Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/zoN4HH6c0YvjggDOQcyBWGfDROw.roa
File: zoN4HH6c0YvjggDOQcyBWGfDROw.roa (raw, json)
Hash identifier: ocRBN8P7Hu1ja+B4oFF7pPPAc3kHsO6toxLFvPlCUqE=
Subject key identifier: CE:83:78:1C:7E:9C:D1:8B:E3:82:00:CE:41:CC:81:58:67:C3:44:EC
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 09A0C70E
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/zoN4HH6c0YvjggDOQcyBWGfDROw.roa
Signing time: Tue 08 Feb 2022 03:07:39 +0000
ROA not before: Tue 08 Feb 2022 03:07:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47952
IP address blocks: 91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
2a0a:c4c0::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161531662 (0x9a0c70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Feb 8 03:07:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce83781c7e9cd18be38200ce41cc815867c344ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:b8:65:74:51:3d:0d:bc:a9:4a:9f:04:27:
9c:41:95:85:95:1b:49:e9:46:d3:c8:4b:1f:74:e2:
79:a3:bc:35:82:a2:4a:e9:a1:2e:b5:a8:24:74:57:
dd:39:d1:fd:03:11:43:bb:43:88:8b:f3:4a:8b:d1:
93:7d:89:8d:81:00:94:b9:f0:39:aa:c7:17:9a:a2:
45:6b:6d:dd:1b:5d:51:09:a7:c8:e9:91:c4:27:0c:
eb:3c:95:db:0b:df:d9:b7:f9:e6:5d:d8:19:6c:3e:
ed:78:07:0e:13:cc:0a:0b:5a:e0:8d:73:37:b8:14:
8e:5b:d3:4a:21:42:43:4a:da:1e:be:7e:31:c1:f2:
15:52:8a:19:ed:12:50:69:a2:47:c5:51:13:81:db:
75:67:4f:27:f8:c8:85:3c:a7:bd:51:76:6d:50:25:
b7:5b:cb:f2:fb:a9:a2:a3:06:3a:ae:00:fc:c3:f5:
27:03:98:f1:e0:bc:f4:ea:e0:22:03:9f:35:41:77:
b7:6d:e9:4c:c7:51:52:0c:e3:ff:07:2a:61:d8:37:
c1:a5:51:f8:e7:b3:0c:60:d6:0e:4a:1e:45:01:30:
6e:15:71:4a:87:6e:8a:70:22:c4:f3:73:32:91:e8:
52:a7:d5:b4:8d:64:c0:28:9c:bd:94:5d:d2:cd:fb:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:78:1C:7E:9C:D1:8B:E3:82:00:CE:41:CC:81:58:67:C3:44:EC
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/zoN4HH6c0YvjggDOQcyBWGfDROw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.52.0/24
91.194.54.0/24
185.201.212.0/22
IPv6:
2a0a:c4c0::/64
Signature Algorithm: sha256WithRSAEncryption
12:67:40:48:a0:55:11:f8:a9:b6:c4:60:e3:31:2c:68:dc:44:
f7:65:80:1d:6e:78:21:01:10:09:31:9e:77:bd:3e:f4:9b:31:
f8:db:82:a0:7d:4f:71:92:f6:7c:6f:36:6f:a0:24:42:67:5b:
d7:b3:f8:0b:2c:80:e0:3a:22:1e:5f:73:c8:7f:7a:67:d5:61:
50:84:43:c8:4c:a4:45:12:30:15:97:23:e7:93:da:ef:cf:e5:
ad:a0:5f:97:78:62:e7:fa:a6:02:8f:68:5d:82:ae:96:31:97:
1d:80:76:45:0b:b5:74:7d:b8:81:64:13:38:e5:0b:22:cd:55:
b7:aa:48:97:31:a6:70:6f:74:50:4d:3a:cf:3c:d2:89:2d:6b:
36:6e:30:81:5f:e3:95:89:40:f6:9b:b6:e7:1a:68:23:8b:26:
3d:dd:91:df:8c:ee:be:9a:d1:51:66:3b:5e:55:38:ab:5e:10:
84:80:94:9f:b7:2d:6f:ae:a8:b5:39:5e:ed:63:07:fc:82:47:
a8:f7:81:76:ad:55:08:72:ad:99:3e:31:d4:27:f9:c0:d9:d3:
af:3a:4a:61:37:44:59:7f:96:cc:5a:02:f4:05:9d:b6:b0:cf:
ec:04:70:59:61:13:f4:46:cb:40:07:61:1d:fe:c5:33:13:de:
e8:73:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:29 2023 by rpki-client on console.sobornost.net