Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/8MuexIEdw1YdG6akfwgZpyxMRxg.roa
File: 8MuexIEdw1YdG6akfwgZpyxMRxg.roa (raw, json)
Hash identifier: HXTE/ZRZub311qpSlYmXap4QP2QF2yd0Qh1iIXTskM8=
Subject key identifier: F0:CB:9E:C4:81:1D:C3:56:1D:1B:A6:A4:7F:08:19:A7:2C:4C:47:18
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 17DEE5F7
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/8MuexIEdw1YdG6akfwgZpyxMRxg.roa
Signing time: Sat 01 Jan 2022 04:55:18 +0000
ROA not before: Sat 01 Jan 2022 04:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34187
IP address blocks: 78.26.192.0/18 maxlen: 18
78.26.128.0/18 maxlen: 18
195.245.118.0/23 maxlen: 23
185.70.108.0/22 maxlen: 22
2a03:1240::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400483831 (0x17dee5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 1 04:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0cb9ec4811dc3561d1ba6a47f0819a72c4c4718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:a5:7f:a6:56:60:aa:bc:68:12:e8:4c:38:
a2:e5:e3:f5:bf:ef:b8:44:6b:25:34:4b:95:ee:19:
94:d2:a7:f8:86:03:a7:6a:a1:8f:15:8d:f8:7d:4e:
07:8e:58:fc:4d:09:d3:b7:b6:8d:43:89:96:d3:53:
ff:f1:9d:8f:12:2f:68:61:d4:d4:25:71:ac:53:6d:
34:62:69:20:82:96:03:58:19:2e:61:d3:8c:af:4a:
db:95:88:77:3e:97:ad:be:6c:ee:37:1c:9c:b7:66:
e2:59:a0:94:c7:c1:23:34:96:82:91:48:ed:46:1d:
9e:6a:4f:ae:af:52:90:cb:21:f4:7b:8f:37:4b:f8:
5f:51:7a:ea:b8:1b:3d:aa:c6:f6:f7:4b:5b:a0:1b:
ec:b2:4e:79:bf:54:d4:64:1e:2b:0a:43:98:30:9c:
10:08:1d:5c:36:aa:77:dc:e1:ab:5a:28:d9:44:4c:
47:0e:26:b5:e5:2d:da:4f:b7:34:ac:ab:1d:5d:0f:
53:3c:25:72:8e:26:57:5b:10:aa:72:7d:be:7d:4b:
73:43:9a:4b:2b:e5:1e:07:ac:77:0b:c3:e1:35:5d:
19:3f:2c:52:b3:70:41:ab:63:49:58:35:93:14:76:
4a:1b:22:5e:2b:a8:b2:1a:fd:79:20:a4:c6:c2:e4:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CB:9E:C4:81:1D:C3:56:1D:1B:A6:A4:7F:08:19:A7:2C:4C:47:18
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/8MuexIEdw1YdG6akfwgZpyxMRxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.128.0/17
185.70.108.0/22
195.245.118.0/23
IPv6:
2a03:1240::/48
Signature Algorithm: sha256WithRSAEncryption
9c:50:fd:68:87:2e:15:d5:92:9e:41:40:4e:eb:3c:ea:d4:86:
5f:7a:16:a4:1a:42:ae:4a:7d:2f:93:da:5f:4b:17:29:82:77:
53:74:9d:51:a9:2a:77:bf:8c:1a:36:22:be:05:e5:aa:4d:ed:
e8:b0:bc:18:58:c8:43:7e:a9:6a:0f:3b:09:64:de:5b:7a:d9:
ae:49:7a:5a:bd:df:e0:48:c6:ce:27:29:1f:74:f4:bc:88:83:
66:d1:fd:4d:86:4b:69:87:72:30:c2:d8:fa:c0:e8:00:c2:7b:
ec:00:35:eb:7c:79:ae:1e:a1:7c:8f:8d:3f:59:f1:b8:1d:33:
5c:c1:e0:e2:42:05:1c:df:4e:55:ad:e1:65:c8:fc:26:4e:91:
0c:da:2b:11:67:a1:28:59:8e:92:a5:3b:fa:b0:01:5a:34:e9:
b8:3b:11:69:58:ae:13:cc:67:a2:dd:f8:fd:bf:c1:de:45:49:
a5:81:50:70:a1:22:4a:9e:d0:eb:7a:24:65:46:de:4f:06:6a:
c4:9f:7a:70:b2:00:b3:77:a6:c3:c0:22:75:bf:42:5b:e8:f5:
07:4a:ac:8f:6b:57:c3:ea:8b:1e:e0:4b:cb:08:4d:89:a6:61:
5d:da:9d:57:7e:ac:f3:1a:2b:65:8c:9c:67:4e:f7:0a:55:e2:
df:5f:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net