Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/5psUv_2xSOXUHisN0mr6G5El0PY.roa
File: 5psUv_2xSOXUHisN0mr6G5El0PY.roa (raw, json)
Hash identifier: u2L8h93+ljVSLVM4HBYZJNubly5Zmz04azMQUM+SdLg=
Subject key identifier: E6:9B:14:BF:FD:B1:48:E5:D4:1E:2B:0D:D2:6A:FA:1B:91:25:D0:F6
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 295EB7AC
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/5psUv_2xSOXUHisN0mr6G5El0PY.roa
Signing time: Sat 01 Jan 2022 10:04:00 +0000
ROA not before: Sat 01 Jan 2022 10:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12632
IP address blocks: 82.137.12.0/22 maxlen: 22
188.241.252.0/23 maxlen: 23
188.241.252.0/22 maxlen: 24
82.79.114.0/23 maxlen: 23
82.79.119.0/24 maxlen: 24
188.241.254.0/23 maxlen: 23
86.123.114.0/24 maxlen: 24
188.208.136.0/23 maxlen: 23
188.208.136.0/22 maxlen: 24
188.208.138.0/23 maxlen: 23
82.137.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694073260 (0x295eb7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 10:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e69b14bffdb148e5d41e2b0dd26afa1b9125d0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:ed:26:b8:53:6f:ab:5c:15:e6:f5:89:fa:
42:e5:94:60:7b:98:de:ea:b5:de:78:e7:a6:06:9d:
9a:11:eb:89:7c:d3:db:c8:60:b7:82:ff:c1:69:46:
0a:d2:e5:4b:53:b0:af:a4:ad:04:fd:e6:71:e7:f4:
1e:7f:91:6e:33:f1:b4:84:c8:ea:3c:33:3f:9e:e5:
7e:98:a7:50:d3:af:bd:4c:e7:f8:32:48:aa:3a:8c:
8a:92:08:d2:27:7b:a1:05:cb:ac:5b:18:9b:13:ba:
26:80:11:a9:b1:2f:e9:f9:a7:d7:27:56:59:de:d0:
50:95:5f:28:92:52:22:8a:8c:65:26:16:68:28:d2:
18:34:b6:5c:9a:30:19:42:01:22:0d:95:8c:b2:ea:
b1:d9:ed:92:fc:48:e7:ec:96:79:47:59:d3:39:cb:
a1:d1:7e:17:9b:40:23:9c:6c:90:f5:ae:95:2b:c0:
cb:b9:2d:15:90:13:1e:40:d6:a8:f6:91:0f:68:3c:
f6:2b:ae:2b:8d:78:90:d5:66:2e:6c:11:b9:86:3b:
24:2a:b1:dc:0f:11:ac:49:d8:bd:88:c7:3e:d2:58:
e7:68:81:03:7a:e8:03:ee:20:d7:0e:51:4f:d2:a3:
9c:85:5c:81:ac:9e:37:61:56:e7:e2:61:47:92:71:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9B:14:BF:FD:B1:48:E5:D4:1E:2B:0D:D2:6A:FA:1B:91:25:D0:F6
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/5psUv_2xSOXUHisN0mr6G5El0PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.79.114.0/23
82.79.119.0/24
82.137.8.0/21
86.123.114.0/24
188.208.136.0/22
188.241.252.0/22
Signature Algorithm: sha256WithRSAEncryption
14:55:3f:95:16:74:54:cf:d3:32:3e:bc:95:2e:cd:0e:b1:48:
ef:d4:ed:ff:6a:ae:e2:d7:3f:34:ab:62:1d:74:32:c4:eb:f4:
65:1b:e6:c4:c3:c1:f2:c3:a2:24:31:ae:bc:e0:4a:08:e9:ad:
78:79:3f:0f:af:93:f0:a8:8a:49:54:be:03:d1:ee:9b:ff:78:
e3:56:bb:e0:c5:9f:dc:da:35:cd:34:c7:b2:86:05:44:f4:e7:
15:52:5c:54:88:e7:3f:18:67:72:e5:03:cb:7a:c6:f6:d6:30:
c7:cb:61:e9:68:cc:94:b1:84:27:33:d8:b4:0c:8b:4c:a1:6d:
a7:f4:26:56:6c:e3:ad:cc:67:78:f3:fb:c5:23:d9:ea:64:4b:
e4:5c:55:0c:0e:54:9d:e3:97:03:e4:56:ee:02:26:72:58:c4:
35:da:d8:d8:e5:f3:a5:b2:22:43:85:19:68:d1:91:fb:65:5c:
f3:28:a4:f7:13:87:5b:85:cd:ac:d4:04:7e:9f:fd:ce:0d:1f:
25:ec:10:a5:13:89:ef:8c:62:c8:07:42:8c:69:a5:19:ca:e2:
dc:bf:03:c1:4b:13:e5:b9:da:e5:dc:ff:01:49:da:89:3e:3e:
09:b1:82:89:8a:50:88:e1:7d:b1:0c:54:9f:07:ab:77:3e:1e:
96:2e:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net