Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/6Mlcvb6fcAAPYHTPrhkNK20lGA8.roa
File: 6Mlcvb6fcAAPYHTPrhkNK20lGA8.roa (raw, json)
Hash identifier: D2YUwnuV2pFoZzRMe7jc6bkFzcTGZcQO+lfjBnSpx/Q=
Subject key identifier: E8:C9:5C:BD:BE:9F:70:00:0F:60:74:CF:AE:19:0D:2B:6D:25:18:0F
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01837F43BAC68F9C31920E59F00DF1E678E2
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/6Mlcvb6fcAAPYHTPrhkNK20lGA8.roa
Signing time: Tue 27 Sep 2022 14:04:48 +0000
ROA not before: Tue 27 Sep 2022 14:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 212.68.166.0/24 maxlen: 24
212.68.164.0/24 maxlen: 24
212.68.165.0/24 maxlen: 24
212.68.171.0/24 maxlen: 24
212.68.172.0/24 maxlen: 24
212.68.167.0/24 maxlen: 24
212.68.170.0/24 maxlen: 24
212.68.168.0/24 maxlen: 24
212.68.169.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.185.0/24 maxlen: 24
212.68.186.0/24 maxlen: 24
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
212.68.184.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
212.68.187.0/24 maxlen: 24
212.68.188.0/24 maxlen: 24
212.68.190.0/24 maxlen: 24
212.68.191.0/24 maxlen: 24
212.68.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:43:ba:c6:8f:9c:31:92:0e:59:f0:0d:f1:e6:78:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Sep 27 14:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8c95cbdbe9f70000f6074cfae190d2b6d25180f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:e3:ea:a0:14:b7:21:9c:c7:3c:fc:02:a7:
05:67:2f:21:26:bd:a3:93:8e:a8:c3:13:3b:79:21:
c2:40:ca:1d:3f:05:06:d4:34:62:95:7d:9d:48:79:
c1:88:0e:82:1d:8f:9e:eb:6d:35:16:99:04:c4:5c:
fe:6a:59:2d:27:b8:b2:81:69:17:01:9d:af:f4:80:
30:47:72:ed:1e:dd:b7:7a:15:b9:27:9e:e6:66:6b:
a4:c9:8a:f8:97:e8:d5:4a:53:00:5f:0c:a6:83:1c:
f5:ad:63:ca:ad:57:01:4a:7e:db:c1:89:d3:2d:1c:
6f:f9:80:61:63:81:14:5e:74:85:33:f5:b4:1f:14:
c7:88:c3:df:f6:66:8f:69:8f:73:24:b9:19:fc:f0:
7f:96:04:7e:b7:62:75:9e:a3:a6:e1:81:40:1e:5d:
b5:57:09:1d:c3:ff:93:82:ea:22:d8:45:77:77:80:
d8:20:db:d5:cd:d2:13:de:02:d1:50:dd:46:ad:a6:
03:5c:81:a1:c6:13:4d:a4:8c:66:85:ab:97:7d:82:
92:c7:e5:98:0f:0b:98:fe:cb:58:5f:d1:23:b6:90:
e6:3f:d9:de:db:15:9c:20:0b:36:75:30:d2:5f:d4:
8e:ac:93:7b:bc:8c:45:32:86:e3:36:19:a8:1f:55:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:5C:BD:BE:9F:70:00:0F:60:74:CF:AE:19:0D:2B:6D:25:18:0F
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/6Mlcvb6fcAAPYHTPrhkNK20lGA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.164.0-212.68.175.255
212.68.180.0-212.68.191.255
Signature Algorithm: sha256WithRSAEncryption
7a:c6:14:21:8f:6c:ee:b2:b7:8a:a1:28:d3:b1:e4:c0:10:61:
86:64:05:8b:7c:97:2b:65:b8:7c:73:19:a3:90:3c:fa:b9:1f:
20:c4:9e:61:ad:09:96:8d:e1:1a:ed:1d:36:f2:05:50:41:cb:
9d:f9:cd:5a:c4:55:59:a1:45:aa:c5:a0:9b:85:6b:f8:d5:0a:
38:e4:f2:a9:25:0d:66:a9:43:66:1a:3e:90:09:50:4d:dc:a9:
7b:65:de:bd:ca:82:ed:ae:d2:10:83:73:bc:f1:30:49:06:35:
02:13:68:ac:47:8f:b2:e9:8c:d5:85:b0:40:ad:ed:64:8e:03:
29:e3:84:d6:47:ee:81:11:64:2e:66:07:e9:4b:7a:dc:6c:e1:
5a:8b:87:9c:e7:c2:11:7c:0a:8f:41:82:c2:88:ed:d5:3a:8f:
d3:ec:2a:b5:36:55:02:cc:d0:e7:2b:e5:7e:fe:f8:1f:4e:d3:
44:7e:87:f8:f4:22:97:0a:14:b8:2c:79:db:57:28:88:6e:f1:
aa:ba:97:fb:21:b8:1d:7b:50:8a:38:2e:bb:89:79:07:d2:7b:
ad:33:1e:e7:09:b9:f3:9b:5e:61:2f:3f:0c:11:9f:d6:29:2d:
c2:0d:28:f5:6a:5d:8b:39:3d:52:76:1d:be:70:b7:6f:18:ab:
dc:87:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net