Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/noGLha3b1o6i_VmrdOLzbta2nPQ.roa
File: noGLha3b1o6i_VmrdOLzbta2nPQ.roa (raw, json)
Hash identifier: i/QaiXI3aq1q4peFS0rXMk9qtbnjsMqMr1v4AKsuMVY=
Subject key identifier: 9E:81:8B:85:AD:DB:D6:8E:A2:FD:59:AB:74:E2:F3:6E:D6:B6:9C:F4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 3D886C3B
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/noGLha3b1o6i_VmrdOLzbta2nPQ.roa
Signing time: Sat 01 Jan 2022 11:57:43 +0000
ROA not before: Sat 01 Jan 2022 11:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 192.129.28.0/23 maxlen: 23
192.129.31.0/24 maxlen: 24
192.129.26.0/23 maxlen: 23
141.39.0.0/16 maxlen: 16
195.37.0.0/16 maxlen: 16
192.76.176.0/24 maxlen: 24
193.174.0.0/15 maxlen: 15
194.94.0.0/15 maxlen: 15
188.1.0.0/16 maxlen: 16
212.201.0.0/16 maxlen: 16
2001:638::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032350779 (0x3d886c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jan 1 11:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e818b85addbd68ea2fd59ab74e2f36ed6b69cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:3b:9f:a9:5c:ad:ed:29:55:1d:0c:c7:6e:
76:68:f6:bd:30:e3:3e:fa:d3:17:1f:5a:d9:62:3a:
34:b0:40:16:93:35:8f:7a:08:94:d1:25:e7:7a:58:
7a:b2:17:51:b2:12:a7:d7:f3:a4:31:0a:7e:54:dd:
f9:fb:66:c8:d9:fa:ab:a5:a5:78:b5:20:35:d2:21:
34:40:ee:00:0c:94:72:26:c3:da:6b:66:55:56:1e:
3c:75:8d:da:f3:c0:67:b6:a1:e5:bb:11:ae:d1:3d:
2c:c9:04:71:3a:7b:19:91:05:40:9d:a8:28:e7:1b:
cf:37:79:ef:74:05:24:c3:ba:10:14:fc:3c:10:71:
e0:cf:3e:1e:20:c6:81:8b:0a:9c:56:9e:31:e9:ca:
c8:fe:5b:55:b7:f5:0f:29:c8:c8:7d:0a:ac:9c:f4:
00:6c:b8:34:2c:80:bb:ab:6b:1e:67:55:94:64:47:
28:c6:45:c4:24:2b:9e:aa:74:df:da:b4:00:22:c1:
b5:2d:40:ca:fb:d4:a7:21:42:15:31:91:de:2f:27:
72:3d:fc:81:76:03:b8:a3:83:3d:32:be:8f:4a:f9:
af:92:de:6c:6c:c7:ef:40:e3:98:67:4f:ec:3b:45:
68:13:cb:32:83:5f:44:0f:3d:43:ee:44:9b:2d:58:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:8B:85:AD:DB:D6:8E:A2:FD:59:AB:74:E2:F3:6E:D6:B6:9C:F4
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/noGLha3b1o6i_VmrdOLzbta2nPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.39.0.0/16
188.1.0.0/16
192.76.176.0/24
192.129.26.0-192.129.29.255
192.129.31.0/24
193.174.0.0/15
194.94.0.0/15
195.37.0.0/16
212.201.0.0/16
IPv6:
2001:638::/32
Signature Algorithm: sha256WithRSAEncryption
90:a5:71:a7:c1:48:33:a8:54:13:eb:35:a4:0d:d9:15:57:0a:
91:75:0d:19:9c:4b:ac:b7:a9:73:f7:f8:53:10:14:d5:bb:74:
60:bb:d0:64:34:61:cf:5c:94:c4:ba:df:59:aa:17:e4:c5:4f:
96:c3:72:af:41:e5:13:b2:a2:2b:3e:f0:6c:c1:6b:5b:41:e9:
83:14:57:bb:c9:2b:59:09:51:d1:ba:08:8d:54:42:5e:56:52:
92:3a:0b:50:8a:5a:1d:ab:80:96:d1:15:13:b6:b2:66:8a:dd:
27:05:e6:3e:e8:0c:d2:3c:56:a1:85:60:31:ce:64:04:b8:b5:
71:ac:15:c0:b5:d9:ad:fc:76:3e:6e:be:cf:f9:53:da:35:ee:
e3:39:8b:84:0a:2b:1b:e3:33:3d:4a:8b:c9:97:eb:15:1a:47:
0f:93:73:84:7e:64:c6:85:ae:1b:7a:7a:97:10:ed:cd:62:b9:
15:ec:62:e8:b4:31:26:db:fe:37:ef:44:ea:ab:e1:95:ad:87:
5c:05:ce:7c:44:dd:32:f7:0a:cb:3e:56:f8:f2:d7:ac:4a:f3:
aa:ed:54:1a:e3:e2:6f:6f:7e:36:25:f9:fb:0f:49:63:fd:e0:
4d:68:71:89:ed:6a:58:d5:3a:5c:5e:aa:67:4b:8f:a1:8e:2a:
15:4b:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net