Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/C0wq2MN4g8oph536z9sygxoEsVw.roa
File: C0wq2MN4g8oph536z9sygxoEsVw.roa (raw, json)
Hash identifier: RGXyo1bTFNDi+TRwgFFhW5FIRsij4WwP55G/AmWYQNE=
Subject key identifier: 0B:4C:2A:D8:C3:78:83:CA:29:87:9D:FA:CF:DB:32:83:1A:04:B1:5C
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 069A3CF3
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/C0wq2MN4g8oph536z9sygxoEsVw.roa
Signing time: Sat 01 Jan 2022 16:02:45 +0000
ROA not before: Sat 01 Jan 2022 16:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 193.36.227.0/24 maxlen: 24
193.36.179.0/24 maxlen: 24
193.36.185.0/24 maxlen: 24
193.36.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110771443 (0x69a3cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jan 1 16:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b4c2ad8c37883ca29879dfacfdb32831a04b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:7f:ce:a7:55:d7:c2:77:8f:6e:2f:27:d3:
49:63:e4:ff:8c:eb:20:28:ae:2e:c4:19:4b:02:bf:
52:76:1a:14:20:fd:c7:c0:0b:5e:f6:d9:d7:a8:9e:
7e:91:24:82:c6:ff:dd:51:e8:5d:87:87:c8:f6:fc:
85:ac:b2:83:bb:49:48:44:af:76:f6:22:b6:7b:1a:
c9:7b:65:1e:b3:19:3f:14:2c:93:bc:57:59:23:e8:
3c:a4:dc:13:0f:72:2a:23:78:52:da:e0:dd:7e:08:
bf:1f:7e:0b:fa:41:41:e4:d9:0b:7d:13:e3:68:9e:
04:a7:b8:69:5b:cb:76:ab:44:83:74:22:64:6c:1d:
bc:b9:30:5f:81:29:1b:98:42:4b:1d:a9:87:cf:0d:
6b:6c:b4:08:a3:af:d7:2e:89:6c:c9:85:7d:eb:51:
41:4c:d1:96:25:8f:98:b2:c9:01:6b:9f:a9:bd:89:
d0:9e:d3:36:c1:42:40:0c:db:89:66:83:0e:69:15:
7c:e3:e3:db:13:88:f7:d1:f8:4b:ad:0a:62:42:4c:
24:f6:5a:49:eb:bd:19:09:e8:3a:01:ab:0f:39:dd:
9c:2a:4c:c8:8d:ae:b6:14:f7:f3:96:cd:29:6a:84:
5b:93:ea:7e:58:be:73:c7:11:b4:87:57:84:68:c8:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:2A:D8:C3:78:83:CA:29:87:9D:FA:CF:DB:32:83:1A:04:B1:5C
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/C0wq2MN4g8oph536z9sygxoEsVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.179.0/24
193.36.185.0/24
193.36.187.0/24
193.36.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e5:ac:5c:84:cc:66:17:a2:93:8b:b4:8b:59:a3:4c:79:23:
62:68:46:e3:da:75:25:f3:31:cd:b8:c3:a5:6c:25:66:fa:6c:
fb:ba:cc:a1:ca:11:3c:c9:11:54:df:d5:fc:8b:35:54:9c:25:
7b:66:c9:d2:b7:cd:b5:79:ef:df:44:50:83:40:57:2c:f9:23:
db:5b:19:50:02:bb:38:38:bb:ac:61:b8:e9:20:67:98:09:ec:
b3:c9:d3:a5:e0:26:65:94:23:8d:73:71:b3:6f:8c:91:71:57:
b8:03:ff:7e:87:77:0d:b2:79:56:b5:ce:8f:e7:7f:36:4f:d7:
53:d9:a5:5c:1a:d0:c0:85:94:c6:1b:bb:3a:41:c4:88:a7:f3:
aa:46:4b:af:8d:2b:c8:a7:14:85:16:a4:69:9a:01:a5:25:45:
aa:0d:78:f6:5b:8a:4f:9c:1f:17:09:9f:8d:6b:c9:40:51:fb:
3d:79:3b:53:fa:00:59:aa:70:a6:a9:a2:e5:49:fc:c5:66:fb:
48:68:da:9f:bb:1c:10:6d:fb:8e:63:dc:73:63:2f:27:f7:4c:
4c:c7:30:d5:28:83:0b:c1:36:3e:b0:fc:84:1d:f1:d1:bb:52:
09:12:d4:91:12:03:16:fd:ca:2c:92:92:ac:4d:ef:a8:f2:fd:
10:f9:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net