Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/gEMIzXLHRPjctXnpMvwRgCstJj8.roa
File: gEMIzXLHRPjctXnpMvwRgCstJj8.roa (raw, json)
Hash identifier: g69khditDt4DW7uPkykwl8hHVXWoP2iiP2yrtewvZK0=
Subject key identifier: 80:43:08:CD:72:C7:44:F8:DC:B5:79:E9:32:FC:11:80:2B:2D:26:3F
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 0184A3824CB22C33EC9D05CDE17C76E02117
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/gEMIzXLHRPjctXnpMvwRgCstJj8.roa
Signing time: Wed 23 Nov 2022 08:02:16 +0000
ROA not before: Wed 23 Nov 2022 08:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60350
IP address blocks: 195.189.178.0/23 maxlen: 24
185.45.180.0/22 maxlen: 24
193.161.254.0/23 maxlen: 23
91.221.146.0/23 maxlen: 24
193.164.2.0/24 maxlen: 24
193.164.2.0/23 maxlen: 23
193.148.6.0/23 maxlen: 24
185.183.112.0/22 maxlen: 22
185.183.112.0/24 maxlen: 24
185.183.113.0/24 maxlen: 24
45.137.178.0/23 maxlen: 23
45.137.176.0/23 maxlen: 23
45.137.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:82:4c:b2:2c:33:ec:9d:05:cd:e1:7c:76:e0:21:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Nov 23 08:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=804308cd72c744f8dcb579e932fc11802b2d263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c0:f3:34:2f:0a:27:02:3d:ce:c8:81:12:36:
b3:f7:5a:37:c2:5e:3a:e0:5b:67:7f:bc:06:9f:9d:
75:a0:38:9a:60:d7:65:fa:70:e5:80:e5:b7:f4:e5:
31:3f:5a:23:38:a1:06:ee:0c:dc:bd:b8:23:89:49:
f2:da:77:69:49:ce:de:6f:f7:b6:9c:90:7d:ca:11:
68:1b:4a:f7:0a:5f:05:ed:c7:2b:9a:10:6c:6e:5a:
67:10:43:fc:13:7a:0d:b7:11:c5:89:67:b2:72:f7:
37:ee:09:90:15:03:d3:15:89:ae:c2:2e:2b:85:0c:
d0:57:86:d6:fe:38:5c:0c:0c:53:25:c0:14:8c:2a:
60:10:8c:48:da:53:ee:2d:3c:d9:8a:cd:7a:fb:5e:
c0:99:da:cf:68:9a:a0:9d:f5:b6:85:a2:11:c3:b6:
f0:13:40:91:c2:b7:d1:6e:32:04:a5:9c:b5:04:57:
73:d8:5e:8e:90:a6:97:82:01:af:8f:db:0e:33:28:
0c:7a:90:85:4a:9e:ff:64:14:51:62:55:0d:af:48:
eb:c4:13:77:58:4d:2b:aa:d3:61:1b:79:9c:07:de:
f8:86:ee:8b:c3:db:dc:1a:b7:7e:b3:98:2a:18:07:
b1:4f:1b:d1:f8:5a:13:63:78:96:98:a3:2c:e6:07:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:08:CD:72:C7:44:F8:DC:B5:79:E9:32:FC:11:80:2B:2D:26:3F
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/gEMIzXLHRPjctXnpMvwRgCstJj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.176.0/22
91.221.146.0/23
185.45.180.0/22
185.183.112.0/22
193.148.6.0/23
193.161.254.0/23
193.164.2.0/23
195.189.178.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:72:74:22:75:66:2f:ef:ea:05:0b:9f:f6:72:ae:03:75:8e:
d6:67:5f:b9:13:0a:c4:c4:7e:b3:64:b9:8b:5f:00:e2:b7:dd:
8b:b4:2a:af:7c:03:49:6c:0c:8f:e4:c3:cc:1f:46:7e:3f:6f:
25:31:7a:74:cf:78:4a:46:cd:69:7c:00:2e:a1:8c:27:72:6f:
c2:b5:20:bb:45:f2:c0:0f:79:d2:34:06:79:51:3c:5b:58:6d:
9a:56:b3:9a:6d:7f:dd:55:5f:a0:d2:35:55:c5:32:6b:13:66:
a0:4b:b1:60:a9:00:29:f1:d1:98:10:f1:ed:1b:c5:1b:27:35:
2e:4a:ce:c9:bc:07:21:db:1e:42:66:d0:c8:7e:4e:49:dd:7d:
57:15:d5:5c:55:4e:f7:de:fb:b4:99:39:bb:ac:72:29:c5:10:
25:b7:ae:53:e7:b7:ea:16:82:dd:2c:9e:82:5b:8e:65:b3:fa:
bc:89:d3:58:9e:64:4c:45:96:20:6c:75:4a:75:6f:f0:6e:5f:
9d:98:6b:3e:77:56:dc:85:b8:8e:34:ab:41:11:51:e6:3a:88:
7f:04:03:b5:29:a7:94:b1:c9:52:ee:6d:34:67:78:c5:85:eb:
f5:11:1a:79:7d:be:bc:7a:06:86:57:fa:86:3e:20:ce:b6:57:
6b:67:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net