Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/1k0cc9kewqW7rXfFsBv8UShEfSU.roa
File: 1k0cc9kewqW7rXfFsBv8UShEfSU.roa (raw, json)
Hash identifier: d/naD6pfbkfvB59o8DbWN42IhLtcF/BWYV4G4JjUSiA=
Subject key identifier: D6:4D:1C:73:D9:1E:C2:A5:BB:AD:77:C5:B0:1B:FC:51:28:44:7D:25
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0182CAD335F2BC1BEFE3AFEAFE82AA46B4C1
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/1k0cc9kewqW7rXfFsBv8UShEfSU.roa
Signing time: Tue 23 Aug 2022 13:10:15 +0000
ROA not before: Tue 23 Aug 2022 13:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29314
IP address blocks: 217.172.224.0/19 maxlen: 19
217.75.48.0/20 maxlen: 20
62.141.192.0/18 maxlen: 18
217.144.192.0/19 maxlen: 19
89.229.0.0/16 maxlen: 16
31.6.192.0/19 maxlen: 19
31.6.218.0/24 maxlen: 24
89.230.0.0/16 maxlen: 16
31.6.128.0/18 maxlen: 18
37.190.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:d3:35:f2:bc:1b:ef:e3:af:ea:fe:82:aa:46:b4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Aug 23 13:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d64d1c73d91ec2a5bbad77c5b01bfc5128447d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:bd:03:c9:e0:18:ee:cf:4e:b5:eb:50:da:
28:94:ba:0b:51:28:84:0a:eb:5a:0c:7d:8f:55:61:
1b:65:32:8a:f5:45:87:84:f4:8f:1e:ce:ab:0f:ca:
c2:23:6f:65:55:ea:a9:96:77:5c:07:5d:f6:1f:9e:
58:b2:13:db:09:48:de:32:e0:09:f9:1f:9a:df:db:
ba:b6:c6:be:14:df:a3:7e:d0:62:4f:55:a2:13:95:
d6:76:f3:e8:55:2f:03:61:e5:ad:9e:6f:a6:7d:20:
60:fb:af:fa:53:08:4e:1b:bf:3c:1a:50:85:08:7f:
8a:81:43:3c:48:f7:97:a9:f9:3f:09:01:03:ee:06:
30:f0:b3:58:d2:58:76:2c:93:38:0f:4d:d8:c2:ee:
49:f8:8d:50:af:fc:99:0f:1d:fe:87:75:73:c0:5c:
84:76:13:4e:e5:3e:9a:0e:87:5d:db:62:cf:9c:18:
77:98:29:e1:3f:41:18:e1:80:47:d5:a5:44:11:55:
88:16:91:69:bd:f2:91:42:61:d2:67:f2:66:e2:56:
4e:82:da:d2:97:5a:a8:01:53:dc:b6:7b:0e:c9:9b:
52:0d:90:2e:ac:45:5d:17:ee:dd:04:07:be:d2:b9:
39:be:20:6e:bf:f5:1a:64:75:fa:78:6e:04:c3:31:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:1C:73:D9:1E:C2:A5:BB:AD:77:C5:B0:1B:FC:51:28:44:7D:25
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/1k0cc9kewqW7rXfFsBv8UShEfSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
37.190.128.0/17
62.141.192.0/18
89.229.0.0-89.230.255.255
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
76:3f:e1:7a:1c:ab:e5:e5:2c:d9:86:59:0d:c2:31:91:02:9f:
ef:9d:43:ba:19:22:ff:f3:a8:a2:2f:75:72:e2:bc:a8:7a:56:
f3:26:ba:b3:77:37:e7:06:8c:57:f0:76:e1:6c:34:a9:cd:86:
15:c0:84:c7:ec:3f:88:94:5e:26:52:a2:95:cf:64:eb:d8:b0:
f4:28:a3:e0:a0:45:1a:0b:c5:c8:cd:f3:4c:d4:64:ad:ba:cc:
1a:a4:2b:ad:f9:e0:60:08:64:e9:bd:85:2b:ae:d4:61:ab:5b:
a9:70:2d:d6:e1:e5:ea:e2:8c:5b:57:84:eb:b1:fc:07:4d:ea:
aa:cb:0b:6f:2c:bf:1c:ab:1a:36:d7:47:a7:0f:54:0a:16:8f:
d3:6c:37:43:f4:42:fb:e9:fe:4f:ba:a7:2a:b0:5b:19:f1:df:
4e:ed:ed:7c:72:bd:aa:f7:89:e4:6a:ab:f3:64:55:f0:52:85:
26:a3:0d:e8:1f:1e:92:ec:65:99:a4:be:e8:f7:34:7e:e7:85:
30:6b:43:56:b7:3b:9b:74:ce:85:84:9f:37:5f:e2:f7:7d:71:
1b:20:39:28:01:d4:f0:37:ed:59:3a:ed:f4:e1:61:13:cf:9e:
df:75:73:c2:58:3e:63:87:b4:22:d7:e4:dd:57:04:f4:22:07:
10:b1:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:35 2023 by rpki-client on console.sobornost.net