Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/5X20-pCtLCSbKuC4NoABI3deS18.roa
File: 5X20-pCtLCSbKuC4NoABI3deS18.roa (raw, json)
Hash identifier: 7EjuYeGBzeaBLGpvSqigAEJtm/Ytzy5qtT1PdHwQGUk=
Subject key identifier: E5:7D:B4:FA:90:AD:2C:24:9B:2A:E0:B8:36:80:01:23:77:5E:4B:5F
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 37F3E1AB
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/5X20-pCtLCSbKuC4NoABI3deS18.roa
Signing time: Sat 08 Jan 2022 10:20:39 +0000
ROA not before: Sat 08 Jan 2022 10:20:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207381
IP address blocks: 89.47.200.0/22 maxlen: 24
89.42.196.0/22 maxlen: 24
92.114.49.0/24 maxlen: 24
92.114.48.0/24 maxlen: 24
46.34.161.0/24 maxlen: 24
46.34.160.0/24 maxlen: 24
46.34.160.0/22 maxlen: 24
46.34.163.0/24 maxlen: 24
46.34.162.0/24 maxlen: 24
89.47.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938729899 (0x37f3e1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 8 10:20:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e57db4fa90ad2c249b2ae0b836800123775e4b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:3c:cc:e6:6f:93:37:a5:de:91:ac:a2:16:
46:c6:e7:ca:d7:93:dc:d4:7f:77:8f:3a:91:2a:25:
cf:8e:11:41:2b:00:51:20:0a:bf:f6:61:5b:8e:d0:
9b:85:be:68:af:3a:d1:89:95:f4:fb:0d:5f:0c:c9:
59:00:cc:37:6d:58:05:af:f2:c0:48:b3:a9:54:61:
36:d9:54:2c:36:82:c7:d8:a8:92:24:b9:fd:50:9f:
06:93:48:87:08:b3:8e:23:3c:cb:f4:d1:b1:65:dd:
5a:94:7c:6f:11:73:0f:eb:8d:32:ba:16:4f:0e:ad:
c6:8d:c4:73:60:ce:f1:c6:d3:fd:df:05:5e:23:5a:
df:6e:4e:ba:4c:05:8d:30:b1:8c:f2:ba:80:ec:5a:
ae:46:f4:83:d4:67:34:d1:4c:9a:5d:2a:a8:bf:ca:
dd:5e:98:b4:8f:be:2f:dd:37:39:7b:f7:8d:74:33:
fe:78:18:fc:89:96:b5:e5:26:45:fe:7c:d6:a5:67:
22:4e:44:00:a6:8e:68:09:9d:1f:39:a1:dc:1b:42:
42:ba:82:d0:58:ce:95:42:14:55:b0:e6:9a:0d:b9:
1e:d6:04:0f:d8:85:a4:0a:96:84:3e:3f:41:03:d1:
fc:c7:f7:b4:dd:17:3a:f5:bb:e5:ed:fe:c1:61:fe:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:B4:FA:90:AD:2C:24:9B:2A:E0:B8:36:80:01:23:77:5E:4B:5F
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/5X20-pCtLCSbKuC4NoABI3deS18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.196.0/22
89.47.196.0-89.47.203.255
92.114.48.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:27:a2:76:4b:33:db:ec:28:2e:f4:e1:78:f1:72:43:e9:74:
90:2f:e2:8a:b6:40:96:2c:07:91:15:69:09:b7:15:55:f2:22:
01:a3:8c:33:d1:cb:4b:2c:de:78:16:5b:37:9c:35:43:55:c2:
20:a4:1a:89:83:76:43:be:ab:9f:36:9e:87:c6:48:fe:e8:17:
79:f0:e3:a8:1b:85:2e:22:f2:f4:b2:f6:7e:26:c3:8c:d1:16:
b2:ec:10:ef:23:51:82:2d:00:92:32:e2:14:12:a8:a5:8f:d8:
ef:ac:57:f6:b7:57:54:70:99:a4:77:3a:72:6b:af:48:b7:75:
15:e8:e4:b9:29:40:7e:56:22:09:50:d7:00:90:32:5c:c8:f7:
e4:6a:db:b5:34:c9:39:cc:17:10:1a:0b:6b:ca:c1:92:bd:51:
0f:c8:46:4f:72:99:97:3d:2a:3d:aa:6c:69:9a:0c:c6:d8:f4:
75:76:79:58:41:ac:cd:60:12:0c:0b:53:fa:e5:d1:93:cb:25:
11:89:ad:6b:76:1b:f9:b0:2e:fe:f7:07:8d:50:2d:5c:85:b9:
b0:93:b4:d7:88:46:ff:f5:44:27:2f:52:d3:0f:5b:60:34:0b:
65:ae:7a:57:5c:fc:f2:63:d4:59:9b:02:da:83:5e:d4:d8:10:
8c:b6:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net