Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/u_4UUIXuiKw_VzqCXGJueUofx1k.roa
File: u_4UUIXuiKw_VzqCXGJueUofx1k.roa (raw, json)
Hash identifier: VSSTe9Po/8LqB5npK5YPGLgb4fYx7QYFTW5D+pnetS0=
Subject key identifier: BB:FE:14:50:85:EE:88:AC:3F:57:3A:82:5C:62:6E:79:4A:1F:C7:59
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 1B1EFDCF
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/u_4UUIXuiKw_VzqCXGJueUofx1k.roa
Signing time: Sat 01 Jan 2022 14:01:41 +0000
ROA not before: Sat 01 Jan 2022 14:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61124
IP address blocks: 185.13.188.0/22 maxlen: 22
85.193.144.0/20 maxlen: 20
148.252.32.0/19 maxlen: 19
176.123.32.0/20 maxlen: 20
2a03:3ec0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455015887 (0x1b1efdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Jan 1 14:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbfe145085ee88ac3f573a825c626e794a1fc759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:dc:12:97:33:40:fd:1d:15:51:da:1c:db:
d2:c4:8a:a5:e4:e3:dc:f6:ab:5e:39:47:12:d0:19:
73:17:f7:ff:ba:59:9d:88:7d:a4:a9:f9:e3:e5:36:
f7:0e:42:cf:fd:58:86:fe:b0:3d:4a:2f:29:b3:f1:
43:fd:d0:51:f7:99:dc:c2:8e:4b:83:88:52:10:04:
99:f4:36:dc:18:8a:3f:73:29:ef:e1:29:bc:bb:f4:
32:a2:93:60:ff:85:da:da:21:79:2a:54:fd:53:f9:
57:df:f3:d7:1d:92:5c:41:10:98:96:ac:64:59:8e:
e6:4a:17:81:2a:cd:0c:b5:25:9d:e0:24:1f:5d:ba:
fd:2d:d6:08:b0:85:84:14:64:be:17:09:cb:11:72:
60:21:fc:70:c1:97:0b:55:ce:38:91:92:3c:e8:22:
e0:af:41:c6:6d:ad:7c:97:d5:6f:07:f5:3d:43:d9:
29:7e:7b:54:a0:e1:65:ae:dc:45:bf:82:7c:f8:96:
03:8c:4c:fc:5a:3e:41:7d:6a:ab:3d:3b:84:47:c8:
fa:c9:1f:af:ef:4d:5a:88:3c:e6:4f:ae:be:f0:b6:
cf:a0:e3:46:37:ca:9f:c5:0e:ca:ff:79:48:24:81:
84:91:27:69:7d:44:bf:da:f9:49:f5:10:96:42:f0:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FE:14:50:85:EE:88:AC:3F:57:3A:82:5C:62:6E:79:4A:1F:C7:59
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/u_4UUIXuiKw_VzqCXGJueUofx1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.144.0/20
148.252.32.0/19
176.123.32.0/20
185.13.188.0/22
IPv6:
2a03:3ec0::/32
Signature Algorithm: sha256WithRSAEncryption
14:f4:ce:cf:3b:e5:14:86:aa:58:64:6d:c2:e8:52:a0:b9:73:
86:e5:0b:65:15:b5:73:d2:16:40:b9:45:d1:e0:c4:6c:f1:93:
cc:b6:f6:73:68:21:e5:46:da:62:4f:b0:57:8d:15:28:9a:1b:
aa:08:a4:f8:41:1a:ae:11:2d:1b:ac:22:1c:f2:82:c6:70:73:
19:b2:db:ff:cc:a1:36:d6:81:d7:1c:96:da:21:8f:64:23:7a:
55:31:b3:a2:cb:b4:55:ec:10:c4:5b:26:b0:ff:67:e7:8f:a6:
fa:31:33:a7:40:00:6b:ab:bf:8a:64:c2:a7:f1:53:54:8d:16:
af:ed:9b:fb:c0:80:03:d2:97:02:48:15:98:09:dd:b5:b7:41:
63:c9:24:d1:61:d5:d8:b8:38:22:59:57:d4:2f:cb:8d:2c:33:
5e:50:44:3f:a9:59:57:f9:95:34:26:11:75:ac:79:5c:3c:10:
d0:d4:40:a7:91:d4:b3:77:68:31:46:39:a1:fa:7d:3e:73:7c:
da:3a:ef:37:f9:e4:da:80:f8:d2:a9:90:63:3a:91:f2:45:c0:
b4:42:db:2d:96:6f:9d:00:98:8b:da:34:3d:ea:7c:bd:31:94:
12:3c:b8:6d:20:ea:56:10:c6:9b:cf:12:bf:0b:c7:28:80:55:
ff:c1:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net