Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/C0XoQhDOTjo0tlzaCmG-MNpwDbE.roa
File: C0XoQhDOTjo0tlzaCmG-MNpwDbE.roa (raw, json)
Hash identifier: m0B8QK4terh37ZNumfr6lZI+1xadRu2gQl6/mUhLWLs=
Subject key identifier: 0B:45:E8:42:10:CE:4E:3A:34:B6:5C:DA:0A:61:BE:30:DA:70:0D:B1
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0183B19AD36739D8B480392FAB9C57D91EEE
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/C0XoQhDOTjo0tlzaCmG-MNpwDbE.roa
Signing time: Fri 07 Oct 2022 08:40:57 +0000
ROA not before: Fri 07 Oct 2022 08:40:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.203.164.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
176.46.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:9a:d3:67:39:d8:b4:80:39:2f:ab:9c:57:d9:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 7 08:40:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b45e84210ce4e3a34b65cda0a61be30da700db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:2a:60:24:93:2b:d1:6d:29:9d:07:96:15:
4e:04:09:8f:c4:43:38:41:8e:69:af:7a:96:ae:00:
d3:dc:f5:cc:a5:9c:00:fa:b8:d8:64:fd:6e:ea:1a:
03:6f:b1:5e:39:72:cc:7c:f6:07:67:85:77:2d:2e:
ec:fd:90:8c:a8:1d:8b:16:d9:59:46:ac:d0:68:07:
af:ed:34:8c:b0:35:dd:70:d7:67:8a:1a:5b:8d:df:
da:4a:ca:82:a8:2f:e2:67:f6:b1:5d:42:84:38:6a:
34:f7:08:f9:f5:57:0b:ad:11:e7:d1:6b:d7:9b:b2:
35:9d:15:dd:b6:20:65:8c:1f:f9:a5:e2:e7:70:cc:
33:7b:2c:b7:2a:de:67:ac:e9:ec:3f:f8:26:e0:f1:
16:79:57:a1:3b:b1:30:3a:84:73:1f:e4:ad:18:23:
e8:80:2f:7b:10:4e:2c:89:3e:b1:f0:f6:3d:7d:c9:
c7:70:36:47:ba:1a:f5:39:01:5d:96:67:ae:62:e7:
4d:16:d6:ee:d0:87:96:96:a7:d7:fb:51:d5:ae:ee:
54:78:de:e7:9f:bf:39:51:8f:15:77:05:bb:a5:d4:
6e:42:a2:63:6c:c1:09:80:d2:3a:c5:83:e5:17:18:
ff:63:e6:42:8a:d1:ea:d1:3b:d8:9e:d7:75:3a:69:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:E8:42:10:CE:4E:3A:34:B6:5C:DA:0A:61:BE:30:DA:70:0D:B1
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/C0XoQhDOTjo0tlzaCmG-MNpwDbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.148.0/22
109.203.164.0/22
176.46.128.0/19
Signature Algorithm: sha256WithRSAEncryption
26:cd:e6:4d:ff:b8:fd:41:a4:49:4e:b6:89:1c:23:5b:e6:66:
00:4b:d1:39:26:b7:54:4b:02:ec:78:31:fc:e2:4a:0c:e7:fc:
a7:c7:81:e3:16:df:7d:13:af:ec:01:e5:ad:6c:af:c1:7d:8c:
68:63:24:2d:e2:ec:48:25:99:4b:f7:3b:34:b8:33:aa:c6:f4:
86:ff:da:82:02:97:53:50:1b:c8:fd:6b:86:eb:1b:2c:0f:16:
19:3e:f3:b2:e0:2b:e3:7d:88:8c:97:58:c9:8d:a3:f0:18:b1:
9c:2a:1e:d8:30:24:73:d2:c6:af:62:99:bc:6b:4f:e9:d4:14:
10:47:29:ee:61:14:2a:22:3f:bf:31:3b:09:1e:df:e4:31:8d:
02:d1:23:1c:4b:00:ac:73:bf:fd:e3:20:95:27:51:3d:c9:be:
df:63:00:a4:b7:5c:97:2f:57:b9:fd:88:46:b6:30:72:d8:6b:
f0:d2:10:9c:31:cb:aa:ee:41:ce:55:6f:4d:10:87:8f:3e:d2:
a2:09:47:cf:54:b3:01:98:d3:f9:e9:98:2f:cd:6e:fc:ad:e3:
db:c0:a5:35:94:da:5f:98:17:62:f1:50:69:3d:e2:94:f7:58:
41:34:94:61:d7:6e:32:97:59:86:d8:ee:bd:85:23:d1:cf:fb:
05:6d:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net