Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/uYLmyxeV6l21dXd3wRXQpDuXfJY.roa
File: uYLmyxeV6l21dXd3wRXQpDuXfJY.roa (raw, json)
Hash identifier: /dAevNu8JbV/efTNHYhhFJJevnpGSBC58HNeZd2b8ck=
Subject key identifier: B9:82:E6:CB:17:95:EA:5D:B5:75:77:77:C1:15:D0:A4:3B:97:7C:96
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 0854D7D8
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/uYLmyxeV6l21dXd3wRXQpDuXfJY.roa
Signing time: Sat 01 Jan 2022 05:05:35 +0000
ROA not before: Sat 01 Jan 2022 05:05:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9167
IP address blocks: 213.150.32.0/19 maxlen: 19
195.184.96.0/19 maxlen: 19
213.173.224.0/19 maxlen: 19
85.235.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139778008 (0x854d7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jan 1 05:05:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b982e6cb1795ea5db5757777c115d0a43b977c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:36:4a:81:09:a0:3e:b7:e5:12:c8:f9:ac:
2a:06:c6:aa:64:48:02:4e:bc:f3:89:c6:55:07:9a:
04:71:07:bf:d3:2f:26:fb:21:33:28:41:b1:20:86:
61:fb:0c:49:14:82:1f:73:80:63:e5:41:25:1f:83:
2d:30:e9:fb:13:c1:b2:e0:ac:99:51:cc:49:a1:e7:
b3:e8:c5:3c:c0:60:66:f7:8e:f5:8f:7c:b2:b8:b3:
80:dd:9f:98:05:30:5c:fb:79:c9:da:c8:10:16:50:
33:0b:49:0f:55:55:34:ee:ae:c6:7a:25:36:05:18:
56:25:06:c0:f1:67:4b:69:d9:c4:21:7d:a3:0f:94:
06:92:c3:98:6e:61:69:9a:fb:4b:ef:5a:d3:ec:c4:
2e:37:18:0f:8c:b6:d3:a2:f2:ab:1b:6a:b0:20:63:
fa:16:57:2a:93:bc:d2:8e:b7:97:84:73:ec:61:a6:
66:ed:1a:81:2d:52:99:ec:bf:af:f2:a5:85:8b:00:
dd:49:9a:63:47:a0:9a:5b:65:28:af:75:d3:3b:c6:
b6:8f:34:bd:6d:e8:54:cf:71:d4:58:1e:f0:f9:d0:
46:78:dc:84:6d:bb:f3:b9:65:d9:4c:b2:cb:52:3f:
54:48:ad:5d:cd:9d:04:af:34:b2:e7:9a:69:a2:4a:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:82:E6:CB:17:95:EA:5D:B5:75:77:77:C1:15:D0:A4:3B:97:7C:96
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/uYLmyxeV6l21dXd3wRXQpDuXfJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.224.0/19
195.184.96.0/19
213.150.32.0/19
213.173.224.0/19
Signature Algorithm: sha256WithRSAEncryption
73:d4:a9:6e:57:50:7e:be:3c:ee:14:b9:fc:47:dc:ba:1a:e1:
8d:42:d8:b2:99:98:7a:07:7b:0d:82:90:76:39:32:64:a2:a7:
ac:13:3d:32:58:f9:df:b8:6e:2b:76:c1:c0:93:f3:5e:05:6c:
09:b3:84:56:9c:41:0a:e2:af:48:0e:91:3d:2f:ab:76:c1:3c:
35:25:77:89:75:a0:38:dc:fa:89:af:76:26:11:dc:70:7a:15:
01:35:1b:a5:c7:48:99:d0:7b:8d:9f:1a:8c:f3:50:b5:29:c9:
29:5f:e1:64:35:78:7c:cb:fd:89:8c:e1:42:c6:aa:4c:00:1d:
72:44:dc:b2:63:61:7c:77:45:41:a7:1e:da:f9:db:a2:19:ed:
fd:3b:eb:46:9f:2b:a1:c3:54:f6:9a:33:bd:87:24:94:2a:be:
22:2f:e3:81:d7:3b:e9:99:0f:4f:74:e6:d7:b9:e3:8a:a3:dc:
1b:06:19:9b:8b:20:85:ff:65:d8:c3:1e:4e:92:09:9e:b7:62:
a5:61:c4:6f:32:4f:b9:4e:06:47:3d:ce:4e:b2:e4:e4:ab:9e:
42:e4:fa:af:99:88:fb:4e:ed:8c:3d:b6:02:62:7f:25:a6:d6:
29:fd:1a:49:ee:88:27:37:22:75:17:0a:40:be:63:66:24:01:
49:0a:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:31 2023 by rpki-client on console.sobornost.net