Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/WCDidEJuiFY_OSLJdP3FoR_RtB4.roa
File: WCDidEJuiFY_OSLJdP3FoR_RtB4.roa (raw, json)
Hash identifier: BoUtq3EJ1eZD8aoasEi9lPQRWVsFs65D1R7si70Inro=
Subject key identifier: 58:20:E2:74:42:6E:88:56:3F:39:22:C9:74:FD:C5:A1:1F:D1:B4:1E
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 04B37EF0
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/WCDidEJuiFY_OSLJdP3FoR_RtB4.roa
Signing time: Mon 14 Mar 2022 15:25:53 +0000
ROA not before: Mon 14 Mar 2022 15:25:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29104
IP address blocks: 185.116.134.0/24 maxlen: 24
193.56.125.0/24 maxlen: 24
193.56.124.0/24 maxlen: 24
193.56.124.0/23 maxlen: 23
37.35.6.0/24 maxlen: 24
193.56.130.0/23 maxlen: 23
193.56.130.0/24 maxlen: 24
193.56.131.0/24 maxlen: 24
2a00:4f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78872304 (0x4b37ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Mar 14 15:25:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5820e274426e88563f3922c974fdc5a11fd1b41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:8d:be:95:31:d9:42:54:66:fe:01:0c:46:
ce:36:cb:a6:0d:00:ab:c2:5e:cc:51:18:2c:42:02:
9a:1b:8d:ad:38:54:73:0c:2d:86:e8:c6:2a:c3:4a:
57:f9:6a:df:7b:66:11:cb:74:39:52:33:e2:59:4c:
ce:68:b5:7d:88:6b:41:40:3e:6b:01:1c:cd:d5:3d:
f6:54:dd:23:55:3a:3e:72:71:04:c9:ec:9e:e0:70:
0f:bc:52:bb:7c:c6:9e:fc:14:41:1b:56:44:6b:8a:
8d:33:dc:bd:ee:dd:bd:80:ba:94:e9:fe:e6:9b:d4:
00:2b:bf:bb:d3:08:76:37:76:2d:e9:7c:97:4e:6f:
71:34:41:a0:25:f9:68:a2:62:0e:ef:11:3a:bf:96:
5b:05:5e:5b:af:8d:44:09:ec:21:31:d2:48:c9:3b:
a0:07:90:d7:9f:85:20:26:60:2b:ea:02:2e:d5:68:
08:e0:60:6c:f3:11:88:de:bb:a5:71:20:e7:0a:15:
74:65:19:62:bf:86:68:45:25:05:a4:58:01:96:d0:
b7:c3:fa:52:df:19:a8:c4:56:aa:2e:6a:a6:d5:1b:
aa:ec:9c:4c:49:97:62:33:ce:36:7c:aa:4a:b4:cf:
78:4e:4c:7c:06:6e:18:2f:71:bd:aa:e3:78:f8:df:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:E2:74:42:6E:88:56:3F:39:22:C9:74:FD:C5:A1:1F:D1:B4:1E
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/WCDidEJuiFY_OSLJdP3FoR_RtB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.6.0/24
185.116.134.0/24
193.56.124.0/23
193.56.130.0/23
IPv6:
2a00:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
9e:3e:75:00:1c:61:7e:e8:db:f9:e9:8b:4d:5d:56:8f:65:c2:
e4:aa:1c:05:83:27:2c:c8:75:07:62:45:49:ae:0d:fb:5b:04:
55:9a:bc:0d:48:d7:22:fb:67:44:4d:c7:22:95:fc:03:40:7a:
a5:ab:98:36:bb:00:17:7b:c0:73:42:64:d3:43:1f:d0:3b:80:
e4:94:a6:43:87:f8:67:23:e4:78:15:d1:b3:23:da:cc:47:38:
8e:10:ec:c9:2c:f5:33:55:42:ec:b8:05:74:52:70:4f:d9:96:
0d:29:ec:fb:0a:86:31:ee:fe:d5:59:3b:0e:29:f5:17:7e:e5:
ff:a1:f5:db:09:84:2e:71:6c:8f:df:84:02:79:17:2e:23:4d:
99:8e:04:ee:ce:cf:19:ef:af:31:6a:59:d3:d5:dd:0f:cc:52:
1e:5f:1d:3e:01:0b:75:2a:cb:61:22:bc:c2:a3:2c:c2:b0:a3:
20:66:84:70:5b:d7:13:a0:23:93:17:91:70:19:43:d7:22:0e:
04:e3:5a:c0:b6:2b:79:6b:ad:ed:c6:29:0b:f0:e1:2f:b0:50:
18:f2:12:ea:08:3a:73:7c:b5:21:8e:49:f4:ee:25:48:82:d2:
03:ef:0c:b1:ae:cb:be:ef:45:7c:28:84:3a:db:4a:13:b3:1b:
62:0d:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net