Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/37u83bVMp6c4D8jcUD8WkrgGFzY.roa
File: 37u83bVMp6c4D8jcUD8WkrgGFzY.roa (raw, json)
Hash identifier: N34YHJE2sdhIAB4smiNzHHE6OVvIq+Tiz1CUY9iEi0c=
Subject key identifier: DF:BB:BC:DD:B5:4C:A7:A7:38:0F:C8:DC:50:3F:16:92:B8:06:17:36
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 057CCF10
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/37u83bVMp6c4D8jcUD8WkrgGFzY.roa
Signing time: Fri 18 Feb 2022 12:57:32 +0000
ROA not before: Fri 18 Feb 2022 12:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 212.101.192.0/24 maxlen: 24
212.101.192.0/19 maxlen: 24
212.101.204.0/24 maxlen: 24
212.101.205.0/24 maxlen: 24
212.101.201.0/24 maxlen: 24
212.101.211.0/24 maxlen: 24
212.101.212.0/23 maxlen: 24
212.101.207.0/24 maxlen: 24
212.101.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92065552 (0x57ccf10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Feb 18 12:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfbbbcddb54ca7a7380fc8dc503f1692b8061736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:23:f6:9c:95:05:72:ac:c9:1a:48:bd:1b:
a9:e2:60:4d:44:33:d3:21:39:b2:10:22:4b:0d:e5:
83:b2:8d:1b:de:d0:00:07:1c:4a:9c:c3:11:72:7b:
f9:7a:5e:9f:d2:59:57:46:a5:b2:7b:31:fb:4f:42:
af:b9:02:b3:89:32:a2:87:a7:78:18:74:a0:3a:33:
92:c4:e0:62:4b:76:c2:7d:66:a2:13:f2:24:35:ad:
ad:02:9f:b9:79:de:13:d8:88:2b:a4:f4:fa:35:62:
4e:3c:99:b0:95:33:5f:14:7f:4c:a3:ca:eb:20:47:
f6:7e:db:12:92:fc:b8:4f:2c:4e:a3:5d:07:d1:94:
b5:a7:62:cc:24:dd:88:fb:d0:84:6d:fa:54:b4:2f:
78:26:21:5d:78:b5:47:38:28:0b:0a:ec:03:b3:04:
e2:5a:0e:81:a4:c2:31:13:03:9a:6f:2f:78:18:9b:
d7:04:a7:e8:45:52:76:36:86:a5:2f:b9:f6:c4:92:
ac:f5:fe:cf:b2:b2:ef:d6:72:08:47:cd:f9:ee:c7:
46:db:72:0e:86:cb:f0:40:de:30:0b:4c:95:d9:e4:
ec:1d:a8:9d:44:0f:9b:a7:69:55:a8:31:48:87:ea:
ab:5b:a1:01:f0:8b:29:26:cd:18:f0:d9:8f:a7:20:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BB:BC:DD:B5:4C:A7:A7:38:0F:C8:DC:50:3F:16:92:B8:06:17:36
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/37u83bVMp6c4D8jcUD8WkrgGFzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:76:4f:e0:3c:f9:5d:3a:1a:3f:cb:62:6b:fb:89:c5:59:ed:
71:50:34:71:75:30:49:63:c7:48:8b:a3:ec:ee:eb:98:7c:3f:
d1:50:35:0d:83:a6:56:c1:01:ed:9a:15:19:21:be:bf:1b:b5:
4e:9f:f6:87:7b:54:b1:bb:81:65:6e:ee:2e:88:71:ad:3a:1a:
c3:d9:87:be:13:75:01:76:61:d2:4b:9a:c4:31:6b:a9:b0:31:
e6:ee:88:18:6e:02:5f:48:b6:19:f6:d2:d8:e3:57:1d:66:4f:
17:9b:c3:24:25:cc:06:58:52:89:cd:24:ee:82:0d:f9:c8:b7:
45:c9:31:0e:65:5f:ba:d1:75:7c:da:31:12:f6:78:27:1c:76:
46:7b:09:4a:7e:fa:22:37:2f:8e:bd:49:af:3b:7a:22:31:6f:
8e:8f:23:db:d8:ec:9b:49:1c:ee:64:61:a9:fe:07:10:15:4a:
2c:02:66:0f:ed:e7:4f:5a:34:68:cf:e0:02:f9:66:11:47:c3:
2e:49:51:68:1b:fb:2f:14:60:1d:b9:38:7e:b0:6f:c7:ef:a6:
7a:7e:5c:53:5e:71:75:6b:3c:56:60:4f:b5:f6:76:5e:f0:78:
87:6a:23:f5:1c:02:9f:96:e6:53:49:91:d5:aa:a3:20:3e:84:
41:62:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net