Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/viNqVf_DcwYgQWNfCjjUke_o1cY.roa
File: viNqVf_DcwYgQWNfCjjUke_o1cY.roa (raw, json)
Hash identifier: QJmCoN80eUt6QaDSJo/M+xb1PUF0XY5cirZuQaaUfY8=
Subject key identifier: BE:23:6A:55:FF:C3:73:06:20:41:63:5F:0A:38:D4:91:EF:E8:D5:C6
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 029DE941
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/viNqVf_DcwYgQWNfCjjUke_o1cY.roa
Signing time: Fri 29 Apr 2022 13:19:43 +0000
ROA not before: Fri 29 Apr 2022 13:19:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 185.155.196.0/24 maxlen: 24
185.155.197.0/24 maxlen: 24
185.155.198.0/24 maxlen: 24
185.155.199.0/24 maxlen: 24
37.99.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43903297 (0x29de941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: Apr 29 13:19:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be236a55ffc373062041635f0a38d491efe8d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:cb:35:59:61:83:da:94:ee:3e:3e:c6:f1:
e0:1a:0b:e0:9b:3f:eb:af:56:ef:04:f2:92:75:e1:
08:68:bd:c7:12:c7:b8:95:af:ae:e5:38:50:05:f9:
53:06:30:3c:33:43:d9:b7:25:a8:a3:39:7f:86:6f:
16:a2:a5:29:02:3d:74:bf:86:4c:cb:06:ca:8e:38:
d0:93:7d:44:98:e4:00:ad:a9:ac:4a:84:45:a6:c8:
b5:de:41:70:1d:54:46:99:c6:62:ed:70:56:e7:9b:
ec:78:c1:51:1a:88:1b:21:15:1e:ef:51:05:fe:8f:
14:e1:8a:3f:36:8d:d1:e3:e1:a7:8c:f1:b8:d8:9b:
bf:ee:8b:c1:40:7e:2a:7d:04:d5:42:77:ef:7b:d1:
fe:46:09:b2:5e:5a:5d:8c:f1:5d:47:9a:a7:df:ea:
35:c9:b2:67:7c:8b:93:3e:67:70:1b:2b:0f:92:fd:
6b:6b:7a:5f:16:9d:e5:69:6a:1f:92:bb:21:bf:5b:
25:87:14:c5:35:cf:75:fb:12:06:ab:cd:cb:7a:ce:
c8:c4:c8:92:69:c7:58:6a:15:13:77:69:a4:3d:c8:
47:f4:ad:ff:4f:b5:e1:f7:17:7e:cc:09:94:48:72:
2c:c8:22:eb:5f:03:1f:63:2c:83:c0:c3:05:89:b3:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:6A:55:FF:C3:73:06:20:41:63:5F:0A:38:D4:91:EF:E8:D5:C6
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/viNqVf_DcwYgQWNfCjjUke_o1cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.208.0/21
185.155.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:85:7d:b7:d8:33:d8:a1:99:a9:7f:c9:38:7e:29:84:81:23:
a9:ba:46:38:1d:6c:e4:bd:2a:5d:aa:cf:ee:bd:af:e2:80:33:
b0:e0:b5:01:cb:47:a9:72:ed:ad:66:ef:c1:db:bb:e2:5a:8e:
22:08:d5:1d:44:ef:22:92:c2:c6:06:e9:5a:c3:b4:0b:a0:8b:
85:f3:8f:dd:0c:af:1f:83:5a:53:20:e9:4c:2f:84:84:18:2c:
16:71:e1:01:ae:e0:ce:2c:7a:76:a6:25:4f:f6:61:06:4a:94:
3a:c9:84:02:f9:c4:3f:7c:f0:a2:45:c3:10:36:af:6e:f4:8b:
33:77:62:e0:6c:dd:66:84:ed:d9:da:7b:24:99:41:16:6e:f7:
61:98:fd:5d:8a:33:90:d0:34:67:01:7d:1a:e8:42:34:5f:28:
f8:88:30:ef:6d:f3:82:9f:61:19:6b:ab:89:64:df:43:c3:8c:
01:8a:ca:db:03:db:ba:5f:d2:c0:17:d3:8d:cd:42:55:c6:b6:
af:f3:c9:92:87:6a:fc:3a:b6:f2:86:79:46:6c:2e:55:b6:7a:
60:ee:c8:63:76:c6:1f:df:f3:d6:f7:a0:09:bb:2c:43:61:b5:
95:9a:d9:a9:b7:9d:7b:2e:24:4a:ff:be:0f:b3:ce:6c:3b:81:
c0:19:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net