Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/1EFYqgbaSHw9_NWDLHUiM5jo3kw.roa
File: 1EFYqgbaSHw9_NWDLHUiM5jo3kw.roa (raw, json)
Hash identifier: OG0KhNOF/Kz1Fy7kQHyqSbG+oRmMCFH5AeGpwfaAVlw=
Subject key identifier: D4:41:58:AA:06:DA:48:7C:3D:FC:D5:83:2C:75:22:33:98:E8:DE:4C
Certificate issuer: /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial: 0182B344A19E23997FC88E288C2951C97E7C
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/1EFYqgbaSHw9_NWDLHUiM5jo3kw.roa
Signing time: Thu 18 Aug 2022 23:23:15 +0000
ROA not before: Thu 18 Aug 2022 23:23:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47374
IP address blocks: 185.219.69.0/24 maxlen: 24
185.219.68.0/22 maxlen: 22
185.219.68.0/24 maxlen: 24
185.219.71.0/24 maxlen: 24
185.219.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b3:44:a1:9e:23:99:7f:c8:8e:28:8c:29:51:c9:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Validity
Not Before: Aug 18 23:23:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d44158aa06da487c3dfcd5832c75223398e8de4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:8c:e8:ff:ea:05:4e:c0:bf:b2:f7:3b:2b:
e0:85:d6:82:5f:96:60:c8:36:7e:fa:c9:ab:84:47:
89:47:c1:f6:75:31:f9:f5:5d:2a:91:d4:e9:30:30:
7a:18:59:a7:f4:c0:fd:34:88:ee:07:02:93:dd:7c:
6b:f5:f3:dd:37:89:b2:ef:3e:ef:9b:e6:76:c1:68:
92:d1:cd:ef:5b:bb:b7:e4:2d:41:22:a8:33:43:89:
87:28:8e:af:90:65:d9:6f:fd:3b:4b:44:f0:1a:c8:
b2:be:62:83:c6:d9:58:3a:4f:48:74:50:a0:fc:30:
e3:53:52:c2:46:54:98:85:fc:44:f3:35:d8:41:ca:
3a:02:0b:d3:dd:d5:52:26:c4:cd:c6:14:0b:3d:98:
0e:bf:39:ac:5c:97:1e:f1:39:46:0b:55:a4:47:5f:
50:ca:89:bc:cf:1c:bf:db:ae:cc:ac:c2:89:cc:51:
6d:95:bd:59:47:a8:52:df:71:51:64:41:84:1a:4f:
71:46:e5:ac:e7:b4:0f:b0:e8:f2:3f:a6:a4:1b:54:
1d:d4:92:63:c7:e1:70:2c:e3:2d:3f:55:05:b2:c5:
e9:c9:4e:89:58:00:33:24:66:c9:2f:df:ec:e1:61:
03:2e:00:2e:c7:fa:4f:a6:d1:98:6d:b1:c1:cd:ce:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:58:AA:06:DA:48:7C:3D:FC:D5:83:2C:75:22:33:98:E8:DE:4C
X509v3 Authority Key Identifier:
keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/1EFYqgbaSHw9_NWDLHUiM5jo3kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.68.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:98:8a:f4:06:4a:59:37:ce:4a:93:4c:ff:7e:0b:53:57:9d:
7a:4e:2f:a6:56:f0:a8:10:5d:a2:4b:7f:c1:77:c0:f7:71:31:
51:73:a5:76:42:55:ab:c0:ad:b2:45:ba:e7:95:6f:23:26:b8:
c6:45:c6:03:a9:c5:5f:3d:5e:40:fb:fe:8d:fd:a9:76:a7:d5:
71:4a:e8:0b:4b:92:f1:17:87:ae:16:63:51:10:1f:b7:c9:f0:
f2:c3:ff:0e:7b:96:93:61:39:e6:64:be:70:3e:77:9b:8b:e3:
d5:d2:94:c0:64:6d:ea:f9:88:f8:be:a6:12:33:20:94:6f:5f:
db:6c:be:17:69:df:a4:6b:23:5c:b8:d1:03:e3:62:75:c4:a4:
ca:a6:89:89:e8:9f:4d:4c:3c:9d:3b:40:e4:72:4c:eb:ae:b4:
f6:14:ff:6d:21:fa:78:b2:85:f2:ba:ff:96:13:44:91:ec:88:
ef:9c:33:18:26:c0:bf:50:12:40:df:46:66:fb:fc:00:4e:c3:
5c:5a:aa:a0:63:80:33:6e:1e:6e:36:75:ed:b8:47:c7:28:d7:
8b:c8:89:0c:80:15:f9:16:59:e0:b7:0b:f3:ba:09:73:52:88:
a7:9e:87:68:f1:e9:cc:fa:50:14:83:8b:6e:11:2b:51:90:82:
6b:96:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:58 2023 by rpki-client on console.sobornost.net