Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/N6AlsrvgGkVU1XufkExd-wdoLjE.roa
File: N6AlsrvgGkVU1XufkExd-wdoLjE.roa (raw, json)
Hash identifier: G0l7Y0Ky7nfc/pngxC5HxziT3akDoKbqrKjSdiiiUVs=
Subject key identifier: 37:A0:25:B2:BB:E0:1A:45:54:D5:7B:9F:90:4C:5D:FB:07:68:2E:31
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 0185061E67BBBD4F208910C2118D7F344AF1
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/N6AlsrvgGkVU1XufkExd-wdoLjE.roa
Signing time: Mon 12 Dec 2022 11:35:34 +0000
ROA not before: Mon 12 Dec 2022 11:35:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24723
IP address blocks: 206.252.228.0/23 maxlen: 23
206.252.230.0/24 maxlen: 24
206.252.236.0/22 maxlen: 22
206.252.252.0/22 maxlen: 22
206.252.253.0/24 maxlen: 24
195.238.184.0/22 maxlen: 22
77.79.255.0/24 maxlen: 24
85.232.240.0/24 maxlen: 24
85.232.243.0/24 maxlen: 24
46.229.158.0/24 maxlen: 24
46.229.158.0/23 maxlen: 23
46.229.159.0/24 maxlen: 24
77.79.198.0/24 maxlen: 24
2001:1a68:3::/48 maxlen: 48
2001:1a68:34::/48 maxlen: 48
2001:1a68:2c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:1e:67:bb:bd:4f:20:89:10:c2:11:8d:7f:34:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Dec 12 11:35:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37a025b2bbe01a4554d57b9f904c5dfb07682e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:56:e6:60:4e:8e:43:d6:ca:14:8c:d4:c8:
e4:f7:66:d3:19:92:1a:42:f6:9d:16:03:99:bf:59:
c6:34:41:7c:19:9f:5e:e9:50:f1:32:4d:22:15:5f:
9f:ca:02:e8:09:62:c2:df:c5:ef:84:62:c0:c2:ac:
b3:81:6f:9c:b8:50:ff:86:07:47:de:b3:60:eb:19:
0f:5c:d9:63:84:b7:01:4f:c4:7c:58:04:de:7a:b4:
74:9b:8d:77:32:da:c3:22:fc:13:89:79:02:99:18:
3a:3b:4e:9b:df:07:2e:b5:eb:fb:15:28:13:a0:06:
3f:5f:6d:8f:ee:a4:ee:a4:89:28:d1:ac:43:22:97:
51:98:6f:37:d4:82:6c:28:27:bd:11:ae:46:46:09:
c1:4c:d6:8f:fb:e0:42:2e:69:c9:61:bb:79:ff:f1:
fe:81:cc:2b:72:1c:fc:e1:bb:f5:74:d2:fe:f2:ec:
98:1a:ff:61:59:83:60:bf:a3:d0:f9:82:4f:3e:7d:
64:ba:ec:a0:9d:23:bc:69:84:a1:28:89:4f:fb:76:
e4:2d:50:ab:9d:11:b8:f4:87:ad:15:e1:e5:12:c2:
1c:56:3f:b6:68:66:31:1a:e5:54:91:fe:3e:04:8c:
a8:94:ad:53:72:37:61:10:41:b7:c5:85:27:e0:5f:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:25:B2:BB:E0:1A:45:54:D5:7B:9F:90:4C:5D:FB:07:68:2E:31
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/N6AlsrvgGkVU1XufkExd-wdoLjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.158.0/23
77.79.198.0/24
77.79.255.0/24
85.232.240.0/24
85.232.243.0/24
195.238.184.0/22
206.252.228.0-206.252.230.255
206.252.236.0/22
206.252.252.0/22
IPv6:
2001:1a68:3::/48
2001:1a68:2c::/48
2001:1a68:34::/48
Signature Algorithm: sha256WithRSAEncryption
87:91:5f:3e:c0:ae:f2:56:c4:66:d4:e6:a8:02:ce:f5:57:05:
83:fa:c7:0d:5e:e6:e5:c8:a7:8d:95:5d:40:c1:6d:47:2c:15:
fa:18:9c:e7:fa:3a:2a:9e:f3:e3:d2:bd:da:73:0d:69:62:dd:
b4:67:6c:c5:d7:49:83:2f:02:52:89:2e:87:3d:31:31:58:3b:
13:4d:9a:39:69:4b:b3:fb:29:7b:49:19:8a:f3:90:0b:a8:1e:
50:d6:53:57:68:26:fb:8a:2a:42:79:69:83:0b:d8:f1:e7:42:
4a:39:d7:93:77:3d:3c:d8:9b:49:af:ff:69:d2:20:a0:43:a2:
3b:44:88:da:1f:96:ca:c4:bc:e4:a7:64:86:c2:99:37:65:8c:
36:24:59:b7:21:0e:fd:aa:8c:f0:02:91:55:99:92:30:57:4c:
eb:30:dd:33:99:98:a2:b1:25:48:af:a4:0b:c3:38:1c:cb:a3:
05:01:8d:a2:b1:4f:a9:17:f4:4c:9e:0a:60:26:71:ea:5d:d1:
05:e3:d9:b6:02:aa:0e:b5:59:0f:db:fb:db:93:f5:4e:a7:b9:
06:75:32:65:09:1b:ea:81:a2:b7:e0:66:0e:ba:3e:b5:d0:e6:
cf:ed:19:54:ab:a7:9b:c4:33:7a:fa:37:54:b8:08:d8:00:9f:
32:58:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net