Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/EeGOiign8lB_xzH5OVoMGskCp5Y.roa
File: EeGOiign8lB_xzH5OVoMGskCp5Y.roa (raw, json)
Hash identifier: cy89pKdRsRMo3YuD5qIXmTyvhtc10SVRFy0FCOvdocw=
Subject key identifier: 11:E1:8E:8A:28:27:F2:50:7F:C7:31:F9:39:5A:0C:1A:C9:02:A7:96
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 0C3F8F37
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/EeGOiign8lB_xzH5OVoMGskCp5Y.roa
Signing time: Sat 01 Jan 2022 06:56:56 +0000
ROA not before: Sat 01 Jan 2022 06:56:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49265
IP address blocks: 185.91.189.0/24 maxlen: 24
185.91.188.0/23 maxlen: 23
185.91.188.0/22 maxlen: 22
185.91.190.0/24 maxlen: 24
185.91.190.0/23 maxlen: 23
185.91.191.0/24 maxlen: 24
185.91.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205492023 (0xc3f8f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Jan 1 06:56:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e18e8a2827f2507fc731f9395a0c1ac902a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:01:31:17:bc:97:bf:c7:c1:20:bb:4a:69:
3c:6f:e6:db:86:26:ea:53:55:91:a0:93:99:88:a3:
07:a7:78:d4:21:3d:bd:5b:24:ee:a1:5c:74:60:2b:
a0:93:6c:ad:9a:ce:42:ca:6d:57:7f:dd:97:93:ad:
cc:65:6b:26:ae:42:b8:e8:98:5f:70:6f:63:aa:c2:
d2:0f:33:28:f3:6c:b0:36:08:85:6f:fb:ee:4b:e2:
02:6d:0f:ca:ca:3e:82:6e:53:9f:5f:cc:e4:77:2c:
46:fb:d5:dc:20:70:65:ca:bb:51:47:86:13:ed:bf:
55:2a:e2:89:33:9b:7b:cf:07:80:0a:63:f6:79:8d:
a3:38:40:f2:7a:d0:8a:ef:5e:46:ce:95:c5:fe:ab:
fc:b6:d9:c1:2a:87:8b:1f:e9:26:5b:1c:53:46:53:
e7:82:8e:65:0a:1f:dc:24:76:7c:a8:ef:61:63:26:
8d:e3:61:f4:58:b1:c2:1c:c1:11:3a:b8:ad:29:c9:
0b:e6:c2:30:bd:30:47:11:85:b9:ea:37:e6:b2:f4:
58:4e:e8:b5:b3:4c:34:f6:b8:e1:77:38:53:e6:e4:
25:71:01:1a:48:31:58:c9:73:1c:15:b5:73:30:36:
64:ce:b0:1d:5f:71:17:5a:8b:f7:cb:b0:00:1b:67:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:8E:8A:28:27:F2:50:7F:C7:31:F9:39:5A:0C:1A:C9:02:A7:96
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/EeGOiign8lB_xzH5OVoMGskCp5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ad:57:9d:8c:c4:f2:66:21:a0:1e:60:88:a8:bf:7d:a3:40:
84:d6:3a:c9:23:a6:16:8e:ea:5d:56:87:9e:6b:c7:e0:a5:a4:
c6:90:4d:f8:13:2f:5b:ee:c1:eb:d2:9a:ba:07:49:a6:a2:54:
b2:1f:d5:59:2a:1a:a7:fd:86:d6:3a:2f:6c:ac:5c:f4:1f:d9:
58:33:fe:70:2b:9e:d4:0d:34:e6:6f:05:a7:bf:19:cb:99:50:
93:58:66:a9:a5:fe:82:21:4a:39:3a:09:7b:c0:94:a0:fe:44:
f1:51:69:f1:c0:e5:bd:3f:57:d0:9f:78:82:ab:7d:09:70:a4:
8b:e4:27:7d:32:f7:92:31:a4:74:51:c4:53:1a:18:ad:bf:31:
2b:c4:f1:79:ff:ec:0b:f4:46:ff:7b:e7:21:3b:35:18:a3:7d:
67:93:8d:1e:11:ca:9d:97:59:34:3f:60:7c:10:5e:d9:28:2a:
a8:eb:33:bd:3b:f0:02:ad:99:3e:47:5a:fd:89:7d:16:5b:8c:
05:f4:d0:5e:fe:41:e5:9b:a3:01:e8:21:ee:77:03:42:2b:f5:
0e:97:0c:e4:32:24:49:3b:fa:63:02:3d:24:e1:6d:f4:a1:d7:
54:8e:05:5f:13:27:65:4b:24:e1:91:7d:0d:77:ee:d6:24:cd:
1f:94:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net