Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/kGJySU4Dftn5w9YXopEZDMd6_WM.roa
File: kGJySU4Dftn5w9YXopEZDMd6_WM.roa (raw, json)
Hash identifier: 06QXUdRgs5Tb23AxBk58sufMOzVV95ASwA1R6rxkHcA=
Subject key identifier: 90:62:72:49:4E:03:7E:D9:F9:C3:D6:17:A2:91:19:0C:C7:7A:FD:63
Certificate issuer: /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial: 018468521F2282F1BC7CC68468DBEB04244C
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/kGJySU4Dftn5w9YXopEZDMd6_WM.roa
Signing time: Fri 11 Nov 2022 20:12:03 +0000
ROA not before: Fri 11 Nov 2022 20:12:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201691
IP address blocks: 185.88.178.0/24 maxlen: 24
185.88.176.0/24 maxlen: 24
185.88.179.0/24 maxlen: 24
185.88.177.0/24 maxlen: 24
2a05:cd00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:68:52:1f:22:82:f1:bc:7c:c6:84:68:db:eb:04:24:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Validity
Not Before: Nov 11 20:12:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=906272494e037ed9f9c3d617a291190cc77afd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:b1:53:e4:69:4c:e9:5e:c5:fd:ae:c6:67:
38:7d:ce:68:e1:93:00:8c:8d:17:3a:d3:b9:fa:a6:
34:b3:d5:01:99:f5:cf:da:8c:dc:54:42:87:25:02:
7b:fa:7d:9b:7f:31:10:a4:7c:26:46:e8:7d:86:6f:
10:02:46:0a:78:27:3f:c3:d9:24:eb:be:c5:a8:dc:
35:05:66:37:26:92:f9:08:6e:68:56:bb:91:41:b9:
43:00:5e:1c:42:a8:c4:d9:6d:44:28:74:73:0c:bb:
29:bc:46:a4:73:92:38:af:e1:4d:3a:19:28:a0:8a:
5d:00:cf:3a:cf:82:48:2d:6e:ce:e9:34:3d:fb:2e:
7b:e9:f5:fe:68:ff:d7:83:f3:17:a3:06:b6:4a:8c:
a6:8b:70:2e:7a:d3:2d:eb:54:c0:aa:c0:b9:b2:e9:
63:ef:50:89:7a:71:83:01:a2:ee:11:fb:55:97:03:
9a:7a:ab:de:43:ac:9e:f7:08:c7:f5:be:59:c8:70:
19:b8:5a:6b:49:64:bd:c8:46:13:b0:54:28:c8:bb:
83:26:d3:95:f9:e3:71:63:4e:98:1f:ec:f4:5d:08:
52:9d:f3:81:a4:8a:72:60:2b:ff:f8:7a:d6:19:5e:
01:4b:33:60:2e:21:84:0d:58:5a:86:79:0f:12:00:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:72:49:4E:03:7E:D9:F9:C3:D6:17:A2:91:19:0C:C7:7A:FD:63
X509v3 Authority Key Identifier:
keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/kGJySU4Dftn5w9YXopEZDMd6_WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.176.0/22
IPv6:
2a05:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
56:a3:ca:15:e5:c8:06:78:3a:0d:39:c5:8e:31:00:d0:d4:ae:
5f:04:8e:7c:2d:a4:05:c7:24:9a:8f:14:ea:7d:8a:ce:87:e8:
2b:9b:ac:23:d7:45:93:8d:7b:ea:7a:82:e2:0a:de:c0:d5:38:
9a:97:a5:27:a3:b5:90:de:3f:41:1d:84:4c:9b:eb:34:5a:cd:
b9:05:ce:d8:e0:2a:1b:b7:ea:35:99:d9:4c:a7:97:ce:8f:72:
de:88:82:8b:fb:6e:fa:40:6f:79:7a:a8:4a:20:36:3b:f6:e0:
db:bf:c9:29:97:75:88:10:d8:64:95:51:5b:c1:5f:35:4b:6f:
f6:45:8a:48:08:8c:be:61:87:59:70:51:32:40:76:9d:0f:96:
2e:aa:d7:56:0d:81:50:6e:3f:fb:64:c8:3f:cc:b7:ba:06:08:
5f:5b:34:69:9d:4c:87:e4:c0:f1:68:f4:5f:4c:07:f9:bd:cb:
ab:fe:12:84:5f:fd:34:39:20:ac:9b:4f:09:c9:3b:c6:06:12:
9d:8a:13:4c:3e:1c:8f:4a:44:76:97:98:74:03:19:ad:97:25:
2e:50:93:56:0f:49:18:03:c4:83:35:90:25:5c:eb:9f:70:47:
87:ce:61:a0:2d:f7:18:d0:b3:5d:81:a1:e8:fa:bd:55:da:23:
59:32:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net