Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/6CwKEjAQ3eXQ3AlCSzQDV64fwfg.roa
File: 6CwKEjAQ3eXQ3AlCSzQDV64fwfg.roa (raw, json)
Hash identifier: 4cDWKq4oibFqKJHAeA9MQdg9a+cl1hmzgbDvAVBp2KA=
Subject key identifier: E8:2C:0A:12:30:10:DD:E5:D0:DC:09:42:4B:34:03:57:AE:1F:C1:F8
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 06EF9A9D
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/6CwKEjAQ3eXQ3AlCSzQDV64fwfg.roa
Signing time: Wed 15 Jun 2022 20:36:44 +0000
ROA not before: Wed 15 Jun 2022 20:36:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39150
IP address blocks: 95.85.83.0/24 maxlen: 24
91.196.139.0/24 maxlen: 24
91.196.138.0/24 maxlen: 24
91.196.137.0/24 maxlen: 24
93.179.66.0/24 maxlen: 24
91.196.136.0/24 maxlen: 24
109.196.133.0/24 maxlen: 24
195.182.8.0/24 maxlen: 24
2a04:8680::/32 maxlen: 32
2a09:d5c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116365981 (0x6ef9a9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jun 15 20:36:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e82c0a123010dde5d0dc09424b340357ae1fc1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:0a:ee:59:39:f9:d9:cf:30:7e:62:f1:d4:
e0:d2:d6:ca:02:b8:ae:c9:8a:00:64:31:cb:f0:99:
65:08:d6:ac:a2:c3:b7:f9:c3:18:2d:63:b0:e4:11:
2e:f1:47:b9:e6:20:f8:c1:fa:e8:00:db:03:95:cf:
49:e8:26:39:27:4f:41:e6:66:fd:9c:63:2c:cf:de:
e5:1f:06:5d:9d:9f:ae:f1:d3:52:44:20:2a:a2:26:
1b:13:ba:b2:22:b3:66:0c:70:dd:71:13:c3:f3:cb:
be:9c:b7:93:1b:0b:8d:4c:78:5e:1d:a9:df:a5:e6:
98:bf:55:b8:44:ae:71:c7:3a:d5:58:72:fe:7e:9c:
15:6f:c6:bb:f7:e8:3d:e0:45:e7:c8:c0:63:55:17:
75:dd:c6:1e:af:0d:13:04:c1:7d:b1:3c:14:47:03:
4a:55:d1:06:13:a7:3b:a4:38:90:b5:91:c0:2b:6d:
7e:17:8e:7c:fb:cf:f2:cb:6c:97:6d:82:b5:bd:5d:
40:0e:a0:6c:1b:7b:fe:62:e9:c7:54:62:d3:40:5f:
b9:65:17:79:d6:ef:2e:10:fb:0c:cc:52:f2:98:25:
9a:c3:30:bb:7f:00:1f:22:3b:08:1b:19:19:cb:89:
a4:93:3e:b5:02:db:d7:e4:33:52:a2:1b:73:eb:ba:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:0A:12:30:10:DD:E5:D0:DC:09:42:4B:34:03:57:AE:1F:C1:F8
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/6CwKEjAQ3eXQ3AlCSzQDV64fwfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.136.0/22
93.179.66.0/24
95.85.83.0/24
109.196.133.0/24
195.182.8.0/24
IPv6:
2a04:8680::/32
2a09:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:41:e6:dd:b4:65:21:ae:62:b4:6a:98:95:f9:9d:6a:50:d7:
3e:98:93:b4:cb:2b:b2:9e:a5:ec:b3:64:50:64:9d:4c:6d:bb:
bc:8b:0f:0a:65:f7:0d:c3:c7:3f:c8:35:51:e7:00:fb:ef:b2:
37:3e:5f:2c:c7:1e:af:3d:cd:c4:3a:21:37:05:29:5e:63:5e:
0a:18:5d:31:11:55:ac:9e:8e:5d:b4:d0:61:33:82:b6:9f:04:
ce:47:18:89:ed:1e:be:fb:9a:8b:5c:b1:71:88:ef:45:86:7f:
93:e8:67:87:c3:56:ac:e2:00:e1:17:ae:68:82:18:6f:ed:7d:
8a:65:df:45:d2:2f:bf:bd:f0:18:9c:27:c0:bb:3a:3d:7c:5f:
af:22:4c:8c:0d:da:37:88:e8:68:17:62:f1:23:15:4a:45:2f:
e5:68:65:6f:ee:ba:52:02:26:12:df:bd:a8:d6:db:45:81:3d:
12:91:22:8a:ac:ca:de:09:cf:98:e3:25:de:2b:db:36:95:6d:
d8:4f:0e:a1:6f:02:ca:1c:ac:30:7e:e3:4b:91:ad:f3:dc:2f:
d4:67:7f:63:f1:55:00:3f:49:a4:16:40:7c:83:00:d6:b6:69:
34:6a:6d:93:9a:24:0d:4b:47:c1:76:5b:47:cb:ac:aa:b7:db:
d2:80:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net