Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/m24inbEpPpJLqn8IVXWqi7TWmi8.roa
File: m24inbEpPpJLqn8IVXWqi7TWmi8.roa (raw, json)
Hash identifier: div74xePJJNiQpNBwH9xY/i1mldDDH47bbd8NJK8DmE=
Subject key identifier: 9B:6E:22:9D:B1:29:3E:92:4B:AA:7F:08:55:75:AA:8B:B4:D6:9A:2F
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 08FF5AAE
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/m24inbEpPpJLqn8IVXWqi7TWmi8.roa
Signing time: Sat 01 Jan 2022 09:06:26 +0000
ROA not before: Sat 01 Jan 2022 09:06:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56567
IP address blocks: 185.114.148.0/22 maxlen: 22
185.220.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150952622 (0x8ff5aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jan 1 09:06:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b6e229db1293e924baa7f085575aa8bb4d69a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:8f:99:b8:cf:40:9e:aa:d9:2b:64:76:50:
bd:b7:83:f5:31:7e:76:bd:4a:ae:80:32:e7:ab:36:
2c:bd:1c:83:af:58:ce:e6:b8:1c:ea:7a:73:34:55:
45:12:6d:cc:63:2f:f4:f8:3c:77:8f:3d:98:76:80:
ac:7a:40:ad:6a:d5:66:ac:7e:1f:46:72:29:65:93:
b6:b5:e5:19:f4:86:2f:59:d2:29:50:b1:04:d3:06:
c2:e7:15:50:66:6a:97:59:26:06:55:45:d5:66:f8:
af:12:67:e4:1f:5a:ad:25:5c:8c:77:72:59:38:7b:
69:84:cc:aa:86:40:8d:70:7a:4a:ca:23:71:1b:4d:
75:f0:44:1c:64:1b:64:8a:01:d3:40:a1:30:25:b3:
04:3c:3c:bb:67:c0:f1:64:f6:33:09:08:ef:dd:59:
6f:8d:44:a7:3b:47:af:14:45:0a:13:03:8c:58:36:
83:26:0b:00:c9:d6:5a:6d:36:8b:3d:ae:e5:e9:a9:
db:a7:20:fd:7c:ac:a9:25:30:05:27:02:11:e5:e3:
c4:7b:e5:eb:a0:54:cf:5d:ec:a5:a0:e3:f2:aa:4d:
49:db:82:73:d0:1a:a6:8e:51:e0:83:81:05:b7:4c:
a0:6c:94:e7:23:90:b1:ae:e3:b7:7f:b7:81:e8:1a:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:22:9D:B1:29:3E:92:4B:AA:7F:08:55:75:AA:8B:B4:D6:9A:2F
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/m24inbEpPpJLqn8IVXWqi7TWmi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.148.0/22
185.220.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c0:e9:69:0e:47:d2:59:04:f1:8c:91:93:a8:1b:01:38:d5:
01:52:4e:b1:2f:0f:36:37:ea:f7:58:07:50:32:1b:3d:18:dd:
10:6b:7c:1a:6f:ba:c7:8c:f9:6f:71:96:00:4f:2a:5e:90:e0:
8b:dd:de:f0:c0:ab:07:3f:c1:c7:14:b9:3b:a9:74:d8:b1:9b:
3e:aa:11:52:31:b8:72:7b:ae:e0:ca:42:79:cc:f9:d5:73:fc:
0c:81:33:1c:30:2b:a0:64:a6:4b:c1:9f:a6:2a:cb:f4:0c:b5:
e8:c3:92:a1:d2:25:81:26:fc:5f:97:42:20:8d:80:ec:21:ba:
57:35:0b:d5:84:dc:08:a7:75:1a:f2:03:4b:7a:fc:86:90:22:
3c:72:e0:16:b2:44:a3:e5:9e:24:45:9d:89:08:79:c9:04:7b:
87:bb:04:c6:1d:62:51:02:6b:5e:40:e5:08:0c:80:87:09:1e:
cd:8f:31:e0:72:67:c7:7d:3d:c7:fb:fe:bc:44:71:04:e1:68:
88:d1:a0:3e:b5:66:60:e8:21:6b:7a:8e:af:9a:58:8d:e2:37:
88:6a:a0:f5:ee:56:31:d1:8a:a8:62:f4:a4:fe:30:20:01:eb:
1c:b1:c7:79:74:b9:59:b2:6c:05:c0:62:0f:7c:23:a0:75:6d:
8b:c1:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net