:09:bd:a3:ce:c5:7a:cb:1e:02:
d6:bc:0b:3d:cf:13:51:0e:11:e2:52:cd:d0:92:71:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:C2:7F:35:23:87:2F:54:68:27:78:61:9C:53:C3:CE:C8:27:3F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LrrCfzUjhy9UaCd4YZxTw87IJz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.0.0/23
5.178.4.0/22
37.128.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:2c:ee:ff:18:02:15:3a:f6:68:09:95:3e:73:1d:f1:c4:ec:
21:91:b0:28:40:cd:0f:30:91:00:e0:31:27:43:64:36:6a:0e:
d7:fa:a8:a1:d6:f6:9e:20:b3:e6:3a:85:59:4c:78:f2:5a:56:
62:e1:d0:83:1f:0d:c1:47:94:19:ec:00:e3:a7:eb:bb:39:f4:
c3:8f:e8:1d:14:c0:af:14:ab:0e:12:84:0b:b1:f5:cc:99:db:
98:2e:02:fb:bb:52:6a:ec:d4:c0:20:e6:84:4c:d6:45:54:cd:
67:4f:34:f6:0a:89:06:d5:f0:3e:95:7f:bb:65:e5:ba:3f:a1:
11:11:62:7d:14:da:b7:c5:a5:b3:e0:f1:22:39:5a:25:d4:71:
a9:bf:8b:86:7e:a0:d6:85:0a:1a:19:c8:dc:b2:45:31:d8:af:
71:6e:14:da:54:88:c8:d6:73:74:e6:d6:ba:fe:60:86:fe:8c:
48:68:78:4f:e6:08:9c:58:4b:57:05:5d:87:42:39:d6:23:82:
5b:95:8c:7f:ce:d0:6f:b8:61:2f:6f:e4:3c:23:5f:db:40:e8:
55:c8:39:54:3b:c7:8c:3a:12:a0:59:a6:ae:c4:1f:15:7b:45:
42:a4:2f:9a:a4:ad:a5:9e:c8:29:72:3d:86:01:90:85:05:de:
cf:b3:48:b6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYUHadDky13LvDWmOXO8CKRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIxMjEyMTczNzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWJhYzI3ZjM1MjM4NzJmNTQ2ODI3Nzg2MTljNTNjM2NlYzgyNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO/WpGF5ercFAfAWLLIvb+eeikk8
QnOat1ofaB/06Zoj9VS1dltXXuURyIGXLUovijgN0kiIzJx4wfnCEK0IkR4xdhMM
NxeydmjIyySerkNsmWSorpWa30XxjFol5LDYNy21FQpCKjuL1Nw/9HC9omuq6PQ+
1aS6RqdoCyr4NUipCllgqZqLXIoiBoBhpGDKODNpRX+oKyWwAKO7u35typZWrxaV
1eOH2wgFenrGg/ZDRn7kBG0ChOl14yv06RnJgbEyxZ8/YEctQWMHPeOfrE1rTo35
qobKWpfsr22h5ffsPHA5eX0JvaPOxXrLHgLWvAs9zxNRDhHiUs3QknHLgwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC66wn81I4cvVGgneGGcU8POyCc/MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvTHJyQ2Z6VWpoeTlVYUNkNFlaeFR3ODdJSno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBbIAAwQC
BbIEAwQCJYDIMA0GCSqGSIb3DQEBCwUAA4IBAQA9LO7/GAIVOvZoCZU+cx3xxOwh
kbAoQM0PMJEA4DEnQ2Q2ag7X+qih1vaeILPmOoVZTHjyWlZi4dCDHw3BR5QZ7ADj
p+u7OfTDj+gdFMCvFKsOEoQLsfXMmduYLgL7u1Jq7NTAIOaETNZFVM1nTzT2CokG
1fA+lX+7ZeW6P6EREWJ9FNq3xaWz4PEiOVol1HGpv4uGfqDWhQoaGcjcskUx2K9x
bhTaVIjI1nN05ta6/mCG/oxIaHhP5gicWEtXBV2HQjnWI4JblYx/ztBvuGEvb+Q8
I1/bQOhVyDlUO8eMOhKgWaauxB8Ve0VCpC+apK2lnsgpcj2GAZCFBd7Ps0i2
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net