Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/WJ6CF_NloJIqonh2hP-SE3VZYAw.roa
File: WJ6CF_NloJIqonh2hP-SE3VZYAw.roa (raw, json)
Hash identifier: fbA4Ajn9Nk5Uwy6w2Ffa1q2mIN1Dx8AEKoup3gaLpZc=
Subject key identifier: 58:9E:82:17:F3:65:A0:92:2A:A2:78:76:84:FF:92:13:75:59:60:0C
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 1768A620
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/WJ6CF_NloJIqonh2hP-SE3VZYAw.roa
Signing time: Sat 01 Jan 2022 02:51:35 +0000
ROA not before: Sat 01 Jan 2022 02:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201595
IP address blocks: 185.58.212.0/24 maxlen: 24
185.58.213.0/24 maxlen: 24
185.58.215.0/24 maxlen: 24
185.58.214.0/24 maxlen: 24
185.130.160.0/24 maxlen: 24
185.130.163.0/24 maxlen: 24
185.130.161.0/24 maxlen: 24
185.130.162.0/24 maxlen: 24
2a04:e200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392734240 (0x1768a620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Jan 1 02:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=589e8217f365a0922aa2787684ff92137559600c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:ce:05:de:34:5f:76:f5:2e:d1:8f:35:59:
c9:af:c1:26:db:a5:e8:3e:35:1b:65:06:1d:7f:f7:
f4:a3:aa:eb:8f:a2:7a:7e:ef:a9:d0:ac:b6:6d:3c:
bf:9a:8e:f1:51:d0:3e:2e:43:48:22:ef:d5:11:fa:
25:95:4a:8f:20:0f:a6:1f:d8:d7:3a:cc:9d:bb:17:
76:62:ff:af:ed:69:b8:5a:7f:d5:90:c2:1e:28:27:
e6:55:95:9d:23:37:75:49:3d:2d:c4:ed:76:df:e5:
ea:62:6e:69:69:73:dc:2f:91:fa:9f:38:9d:9c:9c:
2c:74:4e:3d:81:e4:d0:4f:f4:56:51:40:e3:5d:9d:
33:d6:3a:8a:6f:7f:a5:9f:ed:6e:94:68:d2:f0:f9:
2d:60:df:89:e5:55:57:f5:17:b9:89:58:be:fc:12:
e2:97:0b:9a:f1:12:eb:9d:a8:e9:83:e0:72:f4:21:
81:9e:4e:b4:23:3e:1e:f5:04:fc:27:73:c6:26:f5:
86:a0:a5:4c:0f:93:7c:4e:e5:12:d9:16:87:45:a4:
67:ad:b6:b5:50:18:5e:2e:ed:f2:22:f4:6c:72:40:
55:37:da:e8:e5:1b:88:9f:2a:fe:16:bd:56:74:66:
9b:07:1a:c8:3b:d9:69:70:c6:c7:77:4a:5a:f8:3c:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:82:17:F3:65:A0:92:2A:A2:78:76:84:FF:92:13:75:59:60:0C
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/WJ6CF_NloJIqonh2hP-SE3VZYAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.212.0/22
185.130.160.0/22
IPv6:
2a04:e200::/29
Signature Algorithm: sha256WithRSAEncryption
66:78:c3:6f:61:cc:a5:79:5d:76:a7:34:13:fe:d8:3d:2d:bb:
b3:c9:33:12:cf:9b:9a:68:21:03:2f:7a:92:03:8e:5a:76:ef:
53:4b:e2:22:f8:2e:a0:3e:37:b8:08:e2:2e:a8:eb:c5:30:b9:
b7:e6:69:84:69:61:d5:18:31:c1:50:fc:3f:59:c4:ec:01:76:
19:f4:7d:27:ac:34:70:1d:23:51:25:e7:59:81:a5:75:ce:45:
b8:eb:1b:3f:12:30:51:62:17:75:2f:d3:56:e5:7f:a7:69:b7:
f7:ae:a8:f0:c8:d3:07:89:ea:45:ae:9e:e4:bc:55:ac:a7:ef:
e6:85:fb:56:4f:42:13:62:82:c3:71:49:73:b8:77:61:01:d1:
9d:73:29:28:9b:c0:a1:f9:3d:0f:0e:2e:3c:cd:22:7d:29:d4:
56:ce:1d:a4:39:7e:63:69:08:e8:7b:a4:cf:18:db:53:88:14:
b9:cf:bf:05:eb:b4:cc:88:cd:c1:36:7a:05:9f:06:e9:74:2e:
9d:20:40:3c:7e:75:85:7e:e6:1e:c5:8b:37:8a:9a:ce:dd:ed:
a7:05:65:cc:ca:41:fc:3e:ec:f3:d9:87:01:a2:48:f1:8e:e9:
66:4b:77:5c:e2:c0:48:e2:d7:09:20:b6:86:75:42:fe:05:1a:
f2:14:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net