Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/H3pt_n01WfLgBxATNjRl6KwBNNM.roa
File: H3pt_n01WfLgBxATNjRl6KwBNNM.roa (raw, json)
Hash identifier: 4VH/gOfDskLhjFsig796eKgSdbTAXH1KICmtjhk975M=
Subject key identifier: 1F:7A:6D:FE:7D:35:59:F2:E0:07:10:13:36:34:65:E8:AC:01:34:D3
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0184610AB9127076D57D6FC7861AD97B78B6
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/H3pt_n01WfLgBxATNjRl6KwBNNM.roa
Signing time: Thu 10 Nov 2022 10:16:43 +0000
ROA not before: Thu 10 Nov 2022 10:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 5.178.0.0/24 maxlen: 24
5.178.1.0/24 maxlen: 24
5.178.4.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:0a:b9:12:70:76:d5:7d:6f:c7:86:1a:d9:7b:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Nov 10 10:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f7a6dfe7d3559f2e0071013363465e8ac0134d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:41:5c:ea:55:b4:6f:08:90:96:80:02:61:
32:47:3e:91:a2:94:a3:93:05:a9:90:c5:9c:ec:b6:
9e:9b:3d:7b:7a:8a:d8:39:25:d0:3e:8f:0d:44:7c:
41:58:75:3e:39:fb:5a:73:01:bd:bc:53:bb:7b:c6:
0f:6f:48:41:da:92:74:fc:c1:29:0a:2c:33:36:22:
69:b9:6a:c4:35:0b:d6:76:97:f1:cc:a7:b1:2f:2d:
e6:aa:b3:32:0b:07:18:ef:c9:8a:51:6c:e6:3c:34:
c1:a3:47:52:bf:7c:f3:6a:37:ef:ad:21:bc:16:73:
82:5b:54:8c:9c:fb:12:ce:c2:ab:63:fa:67:2a:db:
f7:c7:2f:37:65:3a:fd:8d:fc:c9:76:75:a1:bc:f2:
36:1f:9f:ac:9d:b2:ca:df:b5:da:f9:60:d2:f7:a2:
5a:ea:16:78:92:5a:31:70:24:7b:7c:e5:2e:35:a4:
d4:27:d3:36:24:5d:c1:75:8d:9e:4c:7c:34:86:09:
5c:42:7c:82:ed:c0:68:0c:e3:34:47:8d:ee:c9:c4:
26:fb:04:25:bc:46:68:ce:d2:78:0f:2e:3c:5e:b7:
3a:83:d0:56:d9:bb:3c:be:28:28:3a:e7:fe:22:41:
a4:c2:61:ee:77:2a:4e:6c:64:30:af:ad:8b:ec:85:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7A:6D:FE:7D:35:59:F2:E0:07:10:13:36:34:65:E8:AC:01:34:D3
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/H3pt_n01WfLgBxATNjRl6KwBNNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.0.0/23
5.178.4.0/22
Signature Algorithm: sha256WithRSAEncryption
62:13:97:57:ab:53:c3:ef:fb:3f:56:0a:94:27:c6:79:ac:39:
9d:bf:59:fd:d8:1f:72:1f:71:86:05:d9:29:c1:05:9c:c2:0f:
77:25:d2:b1:71:9c:58:e0:74:af:53:7b:0a:90:2e:0d:02:db:
82:0b:e4:ff:49:00:8e:94:f2:89:87:6c:48:a0:ef:e6:eb:ac:
e7:6c:94:4e:f3:85:35:50:be:1d:7a:4d:24:f0:3f:ef:12:72:
58:af:e3:6d:92:2a:b3:fe:e2:7e:cf:cd:14:6f:23:6e:f7:95:
c8:1e:4a:cb:55:de:33:04:a9:cd:d1:26:ce:9f:ef:b2:04:d1:
f4:5f:2b:db:32:dc:a0:64:e1:b2:b9:d7:29:63:89:70:1e:40:
d6:6b:58:b5:5c:29:2c:21:15:43:4f:c6:35:f1:15:ef:1c:fb:
24:5e:4e:20:f8:d0:b9:e5:b0:26:7c:32:1c:ac:21:c7:f7:9c:
a8:3f:26:b7:f6:35:85:10:69:e3:fe:1c:34:be:f0:82:5c:fc:
17:79:f6:72:0f:cf:b4:10:0a:fe:2d:15:d8:45:72:6a:a7:75:
d0:56:4e:27:fb:69:44:f4:69:8a:ca:2a:b7:2e:f9:19:5c:4a:
ed:94:b0:76:92:30:80:5a:04:55:8e:33:b5:73:b2:f9:d4:14:
13:fd:fd:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRhCrkScHbVfW/HhhrZe3i2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjIxMTEwMTAxNjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjdhNmRmZTdkMzU1OWYyZTAwNzEwMTMzNjM0NjVlOGFjMDEzNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmapBXOpVtG8IkJaAAmEyRz6RopSj
kwWpkMWc7Laemz17eorYOSXQPo8NRHxBWHU+OftacwG9vFO7e8YPb0hB2pJ0/MEp
CiwzNiJpuWrENQvWdpfxzKexLy3mqrMyCwcY78mKUWzmPDTBo0dSv3zzajfvrSG8
FnOCW1SMnPsSzsKrY/pnKtv3xy83ZTr9jfzJdnWhvPI2H5+snbLK37Xa+WDS96Ja
6hZ4kloxcCR7fOUuNaTUJ9M2JF3BdY2eTHw0hglcQnyC7cBoDOM0R43uycQm+wQl
vEZoztJ4Dy48Xrc6g9BW2bs8vigoOuf+IkGkwmHudypObGQwr62L7IXFEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB96bf59NVny4AcQEzY0ZeisATTTMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvSDNwdF9uMDFXZkxnQnhBVE5qUmw2S3dCTk5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBbIAAwQC
BbIEMA0GCSqGSIb3DQEBCwUAA4IBAQBiE5dXq1PD7/s/VgqUJ8Z5rDmdv1n92B9y
H3GGBdkpwQWcwg93JdKxcZxY4HSvU3sKkC4NAtuCC+T/SQCOlPKJh2xIoO/m66zn
bJRO84U1UL4dek0k8D/vEnJYr+Ntkiqz/uJ+z80UbyNu95XIHkrLVd4zBKnN0SbO
n++yBNH0XyvbMtygZOGyudcpY4lwHkDWa1i1XCksIRVDT8Y18RXvHPskXk4g+NC5
5bAmfDIcrCHH95yoPya39jWFEGnj/hw0vvCCXPwXefZyD8+0EAr+LRXYRXJqp3XQ
Vk4n+2lE9GmKyiq3LvkZXErtlLB2kjCAWgRVjjO1c7L51BQT/f17
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org