Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/BoXdhKR4E8SPxOw0oZnO3DR9Gg0.roa
File: BoXdhKR4E8SPxOw0oZnO3DR9Gg0.roa (raw, json)
Hash identifier: 71dIua7Pv1kRbJQA9eI+lh8Y1oHuOwbovpUcfgPAmsQ=
Subject key identifier: 06:85:DD:84:A4:78:13:C4:8F:C4:EC:34:A1:99:CE:DC:34:7D:1A:0D
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 1B13FDDE
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/BoXdhKR4E8SPxOw0oZnO3DR9Gg0.roa
Signing time: Sat 01 Jan 2022 06:02:33 +0000
ROA not before: Sat 01 Jan 2022 06:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48309
IP address blocks: 188.136.137.0/24 maxlen: 24
188.136.136.0/24 maxlen: 24
188.136.139.0/24 maxlen: 24
188.136.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454295006 (0x1b13fdde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Jan 1 06:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0685dd84a47813c48fc4ec34a199cedc347d1a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:2c:0b:3d:f3:d6:8d:91:3e:42:a1:d0:47:
70:03:77:03:d1:eb:a9:29:b5:de:3e:db:b0:ac:f4:
c3:bf:00:9d:e1:59:c6:1d:f5:29:80:cc:92:6b:5e:
56:57:ee:9a:3d:f1:a2:d8:4d:3e:3a:6b:0d:a6:95:
61:f7:95:e3:66:20:45:e4:79:39:51:e2:ef:c3:1c:
a5:05:b5:82:68:76:ba:68:b0:bf:ef:b9:66:ab:d4:
5a:02:35:92:70:21:43:aa:6c:1a:fe:f9:e9:d6:3c:
1d:11:24:c8:06:f0:6e:0b:13:26:34:15:b7:ea:1f:
88:6a:24:76:65:72:b3:96:0a:e1:83:7a:22:e0:2c:
9a:36:8f:3b:36:1e:5b:fb:93:96:8e:3c:68:08:e9:
4e:65:d8:7b:20:24:2c:a1:7d:c8:92:ac:18:87:9e:
4e:72:54:e3:2f:66:3a:53:2d:ff:26:5b:f0:20:58:
9c:ad:91:12:1f:58:43:18:76:76:31:51:37:3c:20:
09:36:ac:a7:25:0a:e2:38:d2:60:f5:f6:7b:06:df:
31:a8:74:81:8a:a9:55:84:90:d1:a4:22:e2:34:e1:
8a:c8:e9:4a:7e:53:b2:60:c3:5e:b4:6a:46:90:45:
24:14:3c:6e:b1:be:86:fb:aa:39:5b:59:f1:83:69:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:DD:84:A4:78:13:C4:8F:C4:EC:34:A1:99:CE:DC:34:7D:1A:0D
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/BoXdhKR4E8SPxOw0oZnO3DR9Gg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.136.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:4e:5a:ba:2d:38:25:55:02:a6:76:73:58:f4:3b:4d:26:43:
50:a0:ec:8e:59:87:7a:0e:84:71:96:98:36:78:23:29:5e:8e:
84:8e:86:10:57:0d:6a:06:b0:42:ed:8c:fb:9f:1b:71:dc:07:
8a:03:1e:b1:c1:f8:9e:fd:cc:7f:9a:71:25:94:8b:9e:87:75:
c8:05:a3:65:d7:99:33:95:0d:05:87:b9:71:78:b0:60:e5:19:
4e:c2:b8:69:45:09:0c:65:fe:ee:12:2d:fb:83:ec:0f:dd:4c:
a1:fa:7a:fb:c5:43:85:55:84:92:6d:92:b7:12:62:21:78:83:
bd:2c:fb:34:c6:80:9f:fd:a0:88:13:57:99:60:dd:4e:73:c7:
ef:f9:7d:0c:83:37:61:f9:02:76:e3:75:a1:d0:1c:ef:46:68:
37:c2:f3:7a:e5:f5:5e:d5:9c:a7:64:b3:2d:0d:21:18:94:3a:
5c:11:b4:3d:20:51:79:4b:1d:ea:d5:cd:13:bf:a6:bd:c1:d2:
fa:d8:7c:35:62:ca:b3:0d:8e:a9:89:8e:ea:0c:d1:53:6e:ce:
36:bd:e8:51:b4:97:41:7d:3f:41:f8:0a:8b:08:b0:d5:9f:f7:
11:f3:2c:c5:d8:09:70:70:a7:af:4f:d1:7e:da:f1:af:05:32:
f8:e0:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net