Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/t4jk4MH2eco3GgXFMemrsfOlPOU.roa
File: t4jk4MH2eco3GgXFMemrsfOlPOU.roa (raw, json)
Hash identifier: nyqjfDgC5YvA83Te9/tpjyBFXtddIxszEscvh0vJjT0=
Subject key identifier: B7:88:E4:E0:C1:F6:79:CA:37:1A:05:C5:31:E9:AB:B1:F3:A5:3C:E5
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 3803ADFC
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/t4jk4MH2eco3GgXFMemrsfOlPOU.roa
Signing time: Sat 01 Jan 2022 11:02:20 +0000
ROA not before: Sat 01 Jan 2022 11:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42338
IP address blocks: 185.203.34.0/24 maxlen: 24
185.203.32.0/24 maxlen: 24
185.203.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939765244 (0x3803adfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 1 11:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b788e4e0c1f679ca371a05c531e9abb1f3a53ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:17:5a:56:9a:85:a2:a2:f7:14:17:40:77:
b3:df:d8:75:3f:a9:cd:9a:b7:d0:b4:4d:3f:d9:d3:
b1:d7:2e:b0:c4:c5:a1:a5:ad:1f:9c:da:12:23:62:
ba:a0:06:df:05:e3:76:d6:0f:b4:83:04:e9:52:55:
46:8a:5c:59:76:f7:b8:5e:5a:c0:85:2d:b8:0f:32:
61:fd:8d:4f:81:b3:29:dc:b8:27:40:51:34:e6:87:
c6:40:f9:4a:02:da:33:df:44:54:9c:b8:10:66:59:
1c:a4:1b:cc:67:86:9b:9f:2e:c3:9c:6f:93:12:66:
f4:44:c7:70:88:e4:59:f1:50:29:48:82:10:50:b4:
43:0f:43:53:0d:d2:b0:ae:e2:94:21:a6:54:22:d7:
6a:d9:bb:10:a8:11:eb:f0:f9:c1:04:91:71:8d:c7:
4a:da:12:d8:24:92:20:40:8a:65:af:9b:c9:88:c3:
85:a2:c3:d4:a3:c2:6e:2b:b3:23:03:b5:14:aa:f3:
7d:57:1e:bc:0d:0c:72:b0:3c:3a:05:e1:bc:2a:a9:
ae:d1:cb:03:80:29:72:60:d6:52:0c:c7:33:a5:e6:
97:ed:dc:30:25:0a:2c:13:7a:82:fa:6b:6e:81:31:
25:4d:d3:23:e8:10:6b:89:08:0e:c0:b6:7c:1b:c5:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:E4:E0:C1:F6:79:CA:37:1A:05:C5:31:E9:AB:B1:F3:A5:3C:E5
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/t4jk4MH2eco3GgXFMemrsfOlPOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.32.0-185.203.34.255
Signature Algorithm: sha256WithRSAEncryption
88:e2:05:e5:b2:26:6c:28:8f:c4:e7:57:73:1e:3d:65:3b:ce:
39:bd:70:3e:53:b2:3c:76:4b:ac:f6:4f:3b:10:37:e2:28:c2:
40:d1:aa:39:36:88:a2:60:e0:a8:ff:de:62:a4:0f:26:c1:90:
86:2f:4b:6c:f9:e8:f1:1e:fe:79:6d:37:3b:1c:08:3e:bf:cd:
a0:6e:f1:d2:9c:8a:f2:6b:b4:03:9c:d3:cb:bd:77:cf:b3:42:
e5:51:73:09:bb:4c:72:4e:dc:98:dd:2a:1f:0d:c9:7a:3a:88:
03:65:98:bd:c1:15:ba:ea:b4:33:97:c8:96:47:bc:dc:5b:a4:
fd:e8:8c:a8:44:2c:ef:79:33:93:be:eb:30:7a:37:07:5a:cf:
75:cb:fc:19:8b:0c:1d:f2:6a:ba:18:a8:4c:9c:1e:e8:8e:aa:
af:7e:bd:ce:ab:e4:d8:6b:be:dd:70:4d:61:52:a6:3b:25:75:
d7:f6:b7:d3:64:66:86:76:19:6d:30:97:bc:ee:06:f3:71:f0:
17:0a:a1:23:31:77:a0:a5:bd:13:3e:60:67:4d:8b:65:c8:ab:
a1:8b:17:0a:48:a9:cd:95:72:70:af:0c:b5:51:84:f4:56:e2:
76:0d:55:77:88:8f:02:db:16:e9:e6:d4:27:2e:5e:f5:d1:99:
be:bb:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net