Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/7WBsBEmsqqbq80wNbDMOCwa-uKI.roa
File: 7WBsBEmsqqbq80wNbDMOCwa-uKI.roa (raw, json)
Hash identifier: vw4FqtEfDveU3Yx2uz5NsF9DGGrkB7Wk8BFs8qzrrBE=
Subject key identifier: ED:60:6C:04:49:AC:AA:A6:EA:F3:4C:0D:6C:33:0E:0B:06:BE:B8:A2
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 1AA22A5A
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/7WBsBEmsqqbq80wNbDMOCwa-uKI.roa
Signing time: Sat 01 Jan 2022 14:06:04 +0000
ROA not before: Sat 01 Jan 2022 14:06:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48434
IP address blocks: 94.232.168.0/21 maxlen: 27
185.162.219.0/24 maxlen: 27
185.162.218.0/24 maxlen: 27
185.162.218.0/23 maxlen: 27
185.162.217.0/24 maxlen: 27
185.37.52.0/22 maxlen: 27
185.78.20.0/22 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446835290 (0x1aa22a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jan 1 14:06:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed606c0449acaaa6eaf34c0d6c330e0b06beb8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:dc:25:c1:50:83:44:69:76:a4:1c:39:40:
96:f8:bc:02:45:42:a1:45:11:da:d9:17:d4:c5:38:
73:7c:0b:f0:0b:46:31:07:c6:14:d4:04:74:43:19:
3c:8e:42:a5:58:90:57:bb:41:a0:91:09:40:a1:aa:
d9:f5:fa:0a:cf:2b:a3:f5:bc:6f:1e:13:e9:44:af:
cd:02:7d:9a:6d:04:63:46:d5:38:2b:4f:61:06:fc:
e8:94:b8:e7:7f:f3:c4:fc:ef:55:c2:6a:0d:a6:65:
63:4c:4f:4a:ed:c1:b2:2d:9e:52:4d:fe:d5:1b:8e:
46:11:7b:30:18:be:15:94:29:41:a2:22:0d:f0:75:
d9:e9:de:45:97:89:dd:3b:4f:18:d7:c6:52:bd:f0:
ea:ca:e5:9a:00:76:b1:e2:50:6e:a7:e0:41:f0:ee:
04:58:cf:82:9e:f6:76:37:a1:6f:8b:d1:8c:0b:58:
4c:14:53:a1:5d:43:20:f2:8c:9f:ae:77:1f:92:03:
96:57:c8:aa:3e:ab:7c:51:32:8e:99:23:ac:8d:71:
5e:df:f7:30:5f:98:72:15:e8:c1:d5:d1:d8:f1:22:
3b:eb:fb:b1:79:5f:9b:82:4b:1c:1c:0a:db:45:87:
09:95:88:8f:2a:6e:14:6b:e7:48:54:5f:13:da:c8:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:60:6C:04:49:AC:AA:A6:EA:F3:4C:0D:6C:33:0E:0B:06:BE:B8:A2
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/7WBsBEmsqqbq80wNbDMOCwa-uKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.168.0/21
185.37.52.0/22
185.78.20.0/22
185.162.217.0-185.162.219.255
Signature Algorithm: sha256WithRSAEncryption
7e:e9:70:65:57:fd:87:61:26:11:f2:0f:52:f9:8e:6c:bf:fa:
3b:7e:94:8e:3e:81:77:1f:ad:d9:84:af:af:1c:bb:c8:31:4c:
35:c2:ff:61:3d:d5:e5:08:88:7b:89:0c:e9:4d:46:d0:3d:d9:
fa:48:2d:84:dc:c6:51:bf:07:57:05:4e:8d:76:9f:64:70:c7:
be:2d:19:e4:c8:da:89:cc:b0:b7:93:9d:a2:78:60:09:01:f7:
2e:88:ae:02:53:42:5a:49:28:ff:5e:83:28:15:d3:07:4b:28:
0c:5b:73:0c:a7:bf:aa:46:88:04:53:3e:40:74:32:14:67:ef:
88:f0:84:d3:61:71:0f:a7:0b:08:37:22:57:86:5d:2e:01:62:
fb:83:87:40:26:fa:5f:a4:84:a8:22:52:38:1a:54:66:08:d4:
13:1f:d5:01:81:ee:6c:ff:ea:a2:10:1f:11:e3:55:83:3f:3b:
59:d8:0f:6c:9c:52:e8:ef:c0:bd:d7:58:7b:a5:1e:91:b2:9f:
6c:4e:80:c1:bd:d0:6a:3d:be:ce:6e:95:3a:33:b9:19:9d:b5:
15:3a:9e:64:86:d2:25:29:32:c6:e0:4e:e6:5a:09:13:25:3b:
1c:b2:b1:6c:2c:fd:c9:7f:60:03:87:68:3c:74:12:a1:68:8d:
53:b1:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net