Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/evCK72-37ZJ03qEV9DGMr_6gTHY.roa
File: evCK72-37ZJ03qEV9DGMr_6gTHY.roa (raw, json)
Hash identifier: 0Trqvwukl+tl+tNBM0WRqbbjlDipBsr0u6/ZTdV1qCk=
Subject key identifier: 7A:F0:8A:EF:6F:B7:ED:92:74:DE:A1:15:F4:31:8C:AF:FE:A0:4C:76
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 1BFEE2E6
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/evCK72-37ZJ03qEV9DGMr_6gTHY.roa
Signing time: Wed 11 May 2022 09:14:02 +0000
ROA not before: Wed 11 May 2022 09:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20904
IP address blocks: 84.240.64.0/19 maxlen: 19
149.126.176.0/21 maxlen: 21
84.240.96.0/19 maxlen: 19
188.64.0.0/21 maxlen: 21
185.25.76.0/22 maxlen: 22
37.35.80.0/21 maxlen: 21
185.67.80.0/22 maxlen: 22
80.75.96.0/20 maxlen: 20
93.174.192.0/21 maxlen: 21
80.75.106.0/24 maxlen: 24
46.254.208.0/21 maxlen: 21
2a00:74a0::/32 maxlen: 32
2a00:1a58::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469689062 (0x1bfee2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: May 11 09:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7af08aef6fb7ed9274dea115f4318caffea04c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:f8:7b:7c:b2:a3:5e:a9:8f:52:4c:fb:ab:
17:cf:b8:47:fc:d8:fb:74:94:47:f6:96:5e:ac:86:
1e:7a:53:bf:64:9a:74:e4:11:8a:85:86:fe:62:46:
fa:f5:2e:cb:20:d6:65:c0:ac:57:18:a4:a0:e4:22:
c9:9f:a6:a1:44:bb:b7:b2:ce:02:e6:da:33:c2:03:
e9:fc:5e:2c:3f:1d:82:09:44:5e:24:a2:b8:f4:6d:
58:0e:ad:7d:2e:fe:2c:f3:ec:9a:69:9f:9d:ef:5b:
0e:25:cd:3f:bb:0d:af:b9:71:76:04:df:ce:80:46:
a0:e4:64:66:17:81:ef:73:02:90:df:c0:65:e9:7e:
20:01:e8:c1:a2:39:18:7c:19:67:14:bc:6e:1f:67:
b4:8f:4d:70:b5:e1:62:ee:fa:27:b5:cf:bb:9d:71:
ae:d8:1e:41:34:ae:02:e4:e7:32:6e:96:3e:4c:b5:
fa:e1:f5:0d:4d:90:aa:18:f2:6f:dd:34:db:9f:bb:
92:95:b8:52:b4:e6:12:aa:bb:8e:d9:ac:8e:3d:71:
ea:6b:17:08:68:b9:fc:5c:3d:7f:dd:0f:ce:44:94:
81:18:d1:e2:19:a2:03:e7:8a:0e:7a:4c:f7:3f:07:
91:fb:e5:b6:7a:e7:61:4b:c7:c9:08:e3:bf:3a:1c:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:8A:EF:6F:B7:ED:92:74:DE:A1:15:F4:31:8C:AF:FE:A0:4C:76
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/evCK72-37ZJ03qEV9DGMr_6gTHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.80.0/21
46.254.208.0/21
80.75.96.0/20
84.240.64.0/18
93.174.192.0/21
149.126.176.0/21
185.25.76.0/22
185.67.80.0/22
188.64.0.0/21
IPv6:
2a00:1a58::/32
2a00:74a0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:ed:e5:5b:12:e6:e6:a6:b8:e4:85:7a:db:5f:ce:88:45:cb:
66:af:c7:b1:87:2e:04:c1:38:8f:df:01:55:21:a3:98:60:64:
4b:97:70:4b:b9:ff:fd:3a:5d:12:90:6e:94:27:6e:b4:eb:5a:
e5:3c:68:3b:9e:74:28:de:4c:ec:fb:63:96:ff:35:c1:d4:3f:
92:07:ab:5e:2b:8c:f8:c6:a3:d6:ec:f8:e0:f2:b5:ce:70:26:
cb:b2:cc:81:4a:9b:9a:8a:7d:c4:b0:8e:d5:d5:2e:5f:73:de:
e0:23:75:a7:20:77:cf:46:6b:c7:b7:5b:e0:89:25:88:f1:49:
5a:66:5c:21:c6:39:7c:2a:6c:14:4d:55:2c:98:f2:3a:3f:e9:
35:d1:8b:97:7e:05:f5:84:52:4e:a7:ba:1a:21:9b:44:03:07:
f6:67:8d:10:d3:ae:ec:25:7a:04:8c:7b:4e:1a:32:b5:9f:f2:
c3:cc:15:75:1e:7e:7f:da:9f:9c:3f:d9:a8:08:be:7e:cb:2b:
26:90:cf:51:cb:ed:e6:d8:f3:dc:19:36:b4:9e:b5:55:26:9a:
a0:65:fe:28:6a:6e:c0:20:82:d8:bb:c2:f4:b2:8a:5a:40:b9:
d0:8b:b1:d8:c4:6d:04:8b:81:b3:eb:c1:8c:83:df:96:c7:68:
b3:59:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net