Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LBnEHeLLWuL7GCDjUBHgNtA7eAM.roa
File: LBnEHeLLWuL7GCDjUBHgNtA7eAM.roa (raw, json)
Hash identifier: KPgY8xUVt2AbXhfuVrajxv6fyen21vN04HHjK4GBs4w=
Subject key identifier: 2C:19:C4:1D:E2:CB:5A:E2:FB:18:20:E3:50:11:E0:36:D0:3B:78:03
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018B050129475AEB48E8FC44B0FC40248B2E
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LBnEHeLLWuL7GCDjUBHgNtA7eAM.roa
Signing time: Fri 06 Oct 2023 12:40:43 +0000
ROA not before: Fri 06 Oct 2023 12:40:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.178.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:01:29:47:5a:eb:48:e8:fc:44:b0:fc:40:24:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 6 12:40:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c19c41de2cb5ae2fb1820e35011e036d03b7803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:dd:49:48:d7:9b:81:19:5a:1a:a3:15:bb:
26:64:c9:f6:07:5c:95:49:d9:98:ad:b2:47:41:52:
cf:0f:f3:08:70:5e:dd:78:2a:37:c9:7a:43:25:26:
78:6e:9f:d3:9c:d2:52:7a:a1:4d:f2:aa:7e:31:06:
53:08:e1:89:82:31:1c:a2:cc:19:3c:34:2d:98:93:
7b:e8:34:e7:64:56:3b:e0:66:fe:5d:c3:b3:2e:18:
2d:f4:dc:09:1c:43:90:63:54:8a:f9:59:92:9a:6d:
0f:f7:9b:d7:f1:9b:80:6f:26:25:dc:61:30:1d:0b:
77:d7:11:80:70:73:17:18:36:42:58:8b:d5:93:de:
c4:f5:79:da:06:9d:09:31:8b:29:d3:27:4b:58:d1:
56:cf:85:9c:aa:bc:dc:ef:cb:c9:40:5c:bf:b7:45:
0f:ec:a4:ba:c1:6a:72:b3:a8:85:af:72:6a:0f:b2:
0d:56:97:7d:e4:2e:5a:2d:0d:04:c6:c1:22:f3:2f:
4f:15:7d:e1:74:69:23:b4:92:67:f0:4a:0a:28:c0:
3b:a5:2f:26:55:00:7a:bc:d8:98:a7:db:8b:ca:1e:
b9:9b:1b:9e:75:cc:11:a4:a7:b7:09:ec:8d:35:e8:
5f:26:ac:8e:eb:5a:42:04:ce:40:4c:94:9e:84:10:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:C4:1D:E2:CB:5A:E2:FB:18:20:E3:50:11:E0:36:D0:3B:78:03
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/LBnEHeLLWuL7GCDjUBHgNtA7eAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1d:fe:b2:88:46:51:c7:a5:e2:82:41:48:1f:3e:0e:a9:be:
de:b4:95:84:a1:9c:8b:dc:9f:6c:06:2d:4c:ab:75:d3:73:75:
11:18:fc:2d:da:43:7b:48:b7:c3:e3:37:ff:d9:f7:c8:28:b4:
6a:69:c7:d1:5b:6d:12:24:48:38:62:e1:53:f9:4c:34:aa:5b:
7d:d1:43:ad:dc:fd:10:b1:d7:64:d5:c4:cb:01:a0:0e:87:cf:
7d:1e:db:38:20:b7:45:1d:0e:59:a2:01:c3:30:d7:43:0e:5d:
5f:97:0e:8a:bb:c5:21:e9:da:22:bd:b6:72:d2:1f:bb:7f:ee:
c1:60:24:88:ef:2f:90:52:4a:f9:b7:17:a2:94:1b:09:27:d8:
8e:da:92:c5:f5:0d:7e:9f:cf:52:fa:44:fb:ef:31:1f:b2:2a:
e8:44:57:c6:a3:bb:a7:f1:cb:84:65:37:39:df:c5:c7:d7:e9:
d6:3d:d6:db:6a:4d:17:2d:1f:3e:4e:93:91:5c:75:28:b7:0e:
24:ef:3d:81:56:8c:36:a6:09:1f:3c:06:e8:8d:20:ef:cc:b1:
b9:4f:bd:df:bd:23:a9:bd:4e:a1:2d:03:08:74:73:12:87:e2:
c1:ee:3a:23:32:ec:0a:0f:b8:7a:0b:da:26:88:af:37:0f:dc:
4e:9e:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:45 2025 by rpki-client