Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/o78kCWLFCx-Gnuvw6P2f6aNS0gU.roa
File: o78kCWLFCx-Gnuvw6P2f6aNS0gU.roa (raw, json)
Hash identifier: k+/fHYvDgzYQ83ugSyJSRHCBIxgWl6hHhPtch208kec=
Subject key identifier: A3:BF:24:09:62:C5:0B:1F:86:9E:EB:F0:E8:FD:9F:E9:A3:52:D2:05
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 08440D76
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/o78kCWLFCx-Gnuvw6P2f6aNS0gU.roa
Signing time: Sat 01 Jan 2022 12:06:32 +0000
ROA not before: Sat 01 Jan 2022 12:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206837
IP address blocks: 176.98.211.0/24 maxlen: 24
176.98.208.0/24 maxlen: 24
176.98.208.0/22 maxlen: 24
176.98.210.0/24 maxlen: 24
176.98.209.0/24 maxlen: 24
185.127.54.0/23 maxlen: 23
185.127.55.0/24 maxlen: 24
185.127.54.0/24 maxlen: 24
185.127.52.0/22 maxlen: 22
185.127.53.0/24 maxlen: 24
185.127.52.0/23 maxlen: 23
185.127.52.0/24 maxlen: 24
157.97.85.0/24 maxlen: 24
157.97.84.0/22 maxlen: 24
157.97.84.0/24 maxlen: 24
157.97.87.0/24 maxlen: 24
157.97.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138677622 (0x8440d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Jan 1 12:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3bf240962c50b1f869eebf0e8fd9fe9a352d205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:c3:2a:74:73:dc:10:f1:4c:8e:84:42:41:
b7:23:1c:04:b0:10:21:f8:51:c2:70:0e:10:d2:9d:
7c:67:c0:5f:d7:a3:f9:48:53:05:e0:a7:84:88:34:
ac:b8:4a:6f:b1:3a:2c:2a:09:6b:d3:71:21:64:a1:
ce:d4:9f:20:4f:b8:75:3c:ff:c8:31:72:9c:cf:0d:
20:a5:f3:9b:39:f3:7d:53:0c:e9:6c:ec:f2:87:d0:
ec:eb:89:86:9b:c9:06:40:c1:02:50:51:bb:71:78:
30:65:53:05:e2:18:aa:d3:41:10:f8:67:85:b3:f7:
73:c6:f9:8e:a7:e0:f2:da:4a:3b:70:3e:76:ac:7b:
99:34:64:99:5b:b1:4e:cc:48:13:27:92:2e:b0:94:
9e:a1:0b:52:b9:af:46:a2:61:e8:68:df:fb:fe:46:
39:73:23:46:4f:d1:90:6a:f9:89:c9:a3:29:5c:40:
00:b4:ff:e2:18:74:2e:f0:f0:18:40:7d:f1:55:5a:
4e:9b:e7:45:31:e7:17:ac:5b:8d:80:3f:cb:cd:94:
00:86:ee:ec:e1:2f:a7:80:2a:5c:b2:f5:78:1a:a5:
87:74:97:8b:1d:e7:89:35:cc:ed:83:3f:ba:31:4d:
97:04:71:ea:e8:02:13:3b:70:b6:7c:83:53:1c:7f:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:24:09:62:C5:0B:1F:86:9E:EB:F0:E8:FD:9F:E9:A3:52:D2:05
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/o78kCWLFCx-Gnuvw6P2f6aNS0gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.84.0/22
176.98.208.0/22
185.127.52.0/22
Signature Algorithm: sha256WithRSAEncryption
45:1b:b9:52:20:40:52:4f:a7:ef:80:b7:98:b5:b2:29:a7:47:
13:4d:1f:c8:99:8b:bf:bd:e8:bd:18:1f:d8:72:8d:05:78:60:
8f:3a:04:ee:c5:eb:c9:cb:cf:40:ff:19:fe:75:0c:8e:a2:b8:
23:5e:44:78:de:bf:6c:11:aa:32:d1:c1:4a:78:fc:0b:cf:4b:
84:47:1e:f5:e9:cb:bc:12:70:93:a1:fa:d6:d8:9c:21:2a:7f:
16:08:e2:b7:90:4d:d9:22:1e:fd:58:b9:ca:08:f7:27:fc:75:
0d:22:1a:f8:49:4d:55:c3:10:b1:53:f5:35:36:2c:74:d0:09:
c4:86:da:1c:5d:98:7b:6a:bb:49:5a:f1:35:b8:bb:9a:1b:cd:
99:d6:c9:7c:a6:06:bc:3e:23:b4:a5:5f:95:39:5a:03:99:ae:
a0:19:1f:f6:a4:a2:1c:ad:55:ba:3f:a5:7b:a2:6e:13:7f:ae:
15:1c:13:89:8f:0e:9e:0b:0a:bf:00:27:a9:1f:5a:1a:8d:a9:
70:5a:0d:d8:92:58:99:28:8e:b7:3d:9b:bb:44:60:1d:d0:03:
4f:4a:db:ca:db:41:e7:38:01:4a:ac:06:1f:69:4c:08:a6:22:
28:eb:1a:96:32:40:78:44:f5:f6:0f:15:10:c1:b1:a7:10:01:
34:28:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net