Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/jeUkqC6YRUawxcGQobG2LQLy1G0.roa
File: jeUkqC6YRUawxcGQobG2LQLy1G0.roa (raw, json)
Hash identifier: pyh6P8eHBUYaO+qpKciL/WWsk3IQqyUjzD4kXeCnQ6Y=
Subject key identifier: 8D:E5:24:A8:2E:98:45:46:B0:C5:C1:90:A1:B1:B6:2D:02:F2:D4:6D
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 0182C5A75B44BD3628DAE265210B751CE54B
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/jeUkqC6YRUawxcGQobG2LQLy1G0.roa
Signing time: Mon 22 Aug 2022 13:04:15 +0000
ROA not before: Mon 22 Aug 2022 13:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35237
IP address blocks: 194.54.15.0/24 maxlen: 24
194.54.14.0/24 maxlen: 24
185.157.96.0/23 maxlen: 24
84.252.144.0/24 maxlen: 24
84.252.144.0/23 maxlen: 24
84.252.145.0/24 maxlen: 24
185.157.99.0/24 maxlen: 24
84.252.149.0/24 maxlen: 24
84.252.150.0/24 maxlen: 24
84.252.147.0/24 maxlen: 24
84.252.146.0/24 maxlen: 24
91.217.194.0/24 maxlen: 24
195.43.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:a7:5b:44:bd:36:28:da:e2:65:21:0b:75:1c:e5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Aug 22 13:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8de524a82e984546b0c5c190a1b1b62d02f2d46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:9e:8c:4d:27:31:b8:85:fa:35:21:c4:2f:
70:23:31:68:25:f5:aa:f3:9f:19:86:42:8b:65:9c:
9b:21:b6:74:8a:19:79:21:09:af:4f:0f:55:1d:ce:
72:13:87:4d:76:95:7a:3b:10:a6:26:c7:4f:ba:8a:
b9:58:5a:18:0a:48:8c:d9:58:06:71:da:e8:82:31:
a5:05:79:de:54:b3:b4:96:44:2c:f9:f0:3e:8b:ae:
e7:67:71:c5:4d:60:28:5e:60:72:57:58:a3:06:84:
43:4c:1c:61:12:15:4c:7f:ed:2b:29:d7:2e:23:79:
52:d8:24:ea:d9:ed:41:c9:3b:64:45:b5:fa:a1:41:
e5:b9:55:a2:e0:b8:e0:a2:f4:b7:ba:12:30:37:ec:
f2:bd:b0:78:5d:13:40:81:0c:ad:d0:fb:fe:fd:47:
0f:46:c0:8c:26:e0:f6:e3:c1:ff:08:08:4c:b8:64:
f8:70:97:6a:03:b0:c5:0f:2c:09:44:a5:62:5e:fd:
8e:58:b0:64:b8:0f:22:df:37:87:0b:f1:e0:94:de:
8e:2f:24:07:94:00:77:53:4a:37:bb:f3:8c:bb:7e:
f4:89:77:b2:fa:d4:e7:d6:9a:b5:97:c3:71:23:10:
9b:98:3d:05:a1:78:1f:f7:4b:84:9c:20:5d:81:c2:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:24:A8:2E:98:45:46:B0:C5:C1:90:A1:B1:B6:2D:02:F2:D4:6D
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/jeUkqC6YRUawxcGQobG2LQLy1G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.144.0/22
84.252.149.0-84.252.150.255
91.217.194.0/24
185.157.96.0/23
185.157.99.0/24
194.54.14.0/23
195.43.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:59:f4:b1:ce:34:6c:c8:f5:c0:28:26:92:cd:2d:46:53:ee:
25:b6:57:8f:40:aa:dd:67:dc:bb:9b:77:25:3f:28:49:6a:0e:
a1:d3:aa:38:a0:af:43:17:a7:92:5b:0f:cc:71:1e:7c:54:fa:
1f:b6:ab:75:72:5f:57:23:ca:73:a7:82:03:70:cf:2b:8b:eb:
b5:0e:e5:89:4e:8d:4b:27:a9:a1:20:37:5d:06:9d:49:c2:7f:
28:6f:54:86:99:64:53:30:82:b9:f5:eb:ed:29:60:31:e1:7b:
59:52:f6:6d:63:fc:10:80:40:38:03:a7:1f:9f:20:67:0a:1d:
22:a0:1f:32:62:b7:71:74:ad:ed:7f:b2:b2:66:31:dc:b1:b2:
ac:2a:12:11:fe:68:68:e0:33:19:9f:57:1e:2f:3e:2e:4c:79:
ca:74:82:f3:58:5b:e6:e2:d8:f0:7f:10:b9:4c:43:f2:c0:e7:
5f:38:b0:26:33:84:39:31:5c:29:c6:13:c4:54:0f:7b:72:b4:
69:3d:68:b7:a9:01:90:d4:de:35:9e:64:78:2f:5a:20:9b:bc:
17:27:27:ff:33:96:13:60:bd:e2:02:22:24:80:3f:f1:4d:fb:
ec:3b:1e:00:0f:0a:56:68:29:28:28:2b:ce:00:ae:b5:d6:5c:
05:b1:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net