Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/dXf4Za_0PfdxNro6QVx2OEIBGlk.roa
File: dXf4Za_0PfdxNro6QVx2OEIBGlk.roa (raw, json)
Hash identifier: 5PxcNTq2E6k15LPN2sSTQzi/L2d+GY0rA92iitR3FVU=
Subject key identifier: 75:77:F8:65:AF:F4:3D:F7:71:36:BA:3A:41:5C:76:38:42:01:1A:59
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 10F4F7DA
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/dXf4Za_0PfdxNro6QVx2OEIBGlk.roa
Signing time: Sat 01 Jan 2022 10:54:46 +0000
ROA not before: Sat 01 Jan 2022 10:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15436
IP address blocks: 193.109.125.0/24 maxlen: 24
193.109.121.0/24 maxlen: 24
81.88.96.0/21 maxlen: 23
193.109.117.0/24 maxlen: 24
193.201.1.0/24 maxlen: 24
193.201.0.0/24 maxlen: 24
193.201.4.0/24 maxlen: 24
193.201.2.0/24 maxlen: 24
193.201.3.0/24 maxlen: 24
193.201.7.0/24 maxlen: 24
193.201.6.0/24 maxlen: 24
193.201.5.0/24 maxlen: 24
2a02:c18::/32 maxlen: 48
2a02:c18::/48 maxlen: 48
2a02:c18:6::/48 maxlen: 48
2a02:c18:1::/48 maxlen: 48
2a02:c18:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284489690 (0x10f4f7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jan 1 10:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7577f865aff43df77136ba3a415c763842011a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:8d:8c:9f:70:1f:07:95:4d:84:95:05:15:
ec:3e:a1:68:61:df:ae:0b:95:13:83:48:06:48:8e:
c3:44:13:27:74:ca:b8:9e:b6:e0:e4:b2:3d:ec:98:
27:9f:c4:4e:03:16:1f:25:8a:88:e4:2d:a5:5d:fd:
6c:c5:d5:f2:4a:8f:cf:08:31:a4:f4:be:8e:a0:f3:
70:38:41:dc:d4:6f:e6:18:88:ef:0a:44:5f:36:7c:
ec:4a:f3:6f:1e:c4:a9:f1:c8:cc:3d:7f:96:42:dc:
2e:b8:85:83:ab:dd:92:86:78:4d:3d:b3:d7:f3:73:
57:aa:36:88:61:c0:73:35:56:0b:ce:c9:7d:fa:c5:
5d:8d:bb:26:99:9d:0e:7f:e4:96:08:af:20:ad:7d:
f8:72:61:00:12:fb:85:48:bf:88:6c:1e:54:62:d0:
ae:53:17:c7:61:f6:91:b4:0c:4e:99:55:4a:95:5b:
44:64:14:19:c8:75:bb:32:74:dc:de:15:3a:fc:b5:
58:93:a9:9c:84:23:ed:97:73:8d:e0:11:93:19:7c:
cb:d4:e6:bc:de:2c:7d:11:d3:fc:93:44:ed:64:e4:
30:d8:28:06:05:36:f3:74:b1:2c:75:65:6a:b8:ae:
41:71:ca:77:a7:e2:f9:1f:ce:97:fb:ed:98:f7:41:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:F8:65:AF:F4:3D:F7:71:36:BA:3A:41:5C:76:38:42:01:1A:59
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/dXf4Za_0PfdxNro6QVx2OEIBGlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.96.0/21
193.109.117.0/24
193.109.121.0/24
193.109.125.0/24
193.201.0.0/21
IPv6:
2a02:c18::/32
Signature Algorithm: sha256WithRSAEncryption
16:d5:50:be:82:58:db:48:d8:86:75:36:4d:b0:34:e0:b1:e7:
2f:d9:0e:0f:05:ce:67:52:15:c0:72:50:d3:65:bd:52:27:7d:
56:9c:e8:3f:ad:59:25:c5:d1:f6:b5:ad:39:9a:b5:38:ae:e9:
a1:85:5d:31:31:5d:da:b2:22:16:f0:d1:d2:17:c4:30:f1:7d:
c5:51:cf:e0:b9:36:86:a3:9d:9c:51:69:97:a2:36:c3:b6:27:
9d:00:ac:51:2e:6e:f9:79:f6:c9:de:2f:b3:39:3f:25:52:0a:
c7:bd:c2:39:58:c4:03:dc:ad:f2:b3:7e:34:4a:42:58:e4:67:
ad:4e:13:0d:a6:f9:81:1a:61:92:9f:60:80:88:ab:48:7f:e9:
21:1c:24:7e:73:81:06:2b:a3:9a:6f:27:ce:a7:02:0a:f7:6e:
ae:20:35:b4:71:07:f2:dc:ca:49:38:c1:fc:4c:b6:89:72:75:
e5:dd:0a:a8:ca:6b:8e:2f:0f:40:8d:aa:cf:ad:0f:4b:a4:b5:
8b:5d:64:d8:40:b5:f1:04:71:6a:8d:8b:64:6f:01:e8:a7:cd:
96:7a:07:2c:30:7f:9e:57:57:0c:84:8f:3c:27:42:db:aa:9a:
d3:20:96:7c:c8:52:dc:67:06:39:9d:b8:4d:1d:b8:21:ec:72:
71:bc:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net