Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/w4HiiX2K9zRzOKD8ES8qwvluEJk.roa
File: w4HiiX2K9zRzOKD8ES8qwvluEJk.roa (raw, json)
Hash identifier: VTBA0khAM0Cm8Xx11QKke7NQ150f1nfglZbDUKADC8w=
Subject key identifier: C3:81:E2:89:7D:8A:F7:34:73:38:A0:FC:11:2F:2A:C2:F9:6E:10:99
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 1583D8A0
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/w4HiiX2K9zRzOKD8ES8qwvluEJk.roa
Signing time: Sat 01 Jan 2022 16:04:56 +0000
ROA not before: Sat 01 Jan 2022 16:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200818
IP address blocks: 185.95.52.0/24 maxlen: 24
185.95.53.0/24 maxlen: 24
185.95.54.0/24 maxlen: 24
185.95.55.0/24 maxlen: 24
185.95.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360962208 (0x1583d8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jan 1 16:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c381e2897d8af7347338a0fc112f2ac2f96e1099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:ac:a7:68:0c:ff:6d:15:69:68:5a:b3:57:
06:f2:59:9f:95:8d:a4:96:50:f7:d9:d8:75:ba:2e:
07:05:d0:43:32:cc:09:c9:6f:43:b4:26:93:92:98:
df:2d:59:2a:b8:3b:88:1a:c3:30:cc:12:5a:e0:18:
1b:fd:22:c4:b8:92:28:31:ed:0c:27:f3:ae:61:a7:
fe:95:3c:66:18:a5:19:9e:0f:8f:a1:3a:3b:0e:b8:
c9:b8:18:dd:14:0a:2d:8c:69:c1:a8:c0:f4:47:81:
fd:3d:88:2d:5b:88:b5:7d:9e:0e:4b:14:23:d9:fd:
c4:d1:c1:22:cd:14:db:bb:72:92:e8:90:f6:10:9e:
45:34:d3:a7:f0:02:a9:e7:d0:7b:43:24:d1:6b:28:
08:d3:8e:98:0f:bb:e6:85:e9:bb:23:31:4e:83:20:
4a:63:99:60:b5:60:40:8e:6b:98:b4:0d:88:2b:2a:
77:97:dd:9e:91:43:63:5d:b8:14:13:5b:4f:5b:ca:
40:50:2e:90:41:61:35:f2:f4:ca:c0:cd:09:a2:a0:
a5:b2:74:dd:66:9b:92:40:75:e5:e9:ed:6c:c5:f9:
ca:f3:1d:2d:2c:8d:1c:40:b7:3c:f0:3d:c5:07:ef:
a9:6c:34:a1:b0:bf:6d:00:21:6d:68:e5:f7:8a:96:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:E2:89:7D:8A:F7:34:73:38:A0:FC:11:2F:2A:C2:F9:6E:10:99
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/w4HiiX2K9zRzOKD8ES8qwvluEJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:c0:0b:e9:ea:24:07:cb:c8:c2:c1:4e:4c:40:b6:a2:71:eb:
0e:b8:64:8c:1c:c4:be:b9:56:ef:6d:37:eb:41:a5:98:63:0e:
17:69:93:e7:69:88:77:b9:da:9b:09:55:13:95:56:8a:cf:5a:
60:51:29:00:43:ff:38:e0:75:a3:38:e5:17:0b:29:14:3e:9d:
d2:02:fb:fd:fb:90:ad:f0:49:c7:aa:37:d1:24:c8:2c:73:6c:
53:87:53:d8:9d:b0:fb:55:fa:15:e8:65:fd:4d:55:23:37:e7:
50:52:4e:b0:19:b2:44:e0:15:3e:b1:92:32:68:d0:72:8f:11:
c5:21:6c:d2:c0:1b:99:32:76:99:49:14:20:99:37:0b:55:ed:
14:d0:30:f0:c4:79:73:d2:34:6c:83:c0:c4:4e:48:a6:82:cd:
89:ef:f3:1d:7b:56:80:02:43:35:03:c1:58:53:08:d8:3f:03:
3e:bd:7e:46:1f:ae:9e:86:87:f9:38:a7:4c:40:52:4e:c1:92:
c7:d4:ac:e1:8a:a8:35:82:c1:cf:ec:c5:c9:ae:32:fd:73:42:
5e:8c:56:97:38:b0:b7:b9:8f:d0:43:96:bc:8f:92:1f:01:f3:
05:51:05:9d:e9:ab:a0:fa:ce:d0:a8:da:37:fa:6c:26:3c:ea:
90:9f:2e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net