Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ulAzZi7mQrXQNxojR7nzUh-aPNc.roa
File: ulAzZi7mQrXQNxojR7nzUh-aPNc.roa (raw, json)
Hash identifier: yeAfvxsSKPzNyGB/jf6cltCcH344bCFS9wo8YE/qi50=
Subject key identifier: BA:50:33:66:2E:E6:42:B5:D0:37:1A:23:47:B9:F3:52:1F:9A:3C:D7
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018286C520294F3E55A68884E4160B778373
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ulAzZi7mQrXQNxojR7nzUh-aPNc.roa
Signing time: Wed 10 Aug 2022 08:00:41 +0000
ROA not before: Wed 10 Aug 2022 08:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201247
IP address blocks: 79.133.97.0/24 maxlen: 24
185.13.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:c5:20:29:4f:3e:55:a6:88:84:e4:16:0b:77:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Aug 10 08:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba5033662ee642b5d0371a2347b9f3521f9a3cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:56:60:04:d9:88:e4:1f:b6:26:dd:bc:17:
64:ba:af:02:b9:65:4f:d7:b7:66:42:ae:0d:23:3a:
95:73:e3:3f:8d:2d:50:1f:3d:8e:8f:5e:f2:64:43:
a0:36:4c:f2:bc:41:63:46:6b:29:78:d0:a9:fd:62:
1e:6a:de:10:a5:01:3f:02:c7:6d:57:7b:6e:56:1c:
88:ff:5f:12:01:9d:b4:8d:45:07:19:ce:a6:b0:e3:
30:b2:de:1e:dc:9a:b6:46:3c:42:36:1c:0e:59:b1:
3a:c9:4e:ff:d1:58:5b:64:d4:48:4b:f3:7a:6f:79:
99:13:39:cf:e6:f7:e9:da:2f:18:96:ce:83:10:27:
00:a7:38:f0:1f:5e:b6:66:a5:1d:4f:6e:a6:61:dd:
8c:5b:03:df:f0:1d:07:be:79:3d:ee:18:3f:c7:1c:
31:88:4b:31:ab:a2:8a:ff:c1:01:80:1c:96:92:c1:
05:da:be:41:10:42:2c:b4:b6:b4:97:eb:f4:fc:19:
a7:9e:41:dd:1a:e6:59:78:32:f4:1c:24:f2:0d:89:
a1:39:97:b0:48:61:3d:1c:71:68:ff:e7:b6:61:b9:
17:bd:96:db:27:4a:a5:d7:25:04:30:16:c0:69:99:
eb:34:5e:63:fa:8e:12:03:22:ee:66:0c:0a:5c:39:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:33:66:2E:E6:42:B5:D0:37:1A:23:47:B9:F3:52:1F:9A:3C:D7
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/ulAzZi7mQrXQNxojR7nzUh-aPNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.97.0/24
185.13.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9d:b4:38:b3:02:d7:bf:a1:0e:bb:39:de:fa:d2:1b:11:31:
c4:1d:f1:55:46:12:56:3a:35:eb:b6:7f:2f:15:3a:72:da:cb:
9c:52:e1:50:07:70:78:79:d8:6d:12:db:5c:ac:ff:18:bf:7d:
b6:45:57:92:6d:af:da:86:57:f0:8e:05:05:66:0f:4e:89:03:
af:f7:5b:a4:d8:74:58:bc:85:14:1d:f9:55:3f:d9:e6:45:60:
6f:02:59:4c:cf:08:8a:d1:4e:73:01:f6:80:a1:22:97:62:59:
40:18:b4:ba:9b:4d:b5:61:3c:32:1d:23:3f:8b:22:43:99:e0:
c9:39:f9:8b:b9:be:c7:93:35:76:ac:8c:17:f7:00:87:c1:6b:
66:8b:5d:16:fe:f6:ee:be:ad:31:95:1b:10:da:6b:50:32:03:
20:03:2e:57:ba:97:c0:ce:16:66:0a:a4:8e:0d:49:cf:60:b3:
ea:76:9c:b5:8b:09:cf:27:2c:a6:c8:fc:54:3d:f5:6b:de:60:
0c:76:cd:67:c4:13:c9:49:35:e2:1d:85:64:d1:76:c1:35:59:
b9:37:a7:41:cf:03:c9:7e:b7:ac:69:32:21:6f:b9:9f:67:6f:
24:49:f9:83:6f:91:79:34:f5:90:50:b3:b7:c2:1c:23:11:be:
13:2f:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net