Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/0c4wpSZ_VzCV8PCIl8VvogTihIY.roa
File: 0c4wpSZ_VzCV8PCIl8VvogTihIY.roa (raw, json)
Hash identifier: Gj7UBWwg9yvD2qhtViUhRcLJJWKlK9TCdjmLTfynrwo=
Subject key identifier: D1:CE:30:A5:26:7F:57:30:95:F0:F0:88:97:C5:6F:A2:04:E2:84:86
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 03980084
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/0c4wpSZ_VzCV8PCIl8VvogTihIY.roa
Signing time: Sat 01 Jan 2022 14:54:35 +0000
ROA not before: Sat 01 Jan 2022 14:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203951
IP address blocks: 185.119.4.0/24 maxlen: 24
185.119.4.0/22 maxlen: 22
185.119.6.0/24 maxlen: 24
185.119.5.0/24 maxlen: 24
185.119.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60293252 (0x3980084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Jan 1 14:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1ce30a5267f573095f0f08897c56fa204e28486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:7d:15:77:41:7c:a6:81:7d:98:b1:83:f0:
0a:24:34:ae:03:d2:e4:44:71:9a:46:49:a6:16:5f:
a8:04:e3:73:84:07:d3:8c:c8:7d:1b:f3:b3:a3:7e:
27:d7:9e:bb:ee:a7:ee:10:a8:01:2a:87:0d:ed:3b:
a3:70:4c:1e:ec:ce:68:be:98:43:43:19:03:4b:b8:
82:2f:cf:c5:9f:ca:cf:8e:ae:e6:95:c5:34:cd:3b:
37:68:25:2d:51:79:bd:1f:cd:20:a6:53:83:91:f0:
f3:23:fc:73:34:7a:3e:3a:e8:87:2c:84:b6:0c:a9:
9d:1e:c3:0e:87:26:a7:ea:a8:7f:cb:84:34:f6:91:
89:b1:f0:77:ad:d5:11:c5:49:fb:7a:ee:7f:f7:02:
46:3a:69:3e:1f:c6:66:cd:27:a4:4b:db:9c:6b:a8:
68:c2:a0:a3:09:c3:a7:ee:84:64:10:a2:07:4e:d8:
4c:95:6b:26:e3:92:37:0b:a3:ad:93:3b:a3:d0:18:
10:4e:e1:00:66:fa:fc:4d:09:48:15:41:3c:0f:57:
28:c0:e2:87:34:48:87:20:41:e8:a8:ed:80:ca:ea:
d2:7e:30:18:67:93:47:d7:fa:fb:67:42:0d:70:85:
43:ef:72:bb:58:33:0e:c6:2d:68:8f:e6:16:c9:66:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CE:30:A5:26:7F:57:30:95:F0:F0:88:97:C5:6F:A2:04:E2:84:86
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/0c4wpSZ_VzCV8PCIl8VvogTihIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.4.0/22
Signature Algorithm: sha256WithRSAEncryption
06:7f:2e:c4:ee:e5:a2:bc:2d:82:eb:d8:1f:10:51:55:bf:5f:
86:59:9d:5b:b8:77:e7:27:ab:ca:d7:d0:f0:c8:ce:4e:d9:1d:
e4:a9:30:bb:40:26:79:52:53:dc:da:47:5d:33:2a:e5:09:63:
70:45:52:57:b0:12:63:1d:77:3e:9c:e0:c3:28:fa:6b:24:39:
fa:51:4b:49:71:af:1d:6b:06:4c:f5:70:1b:2e:ef:1b:2b:f9:
e0:89:cf:06:c3:0a:69:d9:55:08:92:8a:0a:d1:2b:0d:6f:b5:
18:e0:bc:3d:df:3d:3a:f9:f0:b5:a2:a1:2f:f5:87:14:da:d0:
87:97:2d:89:e0:a3:e2:3b:28:84:d0:41:3b:10:c5:bf:55:c4:
79:0a:24:98:76:24:d9:67:3f:1c:f7:8d:36:ef:34:d6:c6:17:
c8:42:84:24:0e:c6:b4:22:a4:94:72:03:c0:d4:7d:2d:3d:a2:
da:ab:8f:d2:40:4a:40:4d:70:a4:28:fd:a1:cd:40:86:ec:96:
7a:97:f9:92:4c:55:da:71:22:bb:ec:09:8a:5e:f9:b5:c2:97:
6e:32:bd:8b:75:94:bb:6f:c5:b1:31:3f:f1:63:ec:a8:82:47:
06:5a:af:8e:a2:32:98:a4:87:43:8e:56:6d:2c:c8:b8:0e:9c:
6a:86:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net