Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/7ddSh0MK1I8SmsCH028BSRo024Q.roa
File: 7ddSh0MK1I8SmsCH028BSRo024Q.roa (raw, json)
Hash identifier: Dmsr2mbtbymtIBJOb5smqrdu8tk8hP0kCayrmFIgcc0=
Subject key identifier: ED:D7:52:87:43:0A:D4:8F:12:9A:C0:87:D3:6F:01:49:1A:34:DB:84
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 0C00D91A
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/7ddSh0MK1I8SmsCH028BSRo024Q.roa
Signing time: Sat 01 Jan 2022 01:57:32 +0000
ROA not before: Sat 01 Jan 2022 01:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58067
IP address blocks: 176.114.16.0/20 maxlen: 20
176.114.17.0/24 maxlen: 24
176.114.16.0/24 maxlen: 24
176.114.24.0/24 maxlen: 24
176.114.18.0/24 maxlen: 24
176.114.19.0/24 maxlen: 24
176.114.20.0/24 maxlen: 24
176.114.21.0/24 maxlen: 24
185.214.76.0/22 maxlen: 22
176.114.22.0/24 maxlen: 24
176.114.23.0/24 maxlen: 24
176.114.31.0/24 maxlen: 24
176.114.25.0/24 maxlen: 24
176.114.26.0/24 maxlen: 24
176.114.27.0/24 maxlen: 24
176.114.28.0/24 maxlen: 24
176.114.29.0/24 maxlen: 24
176.114.30.0/24 maxlen: 24
2a0b:97c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201382170 (0xc00d91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jan 1 01:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edd75287430ad48f129ac087d36f01491a34db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:98:f3:bf:b2:df:7c:19:64:d2:5a:6a:30:
2b:95:20:f9:7c:07:28:82:44:cf:02:b1:1c:76:69:
87:1c:9d:5b:84:7f:89:9c:43:c3:41:3b:28:9b:9f:
dd:bc:0d:83:77:99:ee:c6:b5:22:54:7b:d3:a3:5f:
be:08:17:38:d2:f5:09:f3:e2:b2:c8:ad:65:84:57:
27:04:c2:7d:4e:3d:38:da:9b:03:38:29:64:de:53:
c6:c6:73:21:ed:5e:af:be:51:5b:e2:41:54:2c:17:
51:1c:52:6c:4e:47:fc:dd:17:ba:05:b6:27:12:c7:
4a:76:b8:c4:25:93:96:aa:9a:c5:73:13:d3:4f:af:
2a:70:e1:29:4a:b0:ae:5d:8d:7d:3f:63:ff:97:f9:
a5:04:d7:72:06:1f:c6:07:4e:d1:3a:63:9c:2c:00:
87:3d:cf:90:85:00:fa:4c:86:ed:1e:06:af:53:ee:
68:20:0a:9c:16:97:17:7e:ef:2c:35:0f:09:4d:c8:
20:65:b4:5d:12:d5:4f:25:da:60:54:a0:17:a1:4a:
67:db:ba:ea:42:18:88:75:19:f8:36:cc:15:00:49:
43:33:51:b3:52:25:20:31:8d:29:f4:2f:a4:b0:87:
7e:fd:ac:3e:84:c3:14:84:fd:0f:da:74:c4:d8:e9:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:52:87:43:0A:D4:8F:12:9A:C0:87:D3:6F:01:49:1A:34:DB:84
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/7ddSh0MK1I8SmsCH028BSRo024Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.16.0/20
185.214.76.0/22
IPv6:
2a0b:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:8e:55:f8:f8:0c:a9:2d:c2:6e:d6:ac:11:ad:e5:d4:7f:bb:
dc:ac:7f:44:15:bd:14:4a:14:d3:be:6d:7f:96:7b:a4:75:9e:
f9:bc:42:fd:99:c0:df:8e:1d:b5:67:50:5a:d8:dc:29:bb:ba:
b3:a1:f3:7f:74:51:9d:b2:aa:94:37:a9:e7:6a:ea:c2:03:49:
b2:52:5b:f9:22:ad:80:ac:a4:7e:57:c8:5e:03:b6:c2:ce:17:
96:f8:14:cd:42:ad:33:ac:a7:30:15:83:57:e8:b4:8e:8d:b9:
c7:ef:3d:9d:b1:27:65:a6:16:32:37:b0:98:0f:65:d9:67:83:
00:1b:42:09:8e:af:73:33:83:ec:87:56:0a:16:e0:72:0f:77:
3f:fe:66:71:31:16:cd:d4:ab:41:ab:f0:92:72:15:f1:3f:d3:
0f:a2:7d:c7:ea:6a:ab:e2:2c:ce:d4:62:67:75:42:a1:56:0e:
01:60:2d:7a:93:51:c3:32:f0:b3:ec:82:45:82:b0:59:b7:cd:
cf:78:c2:c8:61:c0:a6:a6:2b:8e:46:2f:54:f8:b6:3e:ca:f5:
1c:ff:97:b7:4c:24:16:10:ac:03:c6:14:e5:20:58:29:04:9b:
8c:9f:0d:a0:45:2b:8c:3f:40:58:86:db:64:cc:e3:eb:70:cf:
17:f8:d5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net