Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/mR94keJOLmlN17kM6PqPkSLL4wc.roa
File: mR94keJOLmlN17kM6PqPkSLL4wc.roa (raw, json)
Hash identifier: 3xxVWSvr5qGPBrrFtG9YDIOMMZZ0Xd3glRK00RqVzms=
Subject key identifier: 99:1F:78:91:E2:4E:2E:69:4D:D7:B9:0C:E8:FA:8F:91:22:CB:E3:07
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 308CEADE
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/mR94keJOLmlN17kM6PqPkSLL4wc.roa
Signing time: Sat 01 Jan 2022 06:05:45 +0000
ROA not before: Sat 01 Jan 2022 06:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51582
IP address blocks: 185.89.124.0/22 maxlen: 24
46.55.216.0/21 maxlen: 24
46.55.224.0/20 maxlen: 24
46.55.128.0/18 maxlen: 24
46.55.242.0/23 maxlen: 24
46.55.244.0/22 maxlen: 24
46.55.241.0/24 maxlen: 24
46.55.248.0/22 maxlen: 24
185.240.144.0/22 maxlen: 24
46.55.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814541534 (0x308ceade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Jan 1 06:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=991f7891e24e2e694dd7b90ce8fa8f9122cbe307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:16:f7:71:a4:c8:fd:34:52:6f:28:01:2b:
e7:6f:b4:7f:fb:06:b0:f0:8e:be:ac:19:c8:45:d4:
8e:6e:c2:aa:f2:ad:79:ed:4f:d4:e1:d3:88:4c:2a:
91:b3:63:a0:94:7b:42:e0:02:15:5a:70:6c:84:5e:
3b:fc:f3:d4:42:af:90:22:cc:b1:e9:07:ee:f6:7b:
bd:fb:95:37:10:9f:76:4d:33:c6:ce:81:23:b0:64:
89:3e:8c:8d:d4:f2:64:dc:d8:52:95:9b:19:84:bc:
14:25:ec:8d:57:e1:7b:a6:85:12:39:ec:28:cc:ee:
52:0e:ef:40:0d:96:1e:0f:59:4c:c5:77:f8:78:fb:
24:69:46:d7:c8:a8:bb:35:01:71:07:ce:2f:dc:7a:
b5:32:b3:bd:fd:27:64:b9:8b:73:89:8f:ba:8b:f6:
6f:06:38:80:f1:5c:bd:76:44:c9:7c:50:7d:f1:46:
9e:71:ba:27:0e:e6:46:36:64:bc:21:68:12:97:02:
e0:ea:c8:da:48:52:79:92:9c:ab:9e:c1:21:e2:6e:
90:df:a9:3f:a3:f4:13:dc:09:7d:03:5a:79:90:84:
49:00:20:0d:6f:4f:6f:67:73:c1:ba:8f:26:21:85:
f3:de:9a:c9:dc:f5:34:2f:68:4f:d0:d1:9a:f7:a3:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:78:91:E2:4E:2E:69:4D:D7:B9:0C:E8:FA:8F:91:22:CB:E3:07
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/mR94keJOLmlN17kM6PqPkSLL4wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.128.0-46.55.207.255
46.55.216.0-46.55.239.255
46.55.241.0-46.55.251.255
185.89.124.0/22
185.240.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:ac:f9:8b:df:d3:17:3d:f8:5e:5a:57:9c:e4:29:a0:0d:5f:
ea:13:34:7e:e0:0f:42:14:f3:f6:20:d5:3a:92:46:99:ce:03:
cc:0e:77:d1:4e:2c:c3:29:c6:93:a6:0d:95:37:fa:89:1f:15:
ca:d5:6d:e6:ee:fa:05:9c:48:cd:44:3e:ef:72:fa:01:01:2a:
af:b3:d9:e8:86:08:93:af:20:78:1d:36:f9:53:02:d2:04:87:
ea:0b:1b:72:7f:d4:6b:94:11:b6:39:b2:ec:91:29:9b:b0:8a:
90:70:9f:4f:2c:a1:97:e7:76:f7:2d:da:94:3d:9d:79:cb:99:
02:92:39:a1:a5:57:31:ca:e1:2a:7c:73:1f:61:ac:5f:03:01:
ee:0d:1d:8c:e3:e2:9b:7c:c1:0f:3f:98:1b:41:b7:e4:23:b5:
73:63:c0:dd:63:95:c3:61:d9:09:0f:a3:89:2d:06:a4:ff:26:
bd:01:8e:25:34:da:c9:91:9e:dc:34:cc:d7:f5:1c:02:cd:97:
b1:bc:e8:ea:43:2d:2a:f8:04:83:e5:73:ec:5e:75:c6:e4:08:
ce:31:f8:fe:5b:a7:3f:7b:db:db:ac:42:06:03:94:fb:c1:e7:
c9:9e:5b:af:e7:11:0f:38:4b:aa:8c:4d:7b:d9:d0:05:cc:2d:
74:6d:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net