Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/vsqou56vjA2xhDA5BIiJ97wDs-8.roa
File: vsqou56vjA2xhDA5BIiJ97wDs-8.roa (raw, json)
Hash identifier: tzRFHLZpQe90yOaXj91PI0nsGAGvBEKlUtujO68G9ZI=
Subject key identifier: BE:CA:A8:BB:9E:AF:8C:0D:B1:84:30:39:04:88:89:F7:BC:03:B3:EF
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 09A9E2C2
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/vsqou56vjA2xhDA5BIiJ97wDs-8.roa
Signing time: Sat 01 Jan 2022 15:07:34 +0000
ROA not before: Sat 01 Jan 2022 15:07:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62412
IP address blocks: 188.214.242.0/23 maxlen: 24
139.28.228.0/22 maxlen: 24
185.184.88.0/22 maxlen: 24
185.36.210.0/23 maxlen: 24
2a0f:5900::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162128578 (0x9a9e2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Jan 1 15:07:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=becaa8bb9eaf8c0db1843039048889f7bc03b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:d9:67:35:02:3a:d2:63:90:e1:af:c0:e2:
a4:0a:33:3e:97:7f:21:8c:22:0a:0c:0b:39:57:6d:
05:4a:79:6d:6b:49:bb:a9:c7:c3:03:91:e4:8f:09:
8f:3c:97:05:b0:41:5e:fe:f6:2f:62:b3:d0:3d:4e:
33:b4:4f:62:38:3a:cd:5d:94:ca:1c:2c:89:10:64:
8f:36:0e:4f:61:36:ff:14:5e:44:69:65:ff:49:ad:
21:1b:8f:a6:25:a5:a6:1e:9b:6b:c9:44:56:d0:63:
25:1d:db:f5:65:4d:58:c4:c6:12:73:16:c2:12:03:
95:05:c5:28:b3:0e:5b:40:41:e0:2a:8b:47:95:f3:
3d:90:04:50:05:4e:50:31:6f:7c:5a:f2:37:f5:6d:
89:13:64:c6:49:3f:46:fe:5b:f8:2a:c2:e9:21:3b:
f6:f3:5a:ae:08:20:15:14:54:eb:bd:46:31:75:60:
64:c8:a6:24:a0:f2:d6:f9:79:9f:57:c5:b4:58:1e:
86:95:b6:d1:83:8b:0c:49:71:3f:fa:8c:36:24:83:
96:00:28:b9:bd:fc:39:92:30:b5:7c:57:3e:74:a8:
63:44:64:ca:4e:9c:27:91:6f:de:64:2b:7a:8b:59:
f3:66:bf:a5:4b:53:69:d3:8d:72:1b:cd:83:3f:22:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:A8:BB:9E:AF:8C:0D:B1:84:30:39:04:88:89:F7:BC:03:B3:EF
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/vsqou56vjA2xhDA5BIiJ97wDs-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.228.0/22
185.36.210.0/23
185.184.88.0/22
188.214.242.0/23
IPv6:
2a0f:5900::/29
Signature Algorithm: sha256WithRSAEncryption
83:5b:61:b7:1b:34:89:e3:a5:ab:7a:29:98:92:e7:5a:f1:59:
04:b9:61:e6:1c:7f:fa:45:7c:0a:3c:fc:dd:95:f7:9a:b0:96:
fb:ac:0a:24:a0:5b:45:4c:ff:31:79:a7:ee:89:8a:e1:77:ad:
1a:d7:8c:16:bb:3e:a4:4e:17:84:e1:52:16:fd:5e:73:7b:8b:
82:72:15:f1:10:57:a1:b6:5d:8c:41:9e:d1:95:57:e7:61:24:
e5:eb:79:38:6f:01:9d:e8:9d:26:3c:4e:0c:93:0a:c4:bf:97:
6b:ab:f7:db:3c:e7:09:ac:b0:60:06:21:0e:99:5c:95:95:56:
8c:80:3f:0e:3d:fb:7b:e1:73:eb:34:74:5c:50:28:70:ac:d9:
d3:01:de:75:20:e8:a7:3f:ea:43:65:a5:66:ba:53:b1:a1:94:
d4:11:1b:13:ce:e4:82:f0:90:bd:46:c6:3e:81:67:48:92:61:
f0:b3:4c:52:c0:e3:f2:00:c0:65:b2:14:d6:63:c4:47:15:a5:
8a:1a:19:48:15:e9:3a:1e:32:08:c9:48:69:da:f9:40:a9:e8:
4e:f0:16:f5:b8:12:04:05:34:78:fc:b3:38:8e:ee:3e:af:5a:
14:48:ee:6f:4c:12:cd:c8:89:e7:14:38:f5:a5:25:18:13:03:
60:4d:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net