Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/kbJARnEJamVisOUxk5b4I3F6KMk.roa
File: kbJARnEJamVisOUxk5b4I3F6KMk.roa (raw, json)
Hash identifier: 4JxsmCN/Gq4ycZisRHxvLx83DXr7SCTMDDGTge44H3E=
Subject key identifier: 91:B2:40:46:71:09:6A:65:62:B0:E5:31:93:96:F8:23:71:7A:28:C9
Certificate issuer: /CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Certificate serial: 0183E4C8A01AA4707A2720B4BB799A3E21DA
Authority key identifier: C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/kbJARnEJamVisOUxk5b4I3F6KMk.roa
Signing time: Mon 17 Oct 2022 07:11:36 +0000
ROA not before: Mon 17 Oct 2022 07:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 194.11.255.0/24 maxlen: 24
194.13.1.0/24 maxlen: 24
185.144.24.0/22 maxlen: 22
45.155.228.0/22 maxlen: 22
45.9.104.0/22 maxlen: 22
194.13.67.0/24 maxlen: 24
93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 23
45.85.132.0/22 maxlen: 22
185.73.206.0/24 maxlen: 24
185.73.204.0/22 maxlen: 22
185.73.204.0/24 maxlen: 24
185.73.205.0/24 maxlen: 24
91.227.36.0/22 maxlen: 22
194.13.64.0/24 maxlen: 24
2a05:46c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:c8:a0:1a:a4:70:7a:27:20:b4:bb:79:9a:3e:21:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Validity
Not Before: Oct 17 07:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91b2404671096a6562b0e5319396f823717a28c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:91:0c:be:c5:0f:82:43:f3:e4:ba:a5:6b:
7d:1a:5e:cf:51:65:2f:eb:51:0c:7a:95:90:a7:ce:
6d:06:fa:ac:ae:05:b0:cd:78:3c:eb:37:8b:7f:7b:
2a:ea:29:2f:30:43:97:a2:d4:0e:fe:54:86:bf:68:
44:d5:fb:c3:8c:c8:66:6c:29:7d:e4:03:52:db:e7:
e3:b9:b7:8b:04:82:19:55:15:db:98:11:24:4b:39:
94:c4:26:18:96:15:49:b0:2f:34:c7:bb:18:03:54:
a6:b8:e7:11:20:80:8c:06:c3:53:6f:1b:60:7c:a0:
02:31:d4:08:67:63:ae:85:b5:b8:4a:6c:59:d8:ac:
2e:de:ac:af:57:f8:48:31:c7:c5:46:9a:3c:ee:45:
c7:38:43:e7:70:32:d6:6d:14:9e:b7:b4:76:a4:a8:
eb:12:49:80:b9:30:5f:2f:77:09:e3:a0:4e:1e:34:
ae:f3:58:ef:32:b9:7a:19:df:cf:eb:3c:42:a7:45:
93:e1:f1:42:36:47:6d:91:6b:58:d6:d4:75:ed:d9:
20:a0:d0:d8:73:93:9e:2f:67:a4:22:d9:08:c7:fd:
73:96:ab:3d:fc:1f:fa:10:15:e0:a5:2b:14:05:db:
74:1b:81:c7:82:c6:44:68:64:17:7f:d7:6a:44:02:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:40:46:71:09:6A:65:62:B0:E5:31:93:96:F8:23:71:7A:28:C9
X509v3 Authority Key Identifier:
keyid:C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/kbJARnEJamVisOUxk5b4I3F6KMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/xmR5vfftuQtRqnKWNBBMDSgCrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.104.0/22
45.85.132.0/22
45.155.228.0/22
91.227.36.0/22
93.177.69.0-93.177.71.255
185.73.204.0/22
185.144.24.0/22
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
IPv6:
2a05:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
21:7a:9d:e8:e5:e6:fa:a1:06:ca:e8:db:79:44:72:3d:fa:ea:
46:1f:5e:c2:41:0c:52:32:3f:7d:d4:6f:04:00:0a:51:c5:c1:
8c:58:10:ef:9a:bc:8f:a3:03:d4:b0:5b:c9:e9:e8:c0:2c:c2:
8c:90:27:cb:a8:a7:b4:3e:56:36:f2:b9:7b:36:d9:9f:f6:8e:
3f:7a:9a:48:4a:62:3f:bd:45:0c:3b:4e:86:d0:f1:23:a2:5d:
30:d3:e3:1e:60:ce:cf:d1:c9:4d:ab:76:4e:7c:da:83:bf:97:
87:55:a9:6b:b9:37:09:da:b4:cf:8e:cc:59:b3:3a:02:2e:ad:
38:49:77:52:dc:c5:88:26:85:df:52:65:ba:92:27:23:56:de:
68:5d:c8:83:db:20:c8:da:67:20:e9:d7:84:be:2c:95:64:ee:
b1:0f:0e:51:6b:f1:de:24:25:a1:6f:da:6f:aa:17:d8:e0:f9:
f3:3f:4a:92:90:9e:6f:1f:3b:80:6e:b2:5b:55:90:17:a5:96:
1f:32:a2:c5:c7:92:f0:a9:25:b2:82:a1:9b:f7:52:10:43:22:
d6:11:37:02:22:f4:f7:69:60:59:ab:2b:13:98:58:ad:25:38:
02:1a:06:c8:62:73:69:a2:34:be:19:55:df:8d:94:a2:27:1f:
ac:c9:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net