Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/1-fORBlECBhIYqOcbRh4srp3mOgU.roa
File: 1-fORBlECBhIYqOcbRh4srp3mOgU.roa (raw, json)
Hash identifier: +ci7DLB4xt1cDZZVzvGRbN+vq+MG4dqzCNTnptkaURU=
Subject key identifier: F9:F3:91:06:51:02:06:12:18:A8:E7:1B:46:1E:2C:AE:9D:E6:3A:05
Certificate issuer: /CN=88a8d325f97b03713342682fc408d53368740e7d
Certificate serial: 01CE180C
Authority key identifier: 88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/1-fORBlECBhIYqOcbRh4srp3mOgU.roa
Signing time: Sat 01 Jan 2022 12:56:52 +0000
ROA not before: Sat 01 Jan 2022 12:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60895
IP address blocks: 185.23.112.0/22 maxlen: 22
185.23.112.0/24 maxlen: 24
185.23.112.0/23 maxlen: 23
185.23.115.0/24 maxlen: 24
185.23.114.0/24 maxlen: 24
185.23.114.0/23 maxlen: 23
185.23.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30283788 (0x1ce180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a8d325f97b03713342682fc408d53368740e7d
Validity
Not Before: Jan 1 12:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9f391065102061218a8e71b461e2cae9de63a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:c0:be:09:be:dc:b9:62:c9:0c:13:80:3f:
7e:aa:22:37:40:16:ef:ce:15:fe:e0:99:27:2f:78:
8e:3e:2f:7a:b0:73:c7:1c:77:3a:43:64:61:c7:3d:
9b:7c:8a:e8:97:80:19:27:ab:10:70:7f:c3:2f:4a:
22:b8:20:6b:93:44:19:c6:8a:3e:86:da:11:97:49:
da:35:bf:03:bc:bc:76:34:45:e0:8e:12:ad:b5:b8:
3d:e0:a0:eb:c6:c9:be:73:7e:8f:6c:6a:45:34:d0:
54:ea:95:e7:08:64:da:6f:5f:e0:42:78:6c:a6:4a:
93:c3:f2:26:75:70:da:3f:70:72:3b:6f:a1:0e:ff:
06:2f:c1:49:40:46:3f:14:99:62:ad:c6:76:bf:3a:
c0:de:8e:b5:0b:bd:f2:b2:d4:26:7d:56:9c:ba:52:
bc:58:63:75:f4:88:e4:a5:be:93:15:ca:d7:c5:8b:
c6:0e:76:81:87:41:6b:c2:a9:96:d6:fc:5b:7c:6f:
70:78:89:48:61:d0:3b:ce:96:6e:c8:70:fb:af:b6:
9c:b1:83:ed:50:06:95:ef:81:94:ea:f5:41:ff:6d:
94:7e:5e:b8:e3:37:93:72:40:eb:ad:6c:c9:ea:93:
4a:e0:c1:35:64:fd:8c:90:7b:c6:73:34:6e:2f:b4:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:91:06:51:02:06:12:18:A8:E7:1B:46:1E:2C:AE:9D:E6:3A:05
X509v3 Authority Key Identifier:
keyid:88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/1-fORBlECBhIYqOcbRh4srp3mOgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:ef:df:a5:ed:c2:2e:42:37:50:36:cd:14:94:18:35:2c:75:
ed:bc:26:0b:b4:26:3a:a6:32:1c:fa:8d:c4:d8:4c:8f:5b:60:
f0:b0:3f:df:c6:2e:11:95:0f:eb:c7:90:da:2c:6b:92:cd:91:
fd:6a:cf:34:43:af:1e:17:3b:f6:94:1c:f6:02:4d:37:73:de:
12:90:1d:20:3c:4a:f4:6a:5e:1e:1d:39:4b:28:d5:38:c0:76:
7f:91:19:63:76:02:e4:4b:1f:05:5a:02:1c:1e:c8:f4:ee:ab:
d8:23:2a:6e:a8:a8:4e:cc:9c:4b:f9:e3:4a:ee:34:df:6f:90:
e4:4e:57:b3:f9:79:ff:d7:09:81:d3:c8:94:b9:74:47:5f:86:
93:f3:a0:65:4d:c6:54:66:3a:13:8a:3d:0b:68:74:c3:c6:44:
0f:97:60:cd:90:47:12:b9:72:65:7c:2c:2d:70:0a:0e:19:6e:
6a:d3:a9:02:ef:a2:d6:42:df:5b:35:ad:21:5c:d1:0a:16:fa:
86:31:86:c3:fa:5a:f6:d7:f3:21:19:51:ca:78:8d:e0:bf:62:
e8:47:b8:51:34:a2:53:80:95:da:10:ce:7d:17:c0:2e:e8:30:
00:e6:15:0c:24:c0:f7:da:51:88:1f:ad:ad:58:15:78:44:34:
73:76:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net