Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/i_W8dZx4p_1iqhHXxkKXWX5r8a4.roa
File: i_W8dZx4p_1iqhHXxkKXWX5r8a4.roa (raw, json)
Hash identifier: ay+jBdAzIAjH5hBdIwC6euy+v7lXm0JwqPtYu22slFU=
Subject key identifier: 8B:F5:BC:75:9C:78:A7:FD:62:AA:11:D7:C6:42:97:59:7E:6B:F1:AE
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 08EA8A6E
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/i_W8dZx4p_1iqhHXxkKXWX5r8a4.roa
Signing time: Sat 01 Jan 2022 16:11:34 +0000
ROA not before: Sat 01 Jan 2022 16:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197692
IP address blocks: 185.131.0.0/22 maxlen: 24
31.22.120.0/21 maxlen: 24
2a02:6f00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149588590 (0x8ea8a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jan 1 16:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bf5bc759c78a7fd62aa11d7c64297597e6bf1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:9b:47:d1:4d:a3:33:dd:b6:b4:7f:4f:a9:
27:8d:57:18:49:9a:16:d8:d6:30:e8:81:40:99:47:
81:8d:07:43:15:16:50:ad:ff:d5:12:f1:7f:9e:74:
6b:c7:bf:18:e5:3d:76:6b:cc:2c:8a:80:65:e4:a5:
fc:eb:dc:b8:86:db:2c:8b:e3:a8:16:8c:7c:c2:37:
92:4f:43:fa:a9:41:40:e7:c8:8e:60:b6:25:da:82:
39:9d:2c:03:cc:b8:9c:26:df:71:95:14:63:5f:31:
21:b5:ba:c2:5e:95:23:47:47:17:0c:ae:a3:1e:4f:
47:d1:4f:ea:69:08:f2:0d:af:14:3c:95:1a:c2:39:
e3:86:0d:10:09:bf:52:4a:96:0f:ba:a4:64:d6:ea:
5c:99:ba:db:5d:67:3d:d0:d6:24:22:4c:53:f8:5b:
42:e2:a8:ad:ce:fd:d8:0c:c9:8d:97:c6:56:64:08:
3c:db:09:9c:07:4a:06:8d:7e:f0:6b:44:a0:4e:3e:
08:8f:cd:71:e6:c7:31:44:37:bd:b2:1a:88:90:27:
ec:76:00:da:be:68:cb:4f:e4:72:07:a9:5a:e8:82:
ff:87:90:9d:11:bb:a3:e6:d5:bc:ea:cd:bc:11:ee:
94:84:97:e6:36:36:b1:d7:74:58:df:fb:55:98:1e:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:BC:75:9C:78:A7:FD:62:AA:11:D7:C6:42:97:59:7E:6B:F1:AE
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/i_W8dZx4p_1iqhHXxkKXWX5r8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.120.0/21
185.131.0.0/22
IPv6:
2a02:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
17:cc:bd:08:66:d5:6f:16:b7:08:46:d3:76:aa:3e:9b:ef:0d:
7a:e1:a3:ed:bd:00:dc:f3:da:50:72:83:9b:0b:4d:6a:74:2a:
90:36:95:19:c1:e6:bb:32:73:fb:35:7f:33:e5:bb:ac:c4:e5:
03:3c:b4:8d:8f:3e:f3:ba:07:82:f4:56:b6:c7:87:04:47:e1:
a0:91:4f:f0:e2:7c:c9:4f:66:51:6e:82:02:15:37:1a:2b:7d:
23:dd:24:d1:c7:75:17:f8:33:c2:3e:a7:91:e6:2d:b7:cc:8a:
32:16:72:fd:64:11:42:42:da:ed:65:be:d0:a1:04:29:ac:53:
a0:93:19:a7:aa:39:93:a4:95:6b:34:d5:62:2e:fd:b5:bd:ed:
68:d6:79:9d:ae:55:9e:4d:96:09:1d:7d:1c:da:c9:d2:2e:d3:
71:60:1a:96:36:ea:f7:3d:d8:e1:a6:03:55:d3:3c:0c:56:4e:
03:88:32:8a:6d:01:27:57:65:0b:e5:ce:ad:5f:b6:7f:ef:8f:
a1:c2:dc:ce:26:e3:eb:74:bf:62:5f:b4:48:83:90:25:72:fe:
96:53:3a:0c:19:13:df:97:d1:20:49:05:a0:0d:d1:2b:28:6f:
3e:d7:dc:17:3d:53:52:78:3e:a5:7c:34:81:b1:49:12:4d:4e:
a1:5b:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net