Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/YEpFaPLUris-UCipt-mlBLloRvA.roa
File: YEpFaPLUris-UCipt-mlBLloRvA.roa (raw, json)
Hash identifier: DRMRRe1kBZoHKSuf3b53H2tG1nSriVKvSOOdXF35F6Q=
Subject key identifier: 60:4A:45:68:F2:D4:AE:2B:3E:50:28:A9:B7:E9:A5:04:B9:68:46:F0
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: CFEB65
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/YEpFaPLUris-UCipt-mlBLloRvA.roa
Signing time: Sat 01 Jan 2022 04:53:43 +0000
ROA not before: Sat 01 Jan 2022 04:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202269
IP address blocks: 185.208.172.0/24 maxlen: 24
185.208.173.0/24 maxlen: 24
185.110.191.0/24 maxlen: 24
185.110.188.0/24 maxlen: 24
185.110.190.0/24 maxlen: 24
185.110.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13626213 (0xcfeb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jan 1 04:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=604a4568f2d4ae2b3e5028a9b7e9a504b96846f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:6d:29:ea:58:d4:3b:34:e3:c7:e6:96:e7:
de:b2:de:c1:04:c3:12:08:67:b3:fd:c5:3c:dc:82:
dc:46:67:7e:21:a9:cc:70:f7:4d:d5:0d:d1:2e:58:
17:4f:3e:64:de:11:e2:5a:ed:f3:ae:27:af:65:8d:
63:cb:1e:a5:31:5c:d7:5a:fa:63:02:c2:cd:63:88:
70:b2:18:7c:64:f3:b7:d2:2c:77:a4:30:fc:52:70:
66:cf:6d:7c:5a:2e:14:2c:59:15:01:87:67:31:61:
a6:be:c6:b8:5d:eb:43:c6:31:b4:9f:55:65:80:2b:
ca:96:ca:b3:34:09:3d:49:10:5d:e2:da:26:8f:83:
a6:b0:e7:be:a7:85:74:9d:ab:4b:15:a2:af:91:a9:
03:14:dc:0f:1f:f3:02:e2:26:f6:50:81:96:1c:c3:
a0:5f:63:82:cd:d8:d2:8e:4a:15:87:c8:d0:12:2d:
b2:e4:95:c9:06:39:64:63:41:e7:37:9f:0d:a3:5c:
fb:45:5b:25:02:d5:8c:9c:b6:c8:5a:e7:eb:86:1f:
54:5b:3c:ed:64:e9:1a:df:14:9b:cf:2a:4f:fa:8c:
36:5a:d8:84:1b:76:c9:9b:6b:c6:7c:7d:96:97:f5:
44:76:f3:4d:92:d6:23:32:6c:a5:9c:b9:a5:72:97:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:45:68:F2:D4:AE:2B:3E:50:28:A9:B7:E9:A5:04:B9:68:46:F0
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/YEpFaPLUris-UCipt-mlBLloRvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.188.0/22
185.208.172.0/23
Signature Algorithm: sha256WithRSAEncryption
67:19:bc:9e:72:fe:3d:c8:d6:15:95:63:e3:39:2e:df:3e:44:
ff:2d:c0:75:73:23:fb:0a:4a:e6:9f:b5:7b:d1:86:80:27:fd:
75:79:75:ea:3d:37:16:aa:dc:e0:6e:dd:74:96:a5:1d:94:56:
49:96:72:2f:26:d0:77:0b:55:84:ae:b5:41:22:1b:e2:1c:e8:
d0:3e:3e:b1:dd:f4:31:81:8e:f2:d8:68:17:1f:34:c3:90:2b:
3e:f5:5a:cf:d2:ad:21:26:75:08:ab:61:00:8d:48:7d:92:54:
67:11:08:2f:0b:d4:8b:5e:be:4d:9c:0c:36:da:39:ec:0b:a7:
42:6b:da:2c:00:62:43:64:61:af:37:75:63:ea:69:12:82:ab:
21:e5:70:76:37:a4:af:01:cc:29:f9:98:41:54:4a:5a:fb:bf:
a5:b1:2c:95:c4:c6:d4:63:1d:75:b8:05:fa:41:6a:ba:4c:4a:
c9:a0:bf:99:d9:af:16:e2:00:47:e3:b2:17:13:a3:31:4b:64:
2a:f2:63:de:1b:b2:8a:3c:c9:6e:04:7e:b4:f7:8b:9a:5f:66:
07:4b:6d:a9:01:35:21:cb:d1:5b:18:3d:b6:f4:bf:0e:a8:13:
14:a8:22:c2:d2:62:13:6e:5b:09:28:5e:eb:21:4a:f1:10:00:
b8:79:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:11 2023 by rpki-client on console.sobornost.net