Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/gjMbBd4LJX4IotYrOa4KvLzdu5w.roa
File: gjMbBd4LJX4IotYrOa4KvLzdu5w.roa (raw, json)
Hash identifier: ILW8ayjrV82Q87gsvARjk0+y0cuXonKnRwb8csQl7dw=
Subject key identifier: 82:33:1B:05:DE:0B:25:7E:08:A2:D6:2B:39:AE:0A:BC:BC:DD:BB:9C
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 0292CBE0
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/gjMbBd4LJX4IotYrOa4KvLzdu5w.roa
Signing time: Sat 01 Jan 2022 13:06:31 +0000
ROA not before: Sat 01 Jan 2022 13:06:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197750
IP address blocks: 91.229.93.0/24 maxlen: 24
185.6.103.0/24 maxlen: 24
185.6.100.0/24 maxlen: 24
185.6.102.0/24 maxlen: 24
185.6.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43174880 (0x292cbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Jan 1 13:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82331b05de0b257e08a2d62b39ae0abcbcddbb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:de:22:5b:1c:d0:46:25:d8:5b:81:b0:a6:
61:32:ca:4f:8c:3c:db:b5:86:94:bc:be:a5:5f:87:
87:83:ad:35:88:e5:e5:33:5f:5a:2f:98:b4:5b:36:
b2:25:a6:26:51:0d:1e:f6:61:8c:21:12:96:5b:26:
17:11:d4:cf:59:37:e6:0f:4e:45:c3:3a:55:0e:d2:
27:09:e8:ae:91:86:94:80:f5:76:7e:5f:f1:74:cb:
77:ff:5e:34:dd:2c:99:9f:96:13:46:1e:ff:a2:4d:
a6:30:4c:d0:d0:10:2f:f2:09:e3:02:52:9e:4f:c4:
ed:a4:55:72:65:65:b8:b2:42:7e:c9:de:a1:82:56:
1b:9c:2c:f3:b0:7b:56:a9:43:7f:fb:2c:b7:59:00:
c4:87:12:79:9c:ef:7b:6d:05:26:94:c4:ff:36:88:
12:88:fd:9b:bd:9f:bd:2e:63:b9:f3:50:50:0c:de:
d0:99:cf:3e:fd:ea:2f:5c:aa:d5:09:7c:f7:9b:bc:
c3:ee:03:c1:2b:c4:de:ad:08:6f:b8:dc:fb:a9:bb:
c5:e0:67:2c:6f:72:b8:a3:32:0e:28:c4:63:d2:c2:
7e:13:a6:a2:df:e7:95:dc:87:66:c1:3c:ff:af:0b:
ab:25:c7:7d:9a:21:cb:26:fa:07:4d:ed:ab:a7:f8:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:1B:05:DE:0B:25:7E:08:A2:D6:2B:39:AE:0A:BC:BC:DD:BB:9C
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/gjMbBd4LJX4IotYrOa4KvLzdu5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.93.0/24
185.6.100.0/22
Signature Algorithm: sha256WithRSAEncryption
95:97:f3:22:d3:46:59:df:e8:d2:d0:3b:03:35:48:aa:2f:ec:
c2:ab:a3:f4:73:14:6b:cf:d1:71:ea:af:4c:7e:33:14:c9:5f:
82:27:61:0f:62:1a:5f:7b:26:7b:68:1d:11:53:97:d6:6f:a7:
97:ad:19:fc:ee:8a:0e:72:dc:bc:67:82:e7:31:8e:19:e4:d9:
c4:1e:39:22:95:a3:46:29:d3:56:98:9c:1d:fb:31:a4:c3:d0:
86:c0:d8:e7:df:eb:81:5a:4e:54:1f:4f:5b:4a:f4:13:45:ad:
84:17:70:ea:6c:4d:14:f0:6c:3e:3d:cd:01:1e:a4:b6:87:a0:
44:74:d9:be:75:ab:ff:45:36:0e:da:ab:52:62:5e:a0:68:b7:
97:61:18:56:04:35:1e:3d:cc:f0:d9:9e:9f:07:34:10:5d:ca:
d3:77:69:6c:83:5f:8b:08:9d:2a:c9:35:d3:28:9b:21:8a:8e:
23:b6:83:d7:65:a9:ea:80:d7:38:98:e3:d3:20:5e:ae:35:5e:
be:95:69:d3:9d:27:7d:8a:8f:c1:76:3d:3c:dd:2e:68:43:ba:
d2:18:78:fe:f8:e7:7b:69:af:e6:ed:f9:bf:72:1d:4b:fd:4d:
45:06:37:da:d0:64:e7:31:c0:b6:98:e1:42:19:0f:4a:cc:7b:
dd:96:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net