Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/m4-kjmoeJgqF-Oa0KYkw5yJdTdQ.roa
File: m4-kjmoeJgqF-Oa0KYkw5yJdTdQ.roa (raw, json)
Hash identifier: XC1dQu2iuL0FgM/5he8/VgSoRpxe4svKfMju3cSqMsg=
Subject key identifier: 9B:8F:A4:8E:6A:1E:26:0A:85:F8:E6:B4:29:89:30:E7:22:5D:4D:D4
Certificate issuer: /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial: 13D34C81
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/m4-kjmoeJgqF-Oa0KYkw5yJdTdQ.roa
Signing time: Sat 01 Jan 2022 13:57:01 +0000
ROA not before: Sat 01 Jan 2022 13:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49941
IP address blocks: 193.104.52.0/24 maxlen: 24
185.98.249.0/24 maxlen: 24
185.98.248.0/24 maxlen: 24
185.98.251.0/24 maxlen: 24
185.98.250.0/24 maxlen: 24
194.107.127.0/24 maxlen: 24
2a06:cdc0:2006::/48 maxlen: 48
2a06:cdc0:2009::/48 maxlen: 48
2a06:cdc0:2007::/48 maxlen: 48
2a06:cdc0:2008::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332614785 (0x13d34c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
Validity
Not Before: Jan 1 13:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b8fa48e6a1e260a85f8e6b4298930e7225d4dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:ce:d0:a9:ae:ec:c7:00:0c:ca:a5:d7:e5:
28:ac:8d:73:6c:b3:6e:74:ca:6b:9e:7b:81:f6:7f:
ac:5a:b2:a7:46:db:66:9b:64:13:2e:88:db:7a:83:
80:e7:53:85:a7:73:15:00:d2:e9:78:82:c9:ac:0e:
05:8f:3f:86:e2:6e:f7:87:8f:b1:bd:a9:3a:16:54:
83:b5:08:c6:99:3e:5e:a4:18:21:91:71:54:8d:de:
ff:ca:3a:5e:94:a8:b9:f4:4e:c9:2c:32:8d:83:3c:
40:fc:f5:de:6e:00:bf:2a:e3:6c:d9:04:ad:b4:1d:
37:73:fa:ca:e0:58:de:f4:5e:65:70:52:80:3e:ba:
56:02:b3:0c:b5:0a:e8:cb:42:bf:b9:32:d2:70:50:
f1:91:26:92:cd:34:11:f8:99:be:37:0f:8e:c6:16:
44:6c:eb:1f:c1:11:fc:87:39:0a:f4:df:fd:75:9d:
9f:ca:b1:64:3a:b9:9c:7e:86:c7:c3:2e:8b:2d:48:
a3:bc:25:41:f1:80:ad:0b:f9:95:63:dd:d7:74:4c:
a9:9b:78:a2:0f:27:b4:1c:77:6d:c7:3a:99:82:05:
8f:b4:33:0c:57:7b:61:5a:d9:e5:3f:8c:c0:99:7f:
07:b4:19:c2:cf:6e:5b:34:5a:94:3f:36:b5:8c:bc:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:A4:8E:6A:1E:26:0A:85:F8:E6:B4:29:89:30:E7:22:5D:4D:D4
X509v3 Authority Key Identifier:
keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/m4-kjmoeJgqF-Oa0KYkw5yJdTdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.248.0/22
193.104.52.0/24
194.107.127.0/24
IPv6:
2a06:cdc0:2006::-2a06:cdc0:2009:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
28:9b:80:6f:5c:81:e3:70:38:eb:72:0e:aa:7d:92:ac:88:17:
34:4f:52:52:2e:8e:19:bd:0f:6a:66:a6:a5:74:db:44:6d:bb:
27:5c:c2:5e:33:46:61:cf:59:10:37:d5:ef:97:e0:34:2f:5e:
2a:d1:67:b2:cd:19:cd:9b:e1:fe:71:55:42:56:fd:31:af:d4:
9d:d7:d1:68:df:5a:5a:4a:b5:3c:45:82:e5:3a:ea:48:6f:11:
9b:0c:f6:76:55:52:fd:a9:9a:3b:26:bf:f2:e1:0c:06:b9:1d:
7c:c4:48:e7:df:14:4f:6c:08:ed:56:4e:f1:c8:1f:21:f9:e2:
51:03:85:15:82:f3:a3:0a:ee:54:53:9f:f8:b0:db:1f:14:4d:
1d:e0:07:22:e9:e0:f3:29:38:15:7f:9d:e4:fe:3c:dc:a8:03:
53:d7:dd:81:27:45:57:17:ea:f2:86:d3:66:8e:1f:88:80:53:
01:33:05:af:bf:94:53:a2:15:41:96:41:a2:b4:12:85:59:a1:
4b:56:58:88:90:e1:04:1b:f1:e6:f5:97:21:f2:ff:e7:9e:ba:
9c:f7:70:29:60:31:4c:4e:f1:67:32:ef:39:c7:0a:c0:de:3a:
31:b6:a1:e2:7f:b3:66:b7:37:bb:76:50:40:b6:e8:08:e4:51:
11:ae:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:38 2023 by rpki-client on console.sobornost.net