Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/06Z6DBvEGsgZGEMgHnjmOwqsvvQ.roa
File: 06Z6DBvEGsgZGEMgHnjmOwqsvvQ.roa (raw, json)
Hash identifier: 2ERxw5h4ohD5M6CsL4AKsrmRmqtzqR0JgwEf+Um3XX8=
Subject key identifier: D3:A6:7A:0C:1B:C4:1A:C8:19:18:43:20:1E:78:E6:3B:0A:AC:BE:F4
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 022B2617
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/06Z6DBvEGsgZGEMgHnjmOwqsvvQ.roa
Signing time: Mon 28 Mar 2022 06:54:16 +0000
ROA not before: Mon 28 Mar 2022 06:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199860
IP address blocks: 193.43.41.0/24 maxlen: 24
5.188.106.0/23 maxlen: 23
185.44.14.0/23 maxlen: 23
185.44.12.0/22 maxlen: 22
185.44.12.0/23 maxlen: 23
5.188.104.0/22 maxlen: 22
5.188.104.0/23 maxlen: 23
2a01:6520::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36382231 (0x22b2617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Mar 28 06:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3a67a0c1bc41ac8191843201e78e63b0aacbef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:db:d8:06:22:78:1d:f8:70:e2:f4:41:e4:
0d:1d:e3:6d:da:6b:1d:26:8d:30:51:3c:be:d3:23:
0b:c2:e5:e4:f2:41:0e:de:07:b3:b8:5b:a4:59:37:
d8:75:d2:fc:3e:42:9a:5d:66:67:fa:b9:c6:73:7f:
84:b3:1e:24:3b:b2:fc:a2:63:3d:3a:cc:a4:a1:25:
3f:55:f5:77:a9:e2:05:85:ec:3d:fe:75:e2:3d:94:
9c:5b:c4:9a:2c:e6:68:c2:ee:6b:b2:0e:63:e4:fd:
23:19:4a:8c:a7:be:94:d0:2a:33:b2:0d:d8:0d:cd:
be:a0:66:d1:59:36:f8:ce:4c:14:49:59:58:e9:1e:
ed:d2:95:4f:28:57:27:9d:bc:11:13:ff:b9:34:be:
9b:ee:48:c3:2d:1f:88:13:81:da:ea:62:05:4b:62:
33:8f:77:76:f4:30:bb:a7:a7:28:68:50:a2:42:b3:
b8:95:7e:91:95:98:5a:e8:a2:bb:d0:f5:1d:78:68:
41:1b:47:c0:d1:57:e8:a6:ee:89:df:18:e6:49:68:
05:7b:d1:06:c6:c6:7e:b4:b3:0c:e9:10:24:5a:cc:
7d:c1:84:60:14:4a:13:d1:16:6f:d9:80:10:c3:3e:
07:d7:c9:1e:e5:c6:ee:75:2a:ac:05:69:f5:d3:9e:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:7A:0C:1B:C4:1A:C8:19:18:43:20:1E:78:E6:3B:0A:AC:BE:F4
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/06Z6DBvEGsgZGEMgHnjmOwqsvvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.104.0/22
185.44.12.0/22
193.43.41.0/24
IPv6:
2a01:6520::/32
Signature Algorithm: sha256WithRSAEncryption
6d:83:aa:2c:1b:25:7a:ca:1d:35:14:4c:17:90:96:08:f4:85:
75:2f:6d:e7:ab:bd:42:00:49:23:13:5e:a1:1b:de:e0:a2:8c:
e1:f4:98:df:fc:f0:94:c6:e2:7a:34:f9:1b:d8:77:66:fa:9c:
05:fd:69:37:61:24:bf:a1:5b:f0:ab:fe:5b:3c:a0:a7:90:7b:
1b:e7:74:be:c4:8c:1a:fa:e6:5d:f4:05:74:ed:d0:d2:9d:e8:
d2:89:f9:c7:83:69:be:85:7c:cb:1c:d1:13:57:1c:24:ad:e8:
bb:24:04:14:4e:b1:35:eb:c0:de:82:c2:17:8e:0e:1f:4e:16:
ad:1a:15:4b:09:fe:b5:70:af:45:62:fd:e8:1d:df:86:4c:4f:
98:e5:5a:69:10:2f:c6:4e:53:bc:72:e5:fe:a0:f4:f3:4e:6d:
2d:e6:f5:57:19:05:5c:fe:04:07:df:e7:18:13:34:3e:3a:0b:
ae:f6:f3:1d:e7:38:68:66:21:4e:20:31:d7:04:31:bc:a6:60:
1f:dc:d1:d4:e0:72:32:c9:4d:29:e4:1f:79:f7:2e:60:b0:c6:
57:3f:77:37:d9:b8:a8:ff:28:00:45:55:18:a7:c4:4d:b1:ab:
7d:f9:ec:92:3e:62:35:de:54:8f:57:3a:cb:17:2e:de:1c:6e:
5f:1b:89:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net