Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/RgnD6VV0tkmIYrMClAYOf6X2E3Q.roa
File: RgnD6VV0tkmIYrMClAYOf6X2E3Q.roa (raw, json)
Hash identifier: wmMsksqN1NTHBtRL/J6fsjz4MlmEC3UicKSBK8jcMrg=
Subject key identifier: 46:09:C3:E9:55:74:B6:49:88:62:B3:02:94:06:0E:7F:A5:F6:13:74
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 018263891074807EB21EEDEB0730535102F0
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/RgnD6VV0tkmIYrMClAYOf6X2E3Q.roa
Signing time: Wed 03 Aug 2022 11:48:23 +0000
ROA not before: Wed 03 Aug 2022 11:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39611
IP address blocks: 185.49.24.0/24 maxlen: 24
185.49.25.0/24 maxlen: 24
185.49.26.0/24 maxlen: 24
213.207.39.0/24 maxlen: 24
213.207.40.0/24 maxlen: 24
213.207.40.0/22 maxlen: 22
213.207.43.0/24 maxlen: 24
213.207.41.0/24 maxlen: 24
213.207.42.0/24 maxlen: 24
213.207.44.0/22 maxlen: 22
213.207.44.0/24 maxlen: 24
213.207.45.0/24 maxlen: 24
213.207.46.0/24 maxlen: 24
213.207.47.0/24 maxlen: 24
213.207.48.0/21 maxlen: 21
213.207.48.0/20 maxlen: 20
213.207.50.0/24 maxlen: 24
213.207.48.0/24 maxlen: 24
213.207.48.0/22 maxlen: 22
213.207.49.0/24 maxlen: 24
213.207.51.0/24 maxlen: 24
213.207.55.0/24 maxlen: 24
213.207.57.0/24 maxlen: 24
213.207.52.0/22 maxlen: 22
213.207.53.0/24 maxlen: 24
213.207.54.0/24 maxlen: 24
213.207.52.0/24 maxlen: 24
213.207.56.0/22 maxlen: 22
213.207.56.0/21 maxlen: 21
213.207.56.0/24 maxlen: 24
213.207.58.0/24 maxlen: 24
213.207.60.0/24 maxlen: 24
213.207.60.0/22 maxlen: 22
213.207.61.0/24 maxlen: 24
213.207.59.0/24 maxlen: 24
213.207.63.0/24 maxlen: 24
213.207.62.0/24 maxlen: 24
213.207.37.0/24 maxlen: 24
213.207.38.0/24 maxlen: 24
213.207.35.0/24 maxlen: 24
213.207.32.0/22 maxlen: 22
213.207.32.0/24 maxlen: 24
213.207.33.0/24 maxlen: 24
213.207.34.0/24 maxlen: 24
213.207.32.0/19 maxlen: 19
213.207.32.0/20 maxlen: 20
213.207.36.0/22 maxlen: 22
213.207.36.0/24 maxlen: 24
2a01:9d24::/31 maxlen: 31
2a01:9d20::/29 maxlen: 29
2a01:9d22::/31 maxlen: 31
2a01:9d20::/31 maxlen: 31
2a01:9d26::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:89:10:74:80:7e:b2:1e:ed:eb:07:30:53:51:02:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Aug 3 11:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4609c3e95574b6498862b30294060e7fa5f61374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:5d:30:03:dc:c5:4b:37:a5:7c:ef:1d:78:
41:8c:28:11:f7:d1:49:b9:b9:88:4e:e2:41:6a:eb:
b3:63:e1:38:0d:c5:ea:b3:3b:0f:59:a2:6d:35:57:
56:5f:a2:48:f9:e6:36:5c:ed:90:48:e7:65:de:65:
1d:d5:ef:51:7f:c1:9f:e5:63:09:a5:f2:d2:9a:25:
6c:ac:20:e5:a2:f9:ce:c3:ee:ea:2f:ef:ae:d8:57:
f7:31:fe:1b:10:51:d9:87:61:04:cd:9f:cc:98:78:
6c:2a:fa:59:48:71:41:52:35:9b:dc:14:4d:1e:fe:
8f:3f:45:1f:50:e1:52:34:8d:fa:6d:7a:19:f4:58:
6d:28:fc:81:62:20:80:dd:6c:dc:ac:fe:5d:7e:65:
f1:79:af:b2:c7:16:3b:9d:e9:df:70:0c:50:fa:a6:
d8:ed:3f:b8:ab:57:7b:bc:fc:32:d4:07:88:63:b6:
8a:fc:f6:88:e3:69:2f:ed:26:1c:2c:24:45:db:33:
b2:af:99:d0:c1:87:e4:67:95:24:5b:c6:81:fd:73:
53:cb:9d:4b:a0:50:8e:65:75:ff:33:b6:16:73:ab:
7f:79:10:3e:19:87:bf:17:27:73:5c:40:d9:dc:9a:
dc:92:7e:66:e7:67:29:1f:06:f2:9f:8d:15:d1:c7:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:09:C3:E9:55:74:B6:49:88:62:B3:02:94:06:0E:7F:A5:F6:13:74
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/RgnD6VV0tkmIYrMClAYOf6X2E3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.24.0-185.49.26.255
213.207.32.0/19
IPv6:
2a01:9d20::/29
Signature Algorithm: sha256WithRSAEncryption
ba:6c:40:70:e5:d4:88:b4:2f:85:1b:ae:8f:fe:83:f8:2c:75:
7e:b2:ac:25:30:64:9d:0a:dc:f4:f8:65:de:5d:b3:89:90:cd:
44:8b:82:79:6d:27:1d:ff:0d:53:b0:f0:23:4a:5b:2e:42:a9:
cd:55:dd:f0:13:2d:9b:b4:25:52:eb:6f:a5:f0:a7:37:51:f1:
be:8d:ba:43:d4:cf:03:e0:e5:6e:6f:a6:e8:44:6e:df:f4:47:
b2:e0:f1:f2:c4:7a:2b:fa:99:33:f8:52:8e:88:c2:49:7c:9f:
3e:e6:f5:5e:1b:d0:f3:eb:27:60:65:7d:6f:13:8e:1b:da:73:
dc:06:66:1d:92:16:60:d3:02:3d:b7:4e:04:02:fa:e0:b6:2b:
b2:44:2c:64:b3:aa:8e:77:14:2b:9c:76:94:97:e7:44:5e:ae:
a3:c1:68:83:eb:94:ee:7d:3d:0b:16:9d:14:bf:e0:a8:e3:5d:
a3:d6:3a:35:4f:6b:13:9a:9e:9b:80:9b:0f:1c:41:80:84:86:
96:6b:54:04:ae:cc:94:a1:da:c6:cf:2f:20:f0:f8:9c:d3:dc:
ee:e9:04:a9:a3:cc:99:a5:0e:72:73:8b:a6:70:5b:c9:91:63:
03:fd:f6:b1:5a:14:47:6d:f7:82:13:5e:99:f2:45:89:c8:4b:
86:70:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net