Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/8gB8jRI97mErmANjvzI3itRmGfs.roa
File: 8gB8jRI97mErmANjvzI3itRmGfs.roa (raw, json)
Hash identifier: nU6/GUIP+m7yh3kfx9j2p0eX9z4dzBeiFmKines9C9g=
Subject key identifier: F2:00:7C:8D:12:3D:EE:61:2B:98:03:63:BF:32:37:8A:D4:66:19:FB
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 179ED2
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/8gB8jRI97mErmANjvzI3itRmGfs.roa
Signing time: Sun 26 Jun 2022 21:15:42 +0000
ROA not before: Sun 26 Jun 2022 21:15:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204456
IP address blocks: 185.222.233.0/24 maxlen: 24
185.222.232.0/22 maxlen: 22
185.222.232.0/24 maxlen: 24
185.222.235.0/24 maxlen: 24
185.222.234.0/24 maxlen: 24
2a0d:800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1547986 (0x179ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Jun 26 21:15:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2007c8d123dee612b980363bf32378ad46619fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:90:dc:82:e6:9d:97:7b:92:af:98:9e:cd:
61:ff:c0:c9:5c:75:83:92:a4:86:5f:80:37:94:ea:
60:40:fa:17:e2:75:6a:e1:f4:76:5e:8c:13:19:52:
b6:a8:9d:dd:6d:6d:8e:e4:86:76:44:38:bb:6b:35:
d1:ae:23:cd:1b:92:27:ea:7e:81:36:22:49:85:d4:
72:5d:f0:a4:87:5c:d7:ac:f8:87:3c:8a:72:97:e2:
bb:71:c8:98:08:a6:63:98:56:da:14:45:71:fe:17:
e4:cf:b8:d4:e9:5e:8a:b3:aa:6e:b0:73:41:7f:46:
8e:65:9f:df:4e:a8:ff:da:ba:52:7e:fd:60:28:7f:
f4:d4:de:5c:42:34:78:49:f5:78:69:65:b3:6a:33:
f9:62:02:04:52:e5:80:9f:e4:23:02:b3:30:ae:1d:
5b:3e:30:d0:cb:47:46:cf:1b:b3:2f:e4:52:0b:32:
ee:a1:f6:ed:8f:b1:27:e8:3c:68:c6:a8:96:d5:cd:
45:57:6a:e0:4e:0f:18:ca:5d:ba:81:26:55:41:34:
f5:f5:21:cc:57:11:80:b0:93:10:a3:54:8b:8c:12:
ab:f6:72:8c:32:73:40:55:fe:c1:f3:4a:f2:39:77:
9a:2f:fb:21:85:33:ba:25:36:78:27:c1:62:3b:44:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:7C:8D:12:3D:EE:61:2B:98:03:63:BF:32:37:8A:D4:66:19:FB
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/8gB8jRI97mErmANjvzI3itRmGfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.232.0/22
IPv6:
2a0d:800::/29
Signature Algorithm: sha256WithRSAEncryption
c8:b6:1a:19:31:dd:fa:78:77:8c:83:0e:67:14:1b:e0:fa:90:
08:11:56:cd:d4:31:10:e3:08:97:6c:a3:2b:2c:00:4b:85:ab:
f7:5a:14:b9:d0:77:63:0a:a6:f6:79:e2:4f:a3:c9:0d:ea:3d:
6b:b9:bf:1e:b5:66:67:07:35:42:d4:66:94:74:2f:56:f7:f5:
e6:57:80:73:65:4f:3b:d2:ff:c4:84:cc:db:12:9d:c6:37:ce:
33:fd:8f:6b:ed:8f:a7:5a:79:3e:06:d2:bf:73:9a:59:31:55:
04:59:a6:ce:c9:9b:d3:d1:89:47:8c:ef:2b:b0:84:6a:8e:fd:
f2:ea:fe:57:e7:8a:4f:cd:43:dc:88:dd:50:f7:1a:01:9e:29:
bb:9b:1f:29:b4:ff:82:81:22:a1:13:49:fc:f6:2f:ba:ef:cf:
3e:62:d9:f7:9e:95:bf:08:f6:2b:74:23:16:b9:f3:62:90:1f:
dd:ba:44:2d:e6:ab:d3:12:fe:ea:47:9c:42:ef:05:d7:e2:3e:
5d:e2:65:2e:37:01:e1:3a:c4:95:a9:cf:1b:0d:31:45:56:4e:
b3:68:7d:25:ef:57:d4:e6:2f:76:f9:62:2d:99:62:c1:c4:d8:
af:8e:04:f8:70:29:1e:b8:77:7e:65:d1:4b:0c:24:6a:09:41:
1f:47:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:49 2023 by rpki-client on console.sobornost.net