Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/5J4cSDTJIZJ6V5ySQnvTS1H8Xr8.roa
File: 5J4cSDTJIZJ6V5ySQnvTS1H8Xr8.roa (raw, json)
Hash identifier: HmScwicvmqIP+VjY7GekjnOnifeWUm1W5xc5aFhJ4EM=
Subject key identifier: E4:9E:1C:48:34:C9:21:92:7A:57:9C:92:42:7B:D3:4B:51:FC:5E:BF
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 02D66238
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/5J4cSDTJIZJ6V5ySQnvTS1H8Xr8.roa
Signing time: Sat 01 Jan 2022 05:53:30 +0000
ROA not before: Sat 01 Jan 2022 05:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59497
IP address blocks: 188.191.233.0/24 maxlen: 24
188.191.232.0/21 maxlen: 21
188.191.232.0/24 maxlen: 24
188.191.237.0/24 maxlen: 24
188.191.234.0/24 maxlen: 24
188.191.235.0/24 maxlen: 24
188.191.239.0/24 maxlen: 24
194.8.144.0/24 maxlen: 24
194.8.145.0/24 maxlen: 24
194.8.144.0/22 maxlen: 22
194.8.147.0/24 maxlen: 24
194.8.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47604280 (0x2d66238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Jan 1 05:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e49e1c4834c921927a579c92427bd34b51fc5ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:f5:99:74:f3:54:f5:fc:3f:32:bd:af:a9:
3d:42:25:0f:78:2d:34:35:bd:bc:f1:e2:53:4c:25:
da:d1:b0:50:62:95:dc:bd:48:5e:2c:cf:bb:b9:14:
96:33:c6:45:a6:8f:61:0b:f3:00:b9:0b:c4:50:76:
a1:19:4b:d0:75:b4:94:0f:c6:cf:29:54:3d:3e:87:
cc:fd:0c:e3:3f:28:04:b2:6b:2d:d4:2e:9e:3b:80:
85:08:2e:fa:b9:38:a6:7a:67:59:ea:8b:f5:d3:33:
92:88:b5:4c:db:34:b9:a1:9c:db:b5:de:4e:a1:41:
5e:03:6f:3e:9d:e8:c9:d7:2b:84:7e:0c:54:94:c6:
52:20:11:e4:92:94:80:2d:4a:38:4c:cd:90:f9:7e:
e8:08:5e:ab:d5:ec:55:40:96:13:ed:2f:09:e9:91:
f9:7c:c9:aa:98:e6:93:d1:77:1b:97:df:6a:39:d6:
7a:48:eb:cc:4c:90:66:ca:26:88:70:b1:12:18:55:
da:fc:8e:e8:44:73:0c:31:f3:cc:51:56:5f:7f:84:
24:97:4a:ad:07:71:d0:ea:24:85:d9:d8:8f:9e:dc:
48:be:de:7d:51:92:ea:29:2b:34:dd:50:1a:f2:cd:
cc:76:2e:02:6b:2a:39:6a:c9:f2:54:fa:77:bb:ac:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:1C:48:34:C9:21:92:7A:57:9C:92:42:7B:D3:4B:51:FC:5E:BF
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/5J4cSDTJIZJ6V5ySQnvTS1H8Xr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.232.0/21
194.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
49:97:a5:dc:05:74:5b:5c:f6:c7:cf:75:d1:cc:d6:23:e5:eb:
8b:82:c2:c7:b5:57:0f:c2:45:c4:a8:50:01:ac:a6:09:3b:5f:
8f:23:64:43:50:97:c2:66:c0:22:e4:c3:0a:05:c9:33:ae:82:
af:fe:6f:75:20:43:4a:80:46:ba:5d:37:a9:6d:e3:c4:2c:e8:
71:f6:7b:a5:cb:2a:5c:be:1c:67:f4:48:fc:ef:af:c4:bf:da:
cc:9a:b6:9a:b5:1b:c3:3e:5b:f6:18:de:72:a0:2c:55:ab:55:
8c:0c:dd:f0:05:10:ba:70:82:2f:ad:8e:54:83:28:68:43:ea:
27:2b:df:df:77:05:d5:12:f8:e8:07:ae:f5:a4:e2:9f:80:1f:
aa:a4:3f:5c:55:13:db:ef:c2:48:17:c8:e7:d8:63:e1:51:ac:
2f:07:55:2d:f6:4c:72:ad:a7:fe:8f:f6:99:99:e8:35:a7:bc:
ee:90:b7:91:96:5a:c6:e0:3e:d6:7e:8c:c8:1c:cb:41:2c:f7:
42:d8:3c:cb:1f:70:9a:e2:14:7f:0a:6d:be:fd:a2:9a:48:c1:
11:4e:1f:f1:a9:30:a5:fb:7e:23:9b:3a:b8:c7:88:24:e2:f6:
2f:9d:48:6b:5a:54:5c:12:35:a0:b7:3d:1c:59:61:52:d6:07:
18:4b:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net