Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/uP77bOyQKI4wZyZB4KQZmQE-WnM.roa
File: uP77bOyQKI4wZyZB4KQZmQE-WnM.roa (raw, json)
Hash identifier: Iys7V8eiOpI4YECPvqa+QK8l1O6DHKUFbTS2GsOOyLs=
Subject key identifier: B8:FE:FB:6C:EC:90:28:8E:30:67:26:41:E0:A4:19:99:01:3E:5A:73
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 0CFE1573
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/uP77bOyQKI4wZyZB4KQZmQE-WnM.roa
Signing time: Sat 01 Jan 2022 09:57:42 +0000
ROA not before: Sat 01 Jan 2022 09:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49560
IP address blocks: 92.51.56.0/21 maxlen: 21
94.103.0.0/22 maxlen: 22
185.50.4.0/22 maxlen: 22
213.5.20.0/22 maxlen: 22
84.234.48.0/20 maxlen: 20
91.238.12.0/22 maxlen: 22
2a01:a320::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217978227 (0xcfe1573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Jan 1 09:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8fefb6cec90288e30672641e0a41999013e5a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:7f:c0:ca:ec:ca:72:22:9e:49:20:f7:a6:
4b:b6:f1:4e:c6:5f:d4:3c:59:a7:51:ea:24:ee:d9:
cb:23:c8:54:f2:77:2b:35:af:22:c4:61:f4:5b:f8:
c3:c4:57:13:c4:fd:ec:9b:a1:f4:ee:32:8f:c4:35:
29:ca:5a:84:cd:32:5a:da:03:ed:e5:3a:d1:fa:9e:
8f:1d:d1:43:ac:87:32:ac:09:6f:7d:bb:32:1c:22:
31:27:6d:15:a3:ce:44:29:02:88:cc:1f:33:1c:3e:
ed:da:fb:4e:1a:75:df:49:b9:42:fa:87:8e:0f:66:
4b:7f:ae:10:1c:82:95:b6:7f:7f:1f:ac:ae:70:e4:
79:cb:05:e8:9b:41:54:27:bb:ff:e2:21:d8:e5:54:
65:55:ab:0c:c4:67:57:a4:f7:af:12:a3:70:f2:4f:
44:06:ad:fd:83:2b:01:5e:ca:93:6a:85:88:06:37:
8e:59:b0:5d:2d:8d:43:95:5a:f2:4b:f0:87:b6:10:
25:7a:4b:6f:f1:7c:ed:24:fe:91:ec:97:df:1e:c6:
08:d4:46:82:34:4c:79:ed:a8:26:64:04:53:83:9f:
05:7b:48:03:1b:54:e0:a4:bc:74:ef:0b:ff:aa:46:
cd:49:90:fa:e0:f9:38:31:14:da:6a:5a:45:06:c5:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:FB:6C:EC:90:28:8E:30:67:26:41:E0:A4:19:99:01:3E:5A:73
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/uP77bOyQKI4wZyZB4KQZmQE-WnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.48.0/20
91.238.12.0/22
92.51.56.0/21
94.103.0.0/22
185.50.4.0/22
213.5.20.0/22
IPv6:
2a01:a320::/32
Signature Algorithm: sha256WithRSAEncryption
15:f5:30:33:84:33:e4:8e:75:25:6d:ef:79:cf:84:71:2f:a1:
e3:1e:ba:f4:1c:50:fd:a3:50:14:e8:2e:ab:47:e5:89:13:07:
af:85:6d:e9:55:4f:e7:0b:4d:25:22:4b:33:6b:eb:4f:b7:dd:
24:e3:77:95:21:1e:9d:24:b3:cd:8b:e2:0d:69:29:52:9e:5a:
35:d6:0d:2a:4f:42:6a:e0:5e:15:2f:18:e1:0e:22:d2:8b:c2:
f2:a3:5a:27:36:35:ef:a1:99:5b:6c:a6:95:af:c3:b2:d5:8a:
d5:49:e7:96:c2:67:48:09:42:67:2e:e6:d4:9e:81:d6:33:a9:
f7:10:99:81:2e:10:36:9f:58:49:1a:f8:b4:bd:cb:ed:5d:43:
4c:81:84:19:dd:28:7d:66:9c:8e:4b:91:b3:77:75:d5:06:bc:
df:12:97:b5:35:a8:03:53:22:77:82:85:52:ce:af:db:7b:22:
27:d2:06:63:10:84:5a:4c:25:8d:74:da:a9:37:fb:27:2c:75:
7a:e0:e9:c6:af:a0:2e:9c:dd:a0:3f:ac:94:be:51:88:2c:7d:
ab:33:eb:b1:2f:1f:a9:9e:22:4b:6f:bb:49:e0:b9:5f:ea:6d:
ee:0b:9b:af:bf:f4:df:97:f4:39:dd:76:cc:7b:69:f0:bc:ff:
4b:1c:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:57 2023 by rpki-client on console.sobornost.net