Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/pkP_2Lbd5iNfF76S2Olvj0ozScE.roa
File: pkP_2Lbd5iNfF76S2Olvj0ozScE.roa (raw, json)
Hash identifier: fuCN0yZuYTLvw7lQ7P3NFgH1vV+gYtkgiZrOcQJ1ZqM=
Subject key identifier: A6:43:FF:D8:B6:DD:E6:23:5F:17:BE:92:D8:E9:6F:8F:4A:33:49:C1
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 0A173743
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/pkP_2Lbd5iNfF76S2Olvj0ozScE.roa
Signing time: Tue 08 Feb 2022 16:00:13 +0000
ROA not before: Tue 08 Feb 2022 16:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5466
IP address blocks: 194.125.192.0/19 maxlen: 19
95.44.0.0/15 maxlen: 15
82.141.192.0/18 maxlen: 18
217.183.0.0/16 maxlen: 16
83.174.160.0/19 maxlen: 19
195.7.32.0/19 maxlen: 19
194.106.128.0/19 maxlen: 19
194.125.128.0/18 maxlen: 18
51.171.0.0/16 maxlen: 16
159.134.0.0/16 maxlen: 24
185.57.112.0/22 maxlen: 22
83.70.0.0/15 maxlen: 15
62.77.160.0/19 maxlen: 19
213.94.128.0/17 maxlen: 17
213.190.128.0/19 maxlen: 19
86.40.0.0/13 maxlen: 24
2001:bb0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169293635 (0xa173743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Feb 8 16:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a643ffd8b6dde6235f17be92d8e96f8f4a3349c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:f1:f1:70:13:07:de:ce:17:87:a9:f9:ed:
cd:b4:8c:fb:4e:10:91:4b:d0:2e:93:25:e4:0d:e5:
15:21:c8:f6:97:4e:2f:39:02:3d:6a:0d:3f:7c:ac:
46:46:24:4e:50:e6:f9:0a:49:f5:7b:95:82:6f:fc:
b1:a7:d6:bd:ca:2b:ed:88:84:bb:55:44:a3:12:b5:
c0:e0:f0:37:ba:4a:80:ad:8b:8e:04:07:dd:36:5a:
70:10:00:1b:2e:49:4f:18:2c:37:86:5e:23:37:3e:
91:9c:d4:42:60:96:78:f8:15:0e:a6:e3:25:aa:e2:
dc:b4:90:99:5b:c0:14:61:a3:9d:d8:3b:5e:80:ed:
99:02:7d:b1:e5:b3:96:3d:d3:9a:e0:b2:2f:99:ba:
78:04:87:ac:1d:65:25:d1:e4:c6:26:4d:c9:71:6e:
f2:6e:58:15:54:0b:69:01:ca:57:44:23:62:bf:63:
01:91:8a:32:36:9a:b1:5c:b7:01:f7:9a:a1:d3:29:
15:5f:4b:88:03:48:43:a3:58:5b:6a:e0:54:90:6a:
f4:78:b8:c0:cb:8d:c0:34:ae:fa:ef:67:a9:c3:1f:
c8:0a:4d:cf:11:c5:c8:91:59:96:d7:be:96:6e:79:
7a:c3:79:e5:c7:40:32:c9:0e:84:61:4f:cd:a0:59:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:43:FF:D8:B6:DD:E6:23:5F:17:BE:92:D8:E9:6F:8F:4A:33:49:C1
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/pkP_2Lbd5iNfF76S2Olvj0ozScE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.171.0.0/16
62.77.160.0/19
82.141.192.0/18
83.70.0.0/15
83.174.160.0/19
86.40.0.0/13
95.44.0.0/15
159.134.0.0/16
185.57.112.0/22
194.106.128.0/19
194.125.128.0-194.125.223.255
195.7.32.0/19
213.94.128.0/17
213.190.128.0/19
217.183.0.0/16
IPv6:
2001:bb0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:79:86:0e:a2:89:72:3d:56:9b:98:7a:d1:55:cc:36:56:8d:
bb:fb:33:68:ff:02:be:7e:d5:05:4f:d4:bf:00:e7:95:a8:81:
d6:6d:23:dc:e5:5b:61:22:4d:9c:35:5b:d0:60:4c:eb:68:21:
d6:20:05:90:cb:93:cd:45:25:40:10:aa:fe:81:2a:61:e8:fd:
b7:29:7f:7b:56:ee:e3:31:1b:8f:24:f9:35:01:8c:c2:4d:8d:
6e:66:a9:06:7c:22:7e:bc:eb:02:14:5d:30:05:48:d7:08:53:
7b:bc:73:50:d7:df:83:fc:e6:df:af:13:35:10:38:87:b1:1e:
7f:2d:db:99:62:72:6c:2a:90:af:ff:a9:d2:4e:a1:56:28:64:
72:e2:2a:61:fb:2c:7a:ab:76:25:98:71:eb:75:27:80:12:37:
5b:d4:4f:c0:55:04:cf:5a:6f:5c:14:03:a1:a4:ba:42:56:97:
75:6f:d0:b7:a3:63:f3:66:be:89:12:c8:25:51:a5:ba:06:3c:
f5:df:dc:28:43:59:52:f1:33:e5:7f:74:db:c7:64:69:9a:02:
fe:b9:0c:28:5e:56:81:fa:57:6c:f4:4d:42:7e:26:e6:87:f0:
2d:4e:0a:68:3c:a2:4e:c6:91:b5:ff:39:c3:6e:f3:ea:ff:62:
8a:5d:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net