Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/9K8QIcPPsiY8kil-C4DgWPUiFD4.roa
File: 9K8QIcPPsiY8kil-C4DgWPUiFD4.roa (raw, json)
Hash identifier: ElhYD4pQTdSX7x0Bws66rnCl2/SV0w2v3FAGdQImy9s=
Subject key identifier: F4:AF:10:21:C3:CF:B2:26:3C:92:29:7E:0B:80:E0:58:F5:22:14:3E
Certificate issuer: /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial: 37BC8CDC
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/9K8QIcPPsiY8kil-C4DgWPUiFD4.roa
Signing time: Sat 01 Jan 2022 08:53:03 +0000
ROA not before: Sat 01 Jan 2022 08:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49879
IP address blocks: 185.21.204.0/22 maxlen: 22
217.116.192.0/21 maxlen: 21
217.116.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935103708 (0x37bc8cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Validity
Not Before: Jan 1 08:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4af1021c3cfb2263c92297e0b80e058f522143e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:31:65:43:87:fb:f1:aa:16:e0:90:ad:ae:
ae:ac:92:24:99:39:db:b1:38:10:5b:3d:ee:a7:df:
50:21:6f:b3:58:52:b3:5b:68:44:d1:3d:e0:ba:78:
9a:52:1a:1c:be:61:6e:23:b4:2b:c7:d7:dd:70:3b:
18:d0:e8:99:e6:63:85:32:d1:eb:cf:af:bd:09:91:
6d:dd:8a:5d:dc:f8:97:3b:72:4e:89:2f:a4:9c:9c:
9e:ff:ab:ee:71:fe:38:d8:1a:94:88:c0:18:8d:a1:
cf:3e:c1:e1:23:03:e2:ab:92:0b:22:db:39:ea:33:
51:51:1c:33:ca:2f:e3:d5:36:34:d9:03:1a:de:0c:
7e:a3:8e:00:a8:26:2a:fb:b7:51:18:f1:2b:26:39:
45:ba:0b:09:f2:16:51:54:e7:ef:c0:b9:f1:f6:5f:
b4:8e:08:4a:81:fb:96:1f:36:f5:be:97:ab:e7:6e:
0e:81:24:6a:96:74:99:71:21:04:cf:93:58:31:43:
5b:30:3b:68:eb:63:5f:6d:c1:4e:5d:db:0d:c7:47:
58:ee:b1:ad:6d:fc:9f:a8:b4:cf:4a:1f:3f:78:a3:
e3:56:c3:77:ec:9e:e0:44:50:43:4e:a1:5b:64:c6:
88:a9:e0:18:8e:97:1a:80:fb:67:eb:f8:93:50:f4:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:10:21:C3:CF:B2:26:3C:92:29:7E:0B:80:E0:58:F5:22:14:3E
X509v3 Authority Key Identifier:
keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/9K8QIcPPsiY8kil-C4DgWPUiFD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.204.0/22
217.116.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:73:42:a8:d9:a3:ee:2b:62:4c:27:2d:41:86:ef:03:62:bd:
2e:2e:30:cc:33:64:fc:89:65:55:b0:03:63:09:0e:cf:e6:b2:
35:d6:63:69:23:56:ee:81:a2:95:9b:72:53:23:4b:b9:ff:82:
84:f9:b2:8f:a0:00:b3:67:47:73:15:ce:05:8a:60:52:66:3b:
55:ea:68:6c:15:f4:45:7d:7b:41:71:ef:af:dd:0e:52:81:f7:
99:ce:d3:84:8a:29:05:46:c2:0c:a9:6c:57:69:eb:74:e2:70:
de:08:4a:91:74:80:b1:64:87:61:c8:13:06:e2:60:1f:d4:cb:
36:69:44:f4:33:99:75:39:55:bb:c6:ab:77:d1:94:2c:f5:d4:
24:5c:52:4a:51:04:9b:de:f2:28:95:a7:e8:93:7a:4e:71:5d:
31:c7:0e:e8:a5:47:4e:e7:dd:4e:b7:f6:ca:ec:1c:29:73:81:
66:63:5f:5c:d0:07:eb:bc:94:fd:c7:38:c6:78:ab:88:2e:23:
43:fe:0b:5a:cf:59:1c:3f:ed:ce:ef:24:28:f2:7e:d3:af:54:
32:c2:12:c9:bf:92:7f:54:7b:9e:3b:d6:7c:05:52:aa:48:19:
b3:bb:ca:07:5f:ab:a5:47:8a:d9:55:6a:28:fe:c4:09:f0:48:
a9:8c:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:59 2023 by rpki-client on console.sobornost.net