Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/SQOJJAwIULOKt5xvpHrReZAunJs.roa
File: SQOJJAwIULOKt5xvpHrReZAunJs.roa (raw, json)
Hash identifier: EKmIgGCz8L9bFV2W72zpxvrmJ6ZkYmWKtcf5HjTvvHM=
Subject key identifier: 49:03:89:24:0C:08:50:B3:8A:B7:9C:6F:A4:7A:D1:79:90:2E:9C:9B
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 0BAC32E7
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/SQOJJAwIULOKt5xvpHrReZAunJs.roa
Signing time: Sat 01 Jan 2022 12:59:21 +0000
ROA not before: Sat 01 Jan 2022 12:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201293
IP address blocks: 185.79.188.0/22 maxlen: 22
185.79.189.0/24 maxlen: 24
185.79.191.0/24 maxlen: 24
185.79.188.0/24 maxlen: 24
185.79.190.0/23 maxlen: 23
185.79.190.0/24 maxlen: 24
2a03:5da0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195834599 (0xbac32e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jan 1 12:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=490389240c0850b38ab79c6fa47ad179902e9c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:6e:33:41:02:eb:bc:b1:9d:23:10:ed:1e:
76:58:72:94:3e:39:b5:3e:16:41:37:d6:8e:83:44:
63:ab:f0:76:1b:dd:82:82:38:dc:6b:5d:2b:1d:92:
d2:c2:07:94:f4:d2:28:a7:7f:5d:2c:62:98:4d:07:
42:b8:9e:9a:45:3f:8c:32:4b:e4:a6:47:d8:99:f8:
25:71:f7:be:b8:20:6e:09:eb:a3:87:de:08:b1:67:
f1:f6:07:2c:6e:f2:e4:40:d6:d2:a6:da:58:2b:77:
de:61:3c:e3:b0:17:e9:7b:e2:64:23:d9:30:1b:98:
33:68:62:db:6a:4c:42:8e:5b:d9:f9:dd:f6:fa:6b:
d7:5a:b1:9f:0a:59:ce:c3:51:e8:f6:00:8a:94:c6:
76:7e:87:f5:2e:67:d6:ce:f4:32:4d:43:87:14:23:
c9:07:6d:84:2a:70:f1:fe:7d:f9:d5:3e:47:9f:6d:
26:88:7f:ec:dd:e9:44:db:0f:a7:3a:ad:32:63:47:
81:03:c2:8c:c9:ba:68:e4:91:dc:4f:ca:52:7f:18:
20:5e:b1:0b:e8:b1:39:06:a1:f6:34:24:61:f1:43:
25:92:6e:06:3d:40:1b:4b:ef:70:47:b2:7e:9a:73:
97:13:44:e4:13:84:ba:7a:5b:a6:e9:14:48:68:45:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:89:24:0C:08:50:B3:8A:B7:9C:6F:A4:7A:D1:79:90:2E:9C:9B
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/SQOJJAwIULOKt5xvpHrReZAunJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.188.0/22
IPv6:
2a03:5da0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:6f:61:28:07:09:8c:23:9b:48:86:1c:9e:38:e5:ac:b6:87:
0e:f5:01:ec:57:ad:42:08:1b:7a:ae:b2:7b:37:16:e6:7d:df:
2f:d5:3d:8d:43:d8:b4:54:fe:d1:a2:1c:d2:2f:4e:d6:5f:ae:
49:01:d8:d0:37:cf:9c:ae:e0:e1:96:49:a2:1f:c4:25:21:14:
f8:25:11:ff:c4:5b:7b:59:29:9d:d4:03:78:c7:9d:fc:ff:e8:
db:17:d5:d6:40:3d:6e:13:fb:05:98:c0:73:5f:a3:13:cd:81:
24:c3:9b:5b:d5:43:f4:b1:ec:5e:70:10:ec:7e:cd:5d:80:4c:
20:9c:b4:3f:d4:81:cb:1d:43:54:23:ae:72:c0:7c:69:be:93:
94:d1:a1:d3:ce:4a:78:ce:a5:fd:dd:5b:1d:f0:5a:f1:ab:65:
f8:6c:e2:88:8d:bb:0e:9f:f5:42:79:96:1e:46:0b:2a:ca:11:
7f:11:ec:a4:be:a3:6e:a8:fb:2d:98:e6:5d:f5:38:c0:2b:b0:
ba:c9:cd:dc:ca:2e:c2:5d:d8:b2:80:fc:ef:0d:c6:2d:32:72:
7c:9e:f9:d5:8c:7c:cb:96:46:0e:10:e4:80:1e:c6:59:c4:70:
bf:26:83:8b:80:c5:65:5a:2b:52:d2:94:aa:56:ed:81:75:31:
22:5a:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net