Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/X4kCZp7Rc18wGBXKS3708oRzLl8.roa
File: X4kCZp7Rc18wGBXKS3708oRzLl8.roa (raw, json)
Hash identifier: 1nrToJy+1gLk2Fx8awomDtgv0XCumRQvkKWBlj7QjPk=
Subject key identifier: 5F:89:02:66:9E:D1:73:5F:30:18:15:CA:4B:7E:F4:F2:84:73:2E:5F
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018286F0274BB91AD49AC3206C0568A48B47
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/X4kCZp7Rc18wGBXKS3708oRzLl8.roa
Signing time: Wed 10 Aug 2022 08:47:41 +0000
ROA not before: Wed 10 Aug 2022 08:47:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12850
IP address blocks: 212.29.128.0/19 maxlen: 24
80.247.64.0/20 maxlen: 24
178.239.176.0/20 maxlen: 24
87.248.32.0/19 maxlen: 24
185.48.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:f0:27:4b:b9:1a:d4:9a:c3:20:6c:05:68:a4:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Aug 10 08:47:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f8902669ed1735f301815ca4b7ef4f284732e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:16:cd:ab:a8:50:ab:16:ba:92:df:b2:71:51:
09:ca:15:ce:85:b1:a9:ce:6e:fe:9b:f5:7b:0d:85:
1c:e0:ea:51:4d:48:da:7d:48:41:38:92:c3:4d:bd:
60:8b:6a:18:64:17:a4:0d:58:4f:cf:f2:6e:b4:74:
3f:a9:ca:80:28:a4:b5:23:35:82:08:e5:8b:2c:eb:
84:ab:a8:46:a2:2a:6f:34:ab:a4:cc:44:30:bd:7e:
e4:04:04:92:7e:15:72:1a:93:74:a7:6e:8f:81:68:
4e:31:be:2e:07:e1:df:c8:d4:1c:63:7c:62:72:4c:
e6:d9:94:45:21:fd:e5:d9:b7:61:aa:d0:b3:de:98:
81:81:61:0e:99:a0:d8:0c:c7:a2:09:0d:3b:64:09:
3f:d3:d2:67:d9:09:a2:9b:07:87:54:9d:67:28:19:
da:4f:9d:57:1e:2b:9d:4a:d8:d3:db:5e:9d:73:b1:
66:72:f3:1e:12:05:ad:59:f4:63:03:08:93:8a:98:
73:bb:ac:41:33:ce:9d:79:45:db:4c:07:5f:0e:e3:
d0:f7:c8:2d:c8:8a:7a:f0:65:2a:a3:95:4d:c6:35:
75:ed:6c:20:78:52:7f:36:d3:db:47:5f:45:43:35:
da:29:22:1c:3a:96:2a:db:12:60:06:30:1a:03:24:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:02:66:9E:D1:73:5F:30:18:15:CA:4B:7E:F4:F2:84:73:2E:5F
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/X4kCZp7Rc18wGBXKS3708oRzLl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.64.0/20
87.248.32.0/19
178.239.176.0/20
185.48.32.0/22
212.29.128.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:95:c1:23:89:85:93:a2:73:86:7e:c3:0e:01:21:a9:76:ba:
35:4c:57:c9:4e:26:8a:7d:82:73:2e:58:a3:c9:06:14:ca:69:
de:56:db:04:61:e0:76:50:07:d9:57:e6:10:ca:d3:6b:a6:d5:
40:34:e9:e6:78:16:1d:aa:f1:93:38:58:43:08:fd:65:22:6f:
86:68:c4:5d:5e:46:1c:22:a2:86:cf:f7:3b:a2:2f:65:d8:8f:
86:72:1b:2c:92:54:42:20:72:47:7e:d1:f4:f8:32:3f:87:08:
42:6b:88:1e:42:ed:33:ad:7b:3c:bc:3a:88:3d:1e:c5:29:e5:
8d:e9:4e:fd:3d:6f:66:d0:e8:24:39:c7:64:7c:42:f1:43:4e:
7c:15:80:3c:2c:54:fa:bc:03:53:2b:5b:c6:f9:93:f7:82:7f:
41:c9:95:bc:1a:21:48:5d:93:97:49:83:55:f4:13:bc:57:14:
58:d6:3b:e8:c0:69:3d:70:0c:83:a2:9b:08:71:9d:68:a1:52:
9e:d7:e9:bc:ee:46:c7:cd:ef:71:69:e2:42:8f:c1:2c:b3:53:
40:bf:0d:c9:38:4a:f6:3b:b1:9c:c8:7a:7a:0d:26:9c:3d:fe:
7e:15:83:4c:d2:01:c9:fd:56:60:3a:59:67:8b:e8:c6:57:53:
dc:d0:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net