Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/SKn_ntApjx1MFosg7IFD3Y2Yuio.roa
File: SKn_ntApjx1MFosg7IFD3Y2Yuio.roa (raw, json)
Hash identifier: CGN7xxVCdkX1gAenLRIYuEfIdb6j28GJJDpWX3lHFfQ=
Subject key identifier: 48:A9:FF:9E:D0:29:8F:1D:4C:16:8B:20:EC:81:43:DD:8D:98:BA:2A
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0BF612B9
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/SKn_ntApjx1MFosg7IFD3Y2Yuio.roa
Signing time: Fri 20 May 2022 12:29:29 +0000
ROA not before: Fri 20 May 2022 12:29:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8427
IP address blocks: 31.47.112.0/20 maxlen: 20
212.21.16.0/20 maxlen: 20
79.134.0.0/19 maxlen: 19
79.134.0.0/24 maxlen: 24
79.134.24.0/21 maxlen: 21
178.18.96.0/20 maxlen: 20
178.18.96.0/21 maxlen: 21
178.18.104.0/21 maxlen: 21
212.21.0.0/19 maxlen: 19
109.201.192.0/20 maxlen: 20
109.201.192.0/19 maxlen: 19
46.167.64.0/18 maxlen: 18
109.201.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200676025 (0xbf612b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: May 20 12:29:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48a9ff9ed0298f1d4c168b20ec8143dd8d98ba2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:fb:ae:91:c0:82:34:f1:96:ba:83:46:22:
02:fc:d3:52:d4:1c:f9:5e:f7:6b:69:6f:39:e7:7b:
4c:b4:20:ec:20:ad:1e:db:ce:e3:26:3e:d5:cb:7b:
d4:80:cc:12:13:b9:43:b7:10:88:b5:55:d4:1b:54:
23:15:0a:a2:54:2e:1b:25:37:30:fa:bf:25:af:35:
98:9e:ea:72:da:59:e8:2f:38:c8:25:aa:f9:d7:d0:
e8:87:1f:c0:2c:05:b7:88:77:e5:5e:fc:ce:93:69:
cc:d4:9c:03:06:f1:91:dd:2d:fd:99:a7:94:dd:82:
85:c2:69:3d:bb:03:a1:42:f2:2b:b1:44:a7:da:1a:
ed:92:50:42:9e:af:b5:2a:64:cd:98:2f:b1:46:0b:
c3:23:98:ff:67:7c:46:8b:e9:41:b3:47:91:2b:52:
a0:79:4e:71:5e:45:11:27:7e:e4:8a:c7:42:41:9f:
04:10:22:e0:68:15:54:48:95:2b:d8:0d:df:44:e1:
92:22:9b:03:d9:d3:f5:9e:16:af:a2:3d:32:d5:44:
be:6c:50:fb:a7:6e:8f:a1:ed:84:a8:30:fd:33:04:
63:db:b5:8c:6a:f5:01:50:f1:b2:c5:f3:b0:d1:1f:
ca:eb:05:b0:e7:6e:25:10:38:7f:7e:e1:63:6f:22:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:FF:9E:D0:29:8F:1D:4C:16:8B:20:EC:81:43:DD:8D:98:BA:2A
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/SKn_ntApjx1MFosg7IFD3Y2Yuio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.112.0/20
46.167.64.0/18
79.134.0.0/19
109.201.192.0/19
178.18.96.0/20
212.21.0.0/19
Signature Algorithm: sha256WithRSAEncryption
39:69:07:f5:73:a7:11:4d:d3:85:8d:a6:28:10:29:05:3b:b2:
3c:56:fc:ef:d7:4e:3c:93:05:17:17:dc:15:9f:09:3f:22:77:
59:dc:01:76:e0:9d:3d:3d:14:86:26:bd:70:26:78:e5:3b:43:
23:47:84:ce:5d:cd:5a:de:24:f4:50:04:2e:ff:da:e5:fc:8f:
c9:59:9a:ab:67:d3:d0:1c:a6:22:9c:90:f3:28:4f:7c:bb:bd:
64:c5:a9:77:3d:cf:91:74:59:57:a8:22:09:bb:00:06:84:7b:
a0:86:ce:cc:f0:8a:4d:d8:1d:dc:e2:6f:6f:fc:95:17:d8:2b:
e7:1b:67:3e:5c:fa:2f:2c:7b:c5:a3:9c:4b:78:11:b9:c2:3f:
50:39:94:d7:66:98:c1:bf:4d:27:fb:19:f6:87:44:bb:88:e3:
9f:4f:a7:ea:e0:21:29:fb:17:3a:9e:c9:8d:97:69:00:00:02:
ed:3a:ce:d7:62:2f:9d:b2:36:8c:c9:55:fb:66:27:27:fc:02:
64:87:01:c0:e9:aa:79:bd:16:4f:b4:4b:f9:4b:24:c0:0c:22:
34:58:f7:40:07:6e:d6:9e:49:0b:7e:43:82:39:a5:45:ee:5d:
d0:b2:b4:e0:90:9c:c6:18:cb:8d:b7:78:3b:1f:23:aa:3e:c8:
77:e5:31:bc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEC/YSuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZGFjODMwY2NhYTc0NzgzZGQ5NjFmYWIyNDFhMjI4ZDdjYzZmODA4MB4XDTIyMDUy
MDEyMjkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhhOWZmOWVkMDI5
OGYxZDRjMTY4YjIwZWM4MTQzZGQ4ZDk4YmEyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJyo+66RwII08Za6g0YiAvzTUtQc+V73a2lvOed7TLQg7CCt
HtvO4yY+1ct71IDMEhO5Q7cQiLVV1BtUIxUKolQuGyU3MPq/Ja81mJ7qctpZ6C84
yCWq+dfQ6IcfwCwFt4h35V78zpNpzNScAwbxkd0t/ZmnlN2ChcJpPbsDoULyK7FE
p9oa7ZJQQp6vtSpkzZgvsUYLwyOY/2d8RovpQbNHkStSoHlOcV5FESd+5IrHQkGf
BBAi4GgVVEiVK9gN30ThkiKbA9nT9Z4Wr6I9MtVEvmxQ+6duj6HthKgw/TMEY9u1
jGr1AVDxssXzsNEfyusFsOduJRA4f37hY28iWgUCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRIqf+e0CmPHUwWiyDsgUPdjZi6KjAfBgNVHSMEGDAWgBStrIMMyqdHg92W
H6skGiKNfMb4CDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JheURETXFuUjRQZGxoLXJKQm9palh6Ry1BZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvMzI1YzhkLWQzNjgtNGVlZS05Y2E4LTkyOWY3ZDYzNWY0Yi8x
L1NLbl9udEFwangxTUZvc2c3SUZEM1kyWXVpby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
MzI1YzhkLWQzNjgtNGVlZS05Y2E4LTkyOWY3ZDYzNWY0Yi8xL3JheURETXFuUjRQ
ZGxoLXJKQm9palh6Ry1BZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEBB8vcAMEBi6nQAMEBU+GAAMEBW3J
wAMEBLISYAMEBdQVADANBgkqhkiG9w0BAQsFAAOCAQEAOWkH9XOnEU3ThY2mKBAp
BTuyPFb879dOPJMFFxfcFZ8JPyJ3WdwBduCdPT0Uhia9cCZ45TtDI0eEzl3NWt4k
9FAELv/a5fyPyVmaq2fT0BymIpyQ8yhPfLu9ZMWpdz3PkXRZV6giCbsABoR7oIbO
zPCKTdgd3OJvb/yVF9gr5xtnPlz6Lyx7xaOcS3gRucI/UDmU12aYwb9NJ/sZ9odE
u4jjn0+n6uAhKfsXOp7JjZdpAAAC7TrO12IvnbI2jMlV+2YnJ/wCZIcBwOmqeb0W
T7RL+UskwAwiNFj3QAdu1p5JC35DgjmlRe5d0LK04JCcxhjLjbd4Ox8jqj7Id+Ux
vA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:22 2023 by rpki-client on console.sobornost.net