Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/i0UygafPzwVHXMNnfOXhWaAYnKs.roa
File: i0UygafPzwVHXMNnfOXhWaAYnKs.roa (raw, json)
Hash identifier: noLSw5w1kFdsBKwge8Mds1Grfs0U22k/0uE0esi8X6I=
Subject key identifier: 8B:45:32:81:A7:CF:CF:05:47:5C:C3:67:7C:E5:E1:59:A0:18:9C:AB
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 2EDC
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/i0UygafPzwVHXMNnfOXhWaAYnKs.roa
Signing time: Tue 31 May 2022 09:29:01 +0000
ROA not before: Tue 31 May 2022 09:29:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44656
IP address blocks: 89.58.96.0/21 maxlen: 21
89.58.64.0/19 maxlen: 19
185.232.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11996 (0x2edc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: May 31 09:29:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b453281a7cfcf05475cc3677ce5e159a0189cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:b1:05:0c:9d:b9:db:31:f7:08:d7:fc:3d:
8a:ba:a4:22:e0:46:a5:41:ba:c9:16:a4:55:a2:f3:
87:c5:50:eb:51:3c:a2:8e:60:d0:01:8f:18:70:b7:
29:04:b6:28:67:f6:6a:91:51:4a:d9:29:95:27:24:
37:4a:10:4b:30:fa:54:f1:62:6e:c0:2e:3f:17:7b:
10:cf:18:1c:cc:88:ce:ab:d4:40:db:b1:94:73:99:
af:ab:d6:c0:d2:e4:e7:16:e8:72:c5:0f:7b:02:4d:
4c:67:23:a7:a9:4d:e4:28:d4:7a:41:5f:bc:f1:d2:
94:80:3d:4f:2e:a7:69:71:47:07:82:97:bc:d6:67:
61:41:8b:8e:a8:a9:1a:e7:7d:7e:86:ec:e0:6c:e2:
c5:d6:93:8b:52:1f:d3:c4:d8:f2:4d:14:cf:28:09:
17:d4:05:aa:51:67:74:25:4e:c0:19:7c:47:ba:23:
fe:31:18:9a:ad:5d:98:e0:5f:e3:c4:5c:9b:32:26:
71:ab:66:86:46:c1:e7:53:2f:00:77:da:d6:a2:07:
ea:9f:dd:ee:28:72:ac:b4:de:10:42:87:9f:a8:0a:
27:84:46:c0:61:c5:fa:fa:c2:40:5a:f6:73:eb:d4:
d3:50:e3:ad:45:4c:aa:14:07:4a:39:c6:08:68:88:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:45:32:81:A7:CF:CF:05:47:5C:C3:67:7C:E5:E1:59:A0:18:9C:AB
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/i0UygafPzwVHXMNnfOXhWaAYnKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.58.64.0-89.58.103.255
185.232.40.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fe:42:22:16:77:3e:65:9b:0f:59:bc:d1:1f:6f:cc:5a:59:
02:b6:63:db:59:1b:a8:d8:64:37:af:d2:02:f4:50:a5:b7:e0:
5f:e7:e5:f4:b1:83:01:18:f4:5c:87:48:aa:27:3f:a7:18:2a:
00:68:01:c7:57:5b:a7:7f:25:ee:f1:5c:34:d8:9f:a0:06:2a:
ea:6a:1f:a2:c4:f4:41:62:b4:f3:31:6b:5a:bd:a4:43:95:71:
57:dd:57:6e:1d:f5:cd:10:fa:00:bc:a9:04:da:94:e1:e0:f4:
59:06:65:5d:e2:83:ed:1a:17:f7:c0:c4:43:ff:d0:c5:df:f1:
07:04:30:39:e9:90:55:aa:0e:f1:d2:61:a8:ab:d1:87:36:9e:
c9:56:dc:4a:fd:e6:a1:59:1b:c0:d3:ad:90:7f:fc:91:89:51:
68:9c:43:12:d7:20:79:90:0d:7e:73:c5:2b:1a:3a:1a:23:3c:
93:d7:d5:b0:00:3f:22:c0:d7:cc:97:3b:bd:8e:d3:bd:61:aa:
c2:67:31:33:9a:5a:39:b3:3b:fb:e8:6f:9e:10:e8:35:f5:59:
16:1f:2d:c5:b2:43:fb:c6:98:e0:20:a0:6a:fc:a6:aa:c7:cc:
8a:a0:db:5a:59:b0:78:5b:fa:12:da:e1:9c:b1:98:e4:53:3f:
36:b0:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net