Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/qLJNrIQ3djuXaVmO_Y2iY279IDo.roa
File: qLJNrIQ3djuXaVmO_Y2iY279IDo.roa (raw, json)
Hash identifier: +tQsIEWdYIClc2afegRckN546YBDKs7Xf/2rEDUedqw=
Subject key identifier: A8:B2:4D:AC:84:37:76:3B:97:69:59:8E:FD:8D:A2:63:6E:FD:20:3A
Certificate issuer: /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial: 0184FABCAE478BC5ADD0FE69DE25E7952E6E
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/qLJNrIQ3djuXaVmO_Y2iY279IDo.roa
Signing time: Sat 10 Dec 2022 06:33:00 +0000
ROA not before: Sat 10 Dec 2022 06:33:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59794
IP address blocks: 185.211.90.0/23 maxlen: 23
185.211.88.0/22 maxlen: 22
185.211.90.0/24 maxlen: 24
185.211.91.0/24 maxlen: 24
185.211.88.0/24 maxlen: 24
185.211.88.0/23 maxlen: 23
185.211.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fa:bc:ae:47:8b:c5:ad:d0:fe:69:de:25:e7:95:2e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Validity
Not Before: Dec 10 06:33:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8b24dac8437763b9769598efd8da2636efd203a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:46:85:31:cd:eb:1a:57:91:48:b8:94:f0:
68:dc:de:9f:ef:7e:d4:d0:2b:2c:00:74:9b:25:73:
5f:90:d2:1b:42:1b:82:dc:1b:f8:b9:7e:de:56:cc:
5d:d9:89:78:39:16:12:7d:86:ea:9a:28:bb:12:5e:
97:37:a2:0b:e0:b0:ae:c8:e2:03:80:d7:f2:14:da:
6c:10:4c:cd:07:21:c2:5c:c5:64:ee:cd:31:e2:84:
a6:0c:65:b2:52:35:7f:90:99:2e:d4:52:ea:bd:11:
5e:9a:50:4e:c5:36:9d:8b:35:37:c3:7e:7f:bb:34:
4d:77:93:00:59:58:ec:68:d7:08:d9:3a:e0:e7:1f:
eb:02:78:b1:ba:7e:fe:14:c7:73:69:5a:5b:64:74:
6e:2a:85:50:0a:67:4c:44:51:58:82:a4:48:e6:f9:
1f:55:d7:fb:64:0d:21:c3:c8:96:b5:7c:55:5f:4b:
15:70:6a:9c:cd:5e:37:4c:16:f7:65:f4:8a:9b:65:
2a:be:8e:eb:e1:f7:1b:28:a7:2a:35:0e:4e:80:e0:
38:55:ab:d7:83:2a:09:6e:38:7d:70:75:ce:61:98:
9a:ba:57:6d:36:3d:0c:30:59:06:ef:6e:1a:c5:85:
2c:71:de:38:cb:6b:70:e2:0d:6f:fc:3b:06:b1:ec:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:4D:AC:84:37:76:3B:97:69:59:8E:FD:8D:A2:63:6E:FD:20:3A
X509v3 Authority Key Identifier:
keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/qLJNrIQ3djuXaVmO_Y2iY279IDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.88.0/22
Signature Algorithm: sha256WithRSAEncryption
00:03:8f:2f:05:c2:ef:33:f5:7b:c8:ff:6b:1a:82:71:cf:ef:
b6:d0:e3:5a:fe:54:a2:a0:a5:d4:fe:cc:d9:d6:ea:2c:ed:37:
e1:d9:bb:29:cd:9d:ad:18:1b:13:57:7f:e4:3d:37:19:1c:8e:
78:48:11:c0:36:33:b8:75:27:d9:02:4e:d7:ea:5d:44:1d:1f:
35:c5:d8:da:35:2e:07:4f:43:d8:a7:11:ad:c6:91:61:70:1d:
3b:4c:92:5b:31:66:5d:78:17:c7:80:d8:52:64:e8:7b:04:b4:
4e:85:04:7d:03:29:ab:93:9e:3a:e6:55:48:c9:15:d0:8e:97:
e3:be:24:42:c0:41:98:cd:d2:b0:37:56:93:b7:c7:e5:e6:e9:
be:1b:be:30:68:1e:d3:91:53:f3:04:84:e2:75:e5:e8:ff:f6:
39:00:77:f2:27:58:15:a9:7d:2f:62:b3:86:e7:54:24:3a:aa:
3d:08:a7:b5:cb:f1:bd:2d:33:52:c0:d3:fb:38:90:88:75:2c:
a5:8e:26:84:45:02:62:37:6e:c2:70:de:c0:d2:aa:4b:ca:82:
22:e9:cc:67:ab:a9:f3:08:7f:25:1c:04:ba:1e:01:87:9d:60:
5f:1d:b4:74:d5:81:c8:70:46:c9:50:07:c9:b2:90:2b:92:e7:
f8:3d:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net