Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/kX79pTnBBFGmvCe5O_4kZYVUYTc.roa
File: kX79pTnBBFGmvCe5O_4kZYVUYTc.roa (raw, json)
Hash identifier: twXcD2mvDdwlSFzms1vcxw0KCetptjRXRFT4pBnfX7k=
Subject key identifier: 91:7E:FD:A5:39:C1:04:51:A6:BC:27:B9:3B:FE:24:65:85:54:61:37
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0184EC656B7A2C5ACDF7A124F1A3421C1965
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/kX79pTnBBFGmvCe5O_4kZYVUYTc.roa
Signing time: Wed 07 Dec 2022 11:43:00 +0000
ROA not before: Wed 07 Dec 2022 11:43:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196798
IP address blocks: 185.110.208.0/22 maxlen: 22
188.94.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:65:6b:7a:2c:5a:cd:f7:a1:24:f1:a3:42:1c:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Dec 7 11:43:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=917efda539c10451a6bc27b93bfe246585546137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:b4:e1:8e:62:b6:90:e3:0f:47:8c:91:0e:
92:4e:cf:47:d1:43:15:51:38:ba:8e:da:c2:c7:83:
86:1d:e6:7c:4e:eb:9a:0d:53:a2:92:df:5a:bf:f2:
5b:58:05:6c:c5:f2:85:fa:0f:dc:d4:2c:f8:10:92:
02:80:14:9d:6e:74:09:d3:15:74:83:11:48:2c:bc:
94:cd:78:c1:42:ba:49:2b:fd:cb:fd:35:fc:e7:f2:
34:76:c3:95:c2:a5:97:46:8e:22:c8:d6:14:1e:04:
2e:91:b2:62:77:11:c4:ae:f7:98:9e:14:06:e4:f7:
6b:c9:dd:6f:b4:75:99:cb:2a:91:c4:5d:f0:00:e1:
0a:fd:d3:47:22:39:98:a3:e6:d0:c1:4d:00:57:f9:
ea:84:37:c5:7f:98:c1:b2:c7:7d:50:a0:2b:00:c0:
7f:5e:b5:5e:6a:a6:9e:b5:6c:bb:87:a8:e0:55:ca:
8e:1d:00:a4:91:b6:3a:e9:44:88:8a:43:f1:74:1c:
0e:a9:5c:e0:cd:df:63:f2:7c:bb:c6:b8:85:0a:e5:
fc:79:53:5b:64:57:2a:7b:65:f3:23:ef:61:74:5d:
92:d5:3a:5c:bb:ee:ef:53:61:19:12:06:87:ad:a0:
68:e0:87:c7:b7:35:1b:e6:09:c8:bc:cc:84:d0:b7:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7E:FD:A5:39:C1:04:51:A6:BC:27:B9:3B:FE:24:65:85:54:61:37
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/kX79pTnBBFGmvCe5O_4kZYVUYTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.208.0/22
188.94.224.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:45:3e:82:ba:68:b0:c6:ce:5b:73:9e:9a:29:2b:dc:19:25:
e1:57:4c:f5:62:69:00:07:46:32:6f:6a:f8:f3:a9:3b:c5:57:
a9:9f:e1:ef:9a:4f:87:51:8a:90:fd:98:b8:31:81:1a:4b:ff:
24:4a:66:d1:1e:77:50:a3:f3:0e:e1:10:01:5f:f7:e3:71:09:
7e:8d:cf:d3:56:78:64:0a:f6:b3:90:01:eb:4e:73:29:75:47:
18:e5:07:4c:e7:4a:c6:49:3c:07:bf:85:9f:f4:8c:11:58:e9:
5c:cb:e1:71:b5:e6:6a:d5:1c:15:98:be:8c:86:12:ab:28:dd:
20:d1:c6:66:43:4b:ab:24:6c:e6:16:0e:27:74:a8:96:32:99:
b0:8f:67:21:69:ba:df:53:83:d1:01:de:c6:4f:06:bb:05:35:
5e:25:14:f1:b4:6f:d3:12:9b:4b:76:f6:80:5c:fa:7d:be:5b:
dd:57:60:6f:37:07:fd:b7:78:9e:ef:a4:b4:e8:68:50:1b:44:
1f:00:57:4f:c0:25:c0:2f:dd:0c:44:95:f6:9b:d3:7a:72:b5:
09:02:09:4f:9a:20:c2:cb:89:84:c1:28:21:86:2d:f5:aa:34:
78:b9:a9:59:c2:0a:5c:98:93:c4:61:31:8c:08:20:01:62:62:
ea:83:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:50 2023 by rpki-client on console.sobornost.net