Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/uOhQWNKe_8I5lNaK0x1_0LpLYvc.roa
File: uOhQWNKe_8I5lNaK0x1_0LpLYvc.roa (raw, json)
Hash identifier: vH/hqVjBt9WMW2HlE7OkY/9J7PdxXoaBjQo460KuES0=
Subject key identifier: B8:E8:50:58:D2:9E:FF:C2:39:94:D6:8A:D3:1D:7F:D0:BA:4B:62:F7
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185394D25510D637405CFE97B7AD8E27D2B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/uOhQWNKe_8I5lNaK0x1_0LpLYvc.roa
Signing time: Thu 22 Dec 2022 10:07:15 +0000
ROA not before: Thu 22 Dec 2022 10:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205775
IP address blocks: 185.36.0.0/22 maxlen: 24
45.93.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:4d:25:51:0d:63:74:05:cf:e9:7b:7a:d8:e2:7d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 22 10:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8e85058d29effc23994d68ad31d7fd0ba4b62f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:75:5f:70:27:c3:98:59:8c:57:76:7c:ed:
7f:fa:07:02:5d:29:8e:d1:cb:e2:62:04:8b:f4:34:
e5:43:26:8b:ec:53:25:b1:b9:05:f9:41:88:c1:a0:
3e:7f:e4:32:fd:b0:82:b9:67:91:de:df:ba:84:89:
49:46:a3:bd:e9:c8:61:5e:35:4c:7f:85:55:6b:c9:
75:0e:7c:eb:6f:0b:4e:6d:cc:d8:4c:cf:70:25:4e:
47:6f:73:9e:e3:77:9f:e3:da:a8:9d:8e:3d:be:90:
4f:7a:b1:59:95:ef:fa:2b:3f:d3:4a:b0:86:3f:5b:
70:93:91:8e:0c:53:d0:0d:5e:f1:30:68:a8:f5:f8:
ac:4d:ce:12:57:e9:64:00:01:65:ee:f9:61:51:b1:
8b:a5:41:3f:64:20:64:e5:f2:a6:6c:42:62:d7:be:
6e:7f:f0:e4:24:ef:db:55:66:13:8b:c7:b7:88:bb:
d3:e4:6d:94:66:8a:3f:c3:5c:ec:ee:61:48:10:ee:
f6:03:73:fd:7e:bb:4f:97:c6:8a:d6:bf:ca:0d:81:
e1:b9:51:5b:d8:7a:ec:c0:a9:b3:a4:16:43:2c:ae:
41:0f:19:8a:d7:07:24:73:f1:05:f2:01:47:ec:05:
60:6d:ea:7b:d3:b0:bf:e4:3d:08:32:6a:b7:26:28:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:50:58:D2:9E:FF:C2:39:94:D6:8A:D3:1D:7F:D0:BA:4B:62:F7
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/uOhQWNKe_8I5lNaK0x1_0LpLYvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.56.0/22
185.36.0.0/22
Signature Algorithm: sha256WithRSAEncryption
37:a0:e9:15:80:95:07:b8:af:56:60:46:cb:bf:95:4a:09:32:
8c:96:00:00:1e:7f:67:1b:f2:20:20:4f:70:59:e4:3d:cc:30:
ed:71:cb:1e:45:7d:d4:02:4d:a5:e3:b8:ef:fd:68:06:3f:2a:
58:7c:b8:b9:a5:80:0a:ef:96:3c:6c:2b:21:e8:b2:87:c9:eb:
dc:85:61:fc:92:3d:2d:f3:2b:41:17:12:53:2b:b5:7e:3a:14:
a0:cc:3a:8b:2f:4f:6b:ae:5c:2e:77:67:15:ab:85:bd:76:6d:
b2:f7:ce:62:1e:d5:64:9c:bc:f8:44:50:e6:3b:e7:8d:7e:90:
33:6d:a8:d6:00:e8:66:e1:99:18:c5:4d:3a:00:a5:8d:9b:bb:
91:0a:4d:b8:00:bf:49:75:e4:c3:69:fb:1e:82:8e:69:93:0f:
0f:85:a8:b6:cf:00:c4:cd:48:58:42:6c:14:43:5c:df:48:05:
a7:50:d4:9d:a3:9c:42:eb:98:ca:60:6c:09:2b:48:a0:f8:47:
a5:40:0c:94:88:00:c8:9f:b0:6c:4a:2d:d5:59:3e:5b:85:f1:
eb:c4:c5:ff:f9:9d:49:20:cf:19:f5:83:b3:17:0b:df:ff:dd:
2d:bf:9d:43:3f:56:08:17:d5:4e:bf:2f:1f:1a:52:d8:ec:aa:
6b:c6:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net