Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/nSbeo80R4ijaPk01k73m4pxQFVk.roa
File: nSbeo80R4ijaPk01k73m4pxQFVk.roa (raw, json)
Hash identifier: MBvFi6lvh1nYqEbiTybhUUtfyufhbSb3uuHwvAI9Tjg=
Subject key identifier: 9D:26:DE:A3:CD:11:E2:28:DA:3E:4D:35:93:BD:E6:E2:9C:50:15:59
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 03DACF5A
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/nSbeo80R4ijaPk01k73m4pxQFVk.roa
Signing time: Tue 05 Jul 2022 06:49:25 +0000
ROA not before: Tue 05 Jul 2022 06:49:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60609
IP address blocks: 185.37.212.0/24 maxlen: 24
185.37.213.0/24 maxlen: 24
185.158.170.0/23 maxlen: 23
185.158.171.0/24 maxlen: 24
185.158.168.0/23 maxlen: 23
185.37.214.0/24 maxlen: 24
185.37.215.0/24 maxlen: 24
185.77.159.0/24 maxlen: 24
185.86.11.0/24 maxlen: 24
185.77.156.0/24 maxlen: 24
185.77.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64671578 (0x3dacf5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Jul 5 06:49:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d26dea3cd11e228da3e4d3593bde6e29c501559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:76:92:3b:6e:02:40:91:85:97:c1:d2:27:
55:bd:ff:98:96:8c:02:8a:de:62:27:72:43:7a:fe:
d9:a7:f5:60:9e:90:c7:3c:fe:30:63:ee:79:7c:e2:
c2:c8:bc:db:69:4f:be:ae:32:6f:be:94:e6:91:6c:
ca:19:0d:76:9d:8f:8e:08:26:c3:6a:ba:47:82:2b:
43:a9:5f:1f:7d:2a:81:67:bd:eb:8f:48:a7:7b:e1:
5d:d4:ed:04:f8:df:6f:49:39:3d:d1:3e:75:1b:2a:
47:77:b9:5b:53:35:45:50:ed:c1:f6:16:d0:dd:e0:
61:23:9d:95:b3:94:0c:9d:06:51:d4:85:0d:7d:d2:
95:01:54:df:4e:72:b2:6d:e0:d8:12:59:da:ab:c3:
02:c6:aa:4c:f6:9c:95:10:f2:c0:65:ea:96:93:d9:
ed:f5:f8:a3:ce:ab:de:7c:31:26:d1:97:b5:18:23:
69:d7:76:03:59:2d:95:25:0c:03:67:d0:ff:ec:07:
19:c6:c4:b3:d5:41:21:f3:2b:43:58:a3:b9:87:9a:
eb:c3:f7:6a:85:15:ad:f8:bf:95:47:8e:8b:0d:43:
7f:3a:2b:44:27:a8:da:ff:9f:3a:dc:04:b5:dd:53:
6d:2b:9a:73:9a:76:62:29:20:54:a2:11:5f:58:63:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:DE:A3:CD:11:E2:28:DA:3E:4D:35:93:BD:E6:E2:9C:50:15:59
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/nSbeo80R4ijaPk01k73m4pxQFVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.212.0/22
185.77.156.0/23
185.77.159.0/24
185.86.11.0/24
185.158.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:0d:b9:b6:58:e9:51:b6:a0:ad:ac:ce:a9:b0:bc:30:f0:5c:
f8:39:79:5b:e2:b3:d9:29:e8:47:70:47:98:53:8b:67:95:98:
b7:28:a4:48:f0:f9:bb:a2:0b:7b:75:4d:1c:a8:53:55:14:07:
77:ea:f2:2f:1e:9f:1a:26:d3:5f:b2:8f:72:ee:f8:62:20:28:
6b:70:17:7e:a8:7e:08:c3:86:43:62:b7:bd:6f:12:55:a7:e2:
65:c5:fd:26:c7:c3:3a:21:12:77:00:be:cf:16:8a:63:f9:79:
ac:2b:8d:dc:e9:ea:e9:5f:d5:ab:9a:a4:56:e7:6d:82:73:92:
9f:a6:58:ca:9e:a3:e3:98:6a:e7:f0:8f:c9:e6:76:8d:9e:09:
ef:93:c4:41:cb:99:2a:1f:1a:1d:7d:bc:91:ee:ff:48:6e:22:
39:39:7d:e5:78:72:43:14:ff:0a:82:49:6b:58:6b:23:60:8e:
62:95:de:ab:cd:be:62:7e:1b:20:dc:97:e1:76:ab:42:7d:64:
8c:30:a2:a0:d0:00:6e:1f:bb:22:e8:ce:12:cd:38:c4:7c:88:
65:dc:82:83:6f:1a:60:a9:73:56:60:b1:0a:b0:9d:a6:64:c2:
ce:69:18:8e:3d:51:c1:b5:66:ba:d1:fa:16:4c:f4:b4:6b:0f:
34:f4:b9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net