Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/ClAzVRfbql6pfxGQrZLueanEBfY.roa
File: ClAzVRfbql6pfxGQrZLueanEBfY.roa (raw, json)
Hash identifier: uDmavU60mvXwJt8iCj09mCwUNdZnBiyiFCaRwxyZaLw=
Subject key identifier: 0A:50:33:55:17:DB:AA:5E:A9:7F:11:90:AD:92:EE:79:A9:C4:05:F6
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 0FA5A5EF
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/ClAzVRfbql6pfxGQrZLueanEBfY.roa
Signing time: Sat 01 Jan 2022 03:00:16 +0000
ROA not before: Sat 01 Jan 2022 03:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206374
IP address blocks: 185.188.132.0/24 maxlen: 24
185.188.133.0/24 maxlen: 24
2a0b:c480::/32 maxlen: 38
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262514159 (0xfa5a5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Jan 1 03:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a50335517dbaa5ea97f1190ad92ee79a9c405f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:71:a6:51:dd:c2:70:3a:9e:74:c1:4f:03:
00:fe:21:11:08:79:34:80:5f:a6:50:21:31:e2:de:
64:7d:18:6b:40:78:a4:c2:be:ed:59:43:64:91:16:
00:9a:ba:95:25:b1:1d:4f:0a:58:7b:ef:1a:e4:07:
e0:e0:23:8a:37:53:54:92:52:b1:23:6c:7e:53:eb:
ca:80:12:1c:a1:45:a3:03:28:5a:ee:79:65:46:98:
5d:88:a4:94:6f:88:5c:0b:c6:d5:68:59:26:3a:fa:
c6:93:7e:fe:2c:23:bf:6f:07:37:5b:b5:bb:04:83:
2f:be:13:87:48:7f:02:c4:39:ce:92:31:5a:6b:cc:
8b:50:03:92:dd:17:3d:96:75:40:4e:ab:00:78:3e:
15:ea:04:e1:7c:53:80:95:13:48:22:32:47:c0:c0:
fe:94:bc:58:32:40:c4:b7:c3:8d:bd:8e:e5:cb:d5:
67:de:b5:1b:80:1a:8c:35:61:0f:6d:46:82:86:56:
6b:86:84:60:9a:5e:99:ef:0c:a6:e9:bb:01:95:ba:
d5:60:a0:1c:67:fa:98:95:ea:06:36:94:e9:e1:c2:
d2:ce:4c:b0:0c:9e:9b:86:4c:c6:84:d3:81:0f:2f:
66:bc:82:32:8b:51:4d:ed:d4:85:35:07:48:b4:c1:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:50:33:55:17:DB:AA:5E:A9:7F:11:90:AD:92:EE:79:A9:C4:05:F6
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/ClAzVRfbql6pfxGQrZLueanEBfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.132.0/23
IPv6:
2a0b:c480::/32
Signature Algorithm: sha256WithRSAEncryption
7b:16:ba:78:70:35:7e:ca:10:0b:3b:e9:58:b3:05:b3:e9:60:
0b:63:4c:43:13:9f:c9:21:8f:12:08:d2:9b:ea:4c:8a:84:ee:
4a:d8:85:19:d7:80:a8:80:85:62:88:c0:cd:1a:24:b4:f8:4b:
e3:76:ac:4c:ae:50:a6:b6:60:99:8d:7e:36:30:e6:fc:b6:09:
6f:3b:e5:db:34:0c:7b:f6:d1:7f:42:8c:dd:1f:06:8e:44:e6:
be:60:34:0b:8d:03:d6:ea:c0:21:2c:0d:72:ff:61:45:89:a9:
4d:21:ea:03:9f:70:5d:3a:74:df:7f:6f:82:47:f4:1c:6d:97:
d5:b2:1f:84:5c:4a:cd:35:52:d5:35:3b:7b:ac:25:9a:19:b9:
6b:51:93:f0:84:05:c2:48:bd:49:7f:e7:5f:49:72:f7:9d:4c:
83:25:1e:ee:f1:e8:9d:4e:36:b0:ae:63:6b:c0:08:9e:fb:27:
98:27:ae:2a:e2:11:e6:c2:48:4f:d1:25:f0:07:19:4c:70:d7:
27:1a:b2:0e:16:e6:21:e5:8b:e3:24:51:81:a0:76:39:a2:1f:
a7:09:ac:56:9f:f8:c6:52:ef:b4:ae:38:c4:9f:53:5a:9c:17:
50:0b:26:86:fa:90:d7:e2:ae:69:89:a4:39:13:89:f9:51:8b:
cc:d7:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:54 2023 by rpki-client on console.sobornost.net