Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/sbSxHENgs_lg24updWGAYqqOI5A.roa
File: sbSxHENgs_lg24updWGAYqqOI5A.roa (raw, json)
Hash identifier: zUqdFgqY/8FnMDijhzVjsjH23X5OKBto3ocqJSQSjEM=
Subject key identifier: B1:B4:B1:1C:43:60:B3:F9:60:DB:8B:A9:75:61:80:62:AA:8E:23:90
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 0181F7897C133C4A6BECBABF58CA1D4FE480
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/sbSxHENgs_lg24updWGAYqqOI5A.roa
Signing time: Wed 13 Jul 2022 12:29:51 +0000
ROA not before: Wed 13 Jul 2022 12:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9120
IP address blocks: 212.97.136.0/22 maxlen: 22
212.97.144.0/20 maxlen: 20
92.43.88.0/21 maxlen: 21
185.238.192.0/22 maxlen: 22
185.221.246.0/23 maxlen: 23
80.70.8.0/21 maxlen: 21
2a04:3f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:89:7c:13:3c:4a:6b:ec:ba:bf:58:ca:1d:4f:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Jul 13 12:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1b4b11c4360b3f960db8ba975618062aa8e2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:cf:ea:a6:e0:12:93:3e:34:94:e0:95:58:
c3:15:26:9a:b8:4c:b6:9e:10:01:ba:1a:3f:b0:a5:
56:0e:a8:a9:b6:dc:f7:f3:5b:57:f3:d3:77:a4:3a:
aa:c6:fa:11:87:02:70:df:43:c2:00:a3:5e:af:cb:
e9:7a:78:b6:30:94:93:1f:b6:46:56:43:12:b8:64:
b4:0d:18:c0:c9:93:1d:55:90:fe:e9:a9:9a:ab:a4:
28:dc:19:01:5e:a6:6d:c1:71:f7:54:cc:d1:d4:da:
47:71:1f:74:10:18:e9:44:a6:0f:0c:4a:bf:78:36:
f1:d7:4c:d7:93:be:1b:47:4a:12:07:30:17:d0:4e:
c4:37:be:87:91:ec:7e:a1:65:70:62:b2:40:33:5d:
01:9a:80:02:14:e7:bb:1a:ab:63:27:24:42:9b:3d:
a8:a1:c0:bf:60:33:32:8b:1a:61:bb:ca:1f:15:02:
e4:5e:28:ad:50:1f:3d:71:87:78:34:55:a9:91:f6:
e7:66:21:16:69:e1:2c:ac:a7:87:d4:77:9d:a1:9b:
8b:26:5d:42:70:b1:1a:82:82:80:ec:71:ee:e5:8f:
0a:f1:eb:a7:a9:a2:d2:e0:45:45:bc:65:0f:4a:4c:
39:41:5a:68:9c:b9:11:fd:4b:9c:00:0a:ab:52:2f:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:B1:1C:43:60:B3:F9:60:DB:8B:A9:75:61:80:62:AA:8E:23:90
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/sbSxHENgs_lg24updWGAYqqOI5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.8.0/21
92.43.88.0/21
185.221.246.0/23
185.238.192.0/22
212.97.136.0/22
212.97.144.0/20
IPv6:
2a04:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
9a:39:dd:a0:d9:4c:2a:bb:6e:e8:c9:c1:0f:8d:4e:ce:85:a8:
ae:5d:ab:07:7e:f6:a5:47:d8:e9:99:37:05:5c:98:e6:30:8e:
4e:91:58:53:9f:c0:ea:79:40:29:c2:9d:ed:46:37:d1:15:ec:
69:02:34:82:55:c7:84:63:6c:5a:d3:2c:1f:49:9e:d4:cf:0c:
cd:4a:7e:8e:d9:f1:a3:5c:a5:8f:56:66:de:dd:80:4d:c6:95:
58:62:3b:83:71:ff:93:2c:3b:87:86:84:c8:05:2f:5e:1d:05:
c2:b1:ca:04:6f:9e:26:6a:f3:72:2e:b3:3b:a4:42:6b:ba:8d:
ce:6b:4e:1d:ff:87:54:2f:ea:14:7a:af:2b:c5:d3:d7:7a:a3:
2c:ed:4c:8d:16:b5:32:44:46:ad:49:4c:2e:65:90:a5:08:b0:
ad:87:53:c3:18:ae:56:b1:89:cc:c3:71:e2:5d:6d:21:9f:84:
95:f2:9a:8d:e5:71:f4:5e:b9:ca:f9:3a:e7:ff:c2:02:5e:c5:
92:c8:95:a9:09:a2:97:4c:e7:17:0b:82:f5:d7:8a:a7:c5:ac:
9a:fa:db:d8:47:33:1b:7b:de:0f:74:c3:f8:73:2b:d9:31:2a:
5a:31:94:b5:78:50:95:55:5f:39:37:40:f1:48:8c:a4:2a:4d:
57:d2:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net