Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/1-CpGkpFsexqkVr6Nl_ehPntKAME.roa
File: 1-CpGkpFsexqkVr6Nl_ehPntKAME.roa (raw, json)
Hash identifier: 1mBhpeg5bp0OVUtkSj0yjEUSB1S5s0DZEij6gspjZQo=
Subject key identifier: F8:2A:46:92:91:6C:7B:1A:A4:56:BE:8D:97:F7:A1:3E:7B:4A:00:C1
Certificate issuer: /CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Certificate serial: 125D3DFF
Authority key identifier: 8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/1-CpGkpFsexqkVr6Nl_ehPntKAME.roa
Signing time: Sat 01 Jan 2022 06:59:40 +0000
ROA not before: Sat 01 Jan 2022 06:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203201
IP address blocks: 185.142.152.0/24 maxlen: 24
185.142.152.0/23 maxlen: 23
185.142.152.0/22 maxlen: 22
185.142.153.0/24 maxlen: 24
185.142.154.0/24 maxlen: 24
185.142.154.0/23 maxlen: 23
185.142.155.0/24 maxlen: 24
185.145.192.0/24 maxlen: 24
185.145.192.0/22 maxlen: 24
185.145.192.0/23 maxlen: 23
185.145.194.0/23 maxlen: 23
185.145.193.0/24 maxlen: 24
185.145.194.0/24 maxlen: 24
185.145.195.0/24 maxlen: 24
78.142.240.0/24 maxlen: 24
2a07:2e80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308100607 (0x125d3dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Validity
Not Before: Jan 1 06:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f82a4692916c7b1aa456be8d97f7a13e7b4a00c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:b3:ea:61:3e:52:f9:fa:d0:cf:41:90:57:
e5:a2:9e:36:ee:36:18:7a:2a:f8:91:e0:b0:fa:65:
4c:e1:08:78:de:1f:cb:eb:a1:fb:07:ee:1b:60:f5:
98:5d:f4:fe:53:76:f1:0e:b1:61:57:ca:5a:f9:64:
96:38:08:21:82:43:c3:b4:f2:5e:af:5e:32:c7:83:
37:37:8a:66:88:ee:e9:d7:64:ef:5c:70:8a:ca:7c:
18:56:78:9a:9c:4f:1a:79:7d:07:10:d7:2f:80:08:
be:00:28:fd:3e:85:85:d6:d5:b2:cb:2f:5b:bb:19:
f7:81:04:21:2e:1f:21:4f:0d:99:a6:4b:8c:0f:54:
33:c5:2a:12:ad:b7:78:57:ff:40:1a:cd:10:b4:41:
f2:1c:94:46:a4:f2:27:14:5e:a3:fa:44:06:55:8e:
6d:5e:36:91:2d:b8:12:0e:82:37:cd:46:54:06:d9:
18:04:a4:2f:ad:e6:7a:22:1e:04:47:05:61:04:47:
86:6c:66:37:30:46:80:60:09:53:7d:a5:59:05:24:
8b:dc:c3:32:e9:3f:58:0f:8a:f8:fc:a7:97:c5:e7:
1f:ab:36:df:f0:33:32:09:da:f0:37:8e:54:eb:95:
8a:03:66:9b:9a:b2:ff:5b:c6:a8:60:95:41:bd:de:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:46:92:91:6C:7B:1A:A4:56:BE:8D:97:F7:A1:3E:7B:4A:00:C1
X509v3 Authority Key Identifier:
keyid:8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/1-CpGkpFsexqkVr6Nl_ehPntKAME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.240.0/24
185.142.152.0/22
185.145.192.0/22
IPv6:
2a07:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:fe:3c:f9:a6:05:a2:0c:50:3e:17:d2:e4:3f:14:9b:0e:74:
8c:96:75:1e:e3:94:e5:c8:c3:f7:3b:12:b8:a9:cd:9d:37:6e:
87:cc:b4:c0:87:dc:79:c2:7a:17:59:1a:48:fc:4e:b9:cc:e7:
d8:62:c5:2e:ea:c7:e4:60:54:11:a1:39:6b:57:e6:14:38:b1:
8b:c2:f9:45:b1:e2:81:fb:8f:95:91:9e:34:53:3f:b3:83:a5:
5d:f8:69:0c:12:f7:ab:69:4f:ea:29:f6:85:22:b2:b6:f8:91:
5d:4b:78:78:2c:3d:09:39:3e:b4:6a:e5:c8:c1:69:15:aa:99:
1a:06:e8:f0:ba:69:c5:b9:9d:fe:11:6b:37:f9:64:cc:1d:46:
65:af:2f:63:84:c1:46:ef:84:84:0d:c3:5c:f5:0d:63:26:bd:
4f:d5:74:71:1c:f8:be:a5:b9:83:78:83:a3:c4:54:c7:00:d2:
ca:a9:c0:02:a2:b6:4a:be:22:59:3f:62:6b:0c:24:98:77:a7:
3e:d4:a4:87:e6:bc:a9:38:04:d8:dc:16:56:37:83:fb:1d:a3:
43:7d:1c:9f:33:65:68:b9:3b:c8:cd:ca:5d:c7:ac:ae:7b:0b:
b8:ee:a5:a6:11:18:c8:fc:d3:5e:34:d1:2e:44:5c:29:0e:b3:
be:e5:41:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net