Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/HmJ1JhKIQMFNEgbehs-PQ2gnJBE.roa
File: HmJ1JhKIQMFNEgbehs-PQ2gnJBE.roa (raw, json)
Hash identifier: 3EWoRPvRhorFQQ0ThHQ4xAzNTumZVqjc15QRwCr9o28=
Subject key identifier: 1E:62:75:26:12:88:40:C1:4D:12:06:DE:86:CF:8F:43:68:27:24:11
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 1BFCA920
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/HmJ1JhKIQMFNEgbehs-PQ2gnJBE.roa
Signing time: Tue 10 May 2022 17:39:03 +0000
ROA not before: Tue 10 May 2022 17:39:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20904
IP address blocks: 84.240.64.0/19 maxlen: 19
149.126.176.0/21 maxlen: 21
84.240.96.0/19 maxlen: 19
188.64.0.0/21 maxlen: 21
185.25.76.0/22 maxlen: 22
185.67.80.0/22 maxlen: 22
37.35.80.0/21 maxlen: 21
80.75.96.0/20 maxlen: 20
93.174.192.0/21 maxlen: 21
93.174.196.0/22 maxlen: 22
80.75.106.0/24 maxlen: 24
46.254.208.0/21 maxlen: 21
2a00:74a0::/32 maxlen: 32
2a00:1a58::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469543200 (0x1bfca920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: May 10 17:39:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e627526128840c14d1206de86cf8f4368272411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:b3:93:c2:f8:3c:1b:65:b9:3a:80:18:a8:
4e:e3:0c:29:1a:5d:26:9e:a9:e0:54:19:d7:2b:d0:
6b:ab:e8:5d:45:df:01:a8:82:bc:f3:aa:43:46:a9:
75:9e:ca:82:e8:f2:e2:80:06:28:a8:10:24:fd:41:
02:df:f6:1d:e7:9a:41:37:e4:4a:c5:d0:ab:a2:51:
c3:ba:2c:5c:b0:1a:70:fb:c7:5b:f8:89:60:f7:2f:
b4:60:bb:30:c8:ec:56:2b:16:68:f7:25:7e:44:51:
17:7a:31:d2:0b:01:c6:36:c1:94:ad:32:4f:69:3c:
cf:58:3c:d2:21:0f:5f:2f:05:d2:1e:c9:e0:e8:50:
98:1d:12:9b:c9:dc:9c:87:da:f9:94:c0:cc:b6:50:
50:82:c5:1e:5f:74:05:ed:c7:1f:b6:bb:9b:f3:36:
90:9d:2e:d1:9d:ae:b0:48:5a:ec:9f:ac:93:51:4b:
b5:7a:e4:53:22:e6:b1:3e:ec:74:e2:29:d2:42:5b:
9e:54:33:59:7d:f3:2b:a1:61:5f:8f:aa:2c:8c:57:
48:a9:47:7d:f2:c4:af:ed:04:c5:08:e0:2c:e2:14:
1d:38:4e:96:8e:0e:16:e5:dc:76:d6:0b:30:9a:cb:
67:dc:06:2f:fa:ea:ce:7a:dd:9d:2e:2f:f6:56:a7:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:75:26:12:88:40:C1:4D:12:06:DE:86:CF:8F:43:68:27:24:11
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/HmJ1JhKIQMFNEgbehs-PQ2gnJBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.80.0/21
46.254.208.0/21
80.75.96.0/20
84.240.64.0/18
93.174.192.0/21
149.126.176.0/21
185.25.76.0/22
185.67.80.0/22
188.64.0.0/21
IPv6:
2a00:1a58::/32
2a00:74a0::/32
Signature Algorithm: sha256WithRSAEncryption
73:7f:da:5a:47:16:31:f5:58:bd:a9:8c:4b:f8:0d:0e:9e:02:
38:a1:58:0d:8e:91:09:c0:0b:0a:b3:70:f7:24:4d:80:06:42:
6c:db:32:ab:de:42:9c:2e:1a:17:cd:7a:cb:ac:2f:92:79:5c:
03:a3:62:c5:ff:b8:a4:0b:7f:fc:b3:62:f3:2f:19:cd:e4:3f:
f4:4b:8e:4b:d2:cd:57:d8:59:57:85:7f:dd:5f:94:da:52:f6:
58:b0:23:ae:b2:72:b5:99:f1:e8:81:08:df:f0:7a:6b:94:91:
e2:bc:2a:d5:8f:9f:cd:4a:7a:87:05:9b:3f:f0:e2:d6:76:33:
31:43:7f:cb:b4:66:98:e3:0b:81:f2:b2:db:12:5d:d8:a4:0b:
7a:25:72:e8:39:1c:80:6b:3c:85:39:11:b7:38:78:fe:4e:f7:
be:78:c6:55:07:1c:f2:7d:3a:ce:6b:48:44:55:3f:50:bd:8c:
92:2c:17:f5:a3:ec:60:cb:87:f0:bd:86:48:db:f4:7c:17:11:
90:ad:ae:53:c7:b1:ef:b7:94:fa:aa:1a:96:97:5b:e1:0c:25:
6f:e9:ca:41:ef:ea:24:e2:78:f2:09:7f:f1:56:d8:ea:37:f0:
4b:ae:e9:7e:2f:fd:45:f1:0e:29:18:b3:cf:9b:0e:58:44:98:
e0:ed:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net