Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/8DRttca9uWew1o5e_Ylkeperl8s.roa
File: 8DRttca9uWew1o5e_Ylkeperl8s.roa (raw, json)
Hash identifier: UlON+dFSLUKk19RPl9wsqs0UzNXzwW6YJefpQKASRAo=
Subject key identifier: F0:34:6D:B5:C6:BD:B9:67:B0:D6:8E:5E:FD:89:64:7A:97:AB:97:CB
Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial: 0150CDE4
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/8DRttca9uWew1o5e_Ylkeperl8s.roa
Signing time: Sat 01 Jan 2022 13:02:05 +0000
ROA not before: Sat 01 Jan 2022 13:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28850
IP address blocks: 195.190.158.0/24 maxlen: 24
194.59.185.0/24 maxlen: 24
194.116.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22072804 (0x150cde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Validity
Not Before: Jan 1 13:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0346db5c6bdb967b0d68e5efd89647a97ab97cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:61:95:37:6c:80:e1:5e:30:ed:12:81:64:
60:8a:d1:ff:23:a0:60:7d:c5:22:16:2d:98:0f:66:
30:92:5d:05:5a:65:a0:33:f6:2c:42:ba:63:93:1b:
70:11:ee:fd:09:54:c3:f4:2c:25:03:54:bd:c6:65:
21:91:b7:9f:fe:6e:1d:b5:35:02:4b:65:07:b3:9f:
29:cf:c3:b8:18:fe:85:58:69:15:f6:01:05:4a:08:
b4:10:41:b2:c3:d9:da:7c:a3:b5:a2:fb:ae:b1:bb:
cc:73:80:52:58:84:4b:55:dd:0e:6d:48:0f:db:81:
be:b5:9a:89:77:c5:6f:34:a0:c3:de:e0:33:c2:57:
86:62:86:ae:41:14:79:f9:71:dc:97:a3:1e:60:45:
39:90:cb:da:e4:b7:6e:4a:7d:e3:34:57:78:f8:b2:
a3:75:46:8e:21:11:60:84:43:cb:88:5d:18:8f:89:
22:bc:f2:a5:59:b7:f7:d9:a9:76:bb:94:5c:37:6b:
0e:0b:a2:1e:e8:1e:16:d4:ff:c3:b6:b6:af:ec:b4:
65:7c:9a:dd:c4:c3:2b:0c:f5:bc:82:3d:e6:ed:8a:
e1:0d:59:39:5f:3c:39:08:d3:71:da:3b:a2:fe:e1:
76:78:44:3c:cc:d7:f5:42:b8:64:7e:25:56:61:89:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:6D:B5:C6:BD:B9:67:B0:D6:8E:5E:FD:89:64:7A:97:AB:97:CB
X509v3 Authority Key Identifier:
keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/8DRttca9uWew1o5e_Ylkeperl8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.185.0/24
194.116.204.0/23
195.190.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:14:6f:4c:f1:0c:a7:62:30:31:67:a0:23:ea:19:52:e0:64:
a1:f9:4d:c0:9c:c0:7a:06:db:89:5d:c0:0c:8b:15:f3:7f:70:
59:17:8f:34:a8:b1:65:9c:ce:f4:2e:55:59:a7:a1:6f:f7:12:
d0:0d:a6:2f:c5:e5:85:41:3a:86:1a:43:c9:05:3d:28:4c:44:
fc:9b:d9:28:e7:cf:73:18:d0:d6:74:86:a2:56:9a:95:ec:49:
e9:3c:8f:65:09:bb:75:4c:29:46:06:f3:56:4f:3a:72:4e:c9:
7f:78:62:3e:73:02:1e:e7:41:47:20:00:00:4d:e8:a5:9e:0c:
fc:85:02:12:65:a2:51:76:8f:b7:46:f8:0a:5b:2d:91:ba:c3:
d1:d6:25:1f:61:d8:b2:8c:e9:80:8c:42:c6:e4:83:da:4d:57:
ce:9b:66:96:2c:65:03:44:bf:59:b5:aa:f2:33:7e:d7:8e:4d:
94:34:8a:87:f7:0d:0e:6a:32:25:98:d0:7d:3d:a7:52:75:50:
41:cc:c2:ff:4b:ff:87:36:16:e9:ef:5e:30:73:93:59:61:a8:
ed:0c:12:09:ca:05:de:9c:94:f2:1f:2a:40:52:17:83:57:70:
40:dd:fe:96:f3:38:c7:d2:3e:05:51:70:6c:80:6a:48:01:b9:
33:5a:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net