Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/48KnByXnXe5q4uvv3qTt1cZS2QQ.roa
File: 48KnByXnXe5q4uvv3qTt1cZS2QQ.roa (raw, json)
Hash identifier: YvZmmEP+tzFhDQF2uPRfx4jZMmEf5AVWtquLVtMt2S8=
Subject key identifier: E3:C2:A7:07:25:E7:5D:EE:6A:E2:EB:EF:DE:A4:ED:D5:C6:52:D9:04
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 016B77EC
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/48KnByXnXe5q4uvv3qTt1cZS2QQ.roa
Signing time: Sat 01 Jan 2022 04:53:15 +0000
ROA not before: Sat 01 Jan 2022 04:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48940
IP address blocks: 185.78.32.0/22 maxlen: 22
185.78.32.0/23 maxlen: 23
185.78.34.0/23 maxlen: 23
95.181.250.0/23 maxlen: 23
95.181.248.0/22 maxlen: 22
95.181.248.0/21 maxlen: 21
95.181.248.0/23 maxlen: 23
95.181.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23820268 (0x16b77ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Jan 1 04:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3c2a70725e75dee6ae2ebefdea4edd5c652d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:1c:86:d0:5a:c9:1d:f8:22:48:26:d9:de:
07:15:68:02:c2:bb:c2:23:0f:66:e4:b1:4f:7d:c5:
9c:d4:84:e1:4d:43:45:96:67:75:e7:c3:31:92:07:
26:50:3a:7c:87:29:ae:63:b9:02:e2:1f:23:e0:2f:
ad:a6:d3:49:ba:79:ec:c1:c4:8f:08:ee:04:99:be:
98:4c:fd:22:32:db:7b:f9:ad:8c:d8:c4:15:78:5b:
35:96:2e:4d:45:52:f9:03:30:5e:e5:55:69:34:82:
4d:82:d7:41:d1:ca:bd:63:f8:39:cf:d4:65:76:2e:
55:78:52:d1:78:da:94:22:65:ae:ec:ea:f3:1c:1e:
0b:8a:90:43:fa:db:8d:a6:5e:62:18:0f:bd:31:f0:
7d:35:be:c3:ee:d5:e0:80:b7:d2:dd:42:ca:b0:d9:
b6:a0:7b:45:79:40:1c:da:9c:da:ad:d7:6b:7f:ad:
de:a9:00:27:e6:b5:54:91:0e:d6:ae:bd:6e:34:2d:
13:a3:f8:2e:72:01:76:d3:7a:25:a1:a1:3b:d5:68:
4f:e5:2a:18:d9:ec:71:90:86:13:b7:7c:a9:76:2e:
43:3b:22:e6:5c:ee:ef:05:60:fa:19:dd:4a:28:71:
18:13:1c:b3:bd:b5:f3:67:28:5a:38:44:87:49:d6:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:A7:07:25:E7:5D:EE:6A:E2:EB:EF:DE:A4:ED:D5:C6:52:D9:04
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/48KnByXnXe5q4uvv3qTt1cZS2QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.248.0/21
185.78.32.0/22
Signature Algorithm: sha256WithRSAEncryption
97:4d:ac:80:88:85:fe:81:cf:1b:bf:0e:f0:74:5d:8c:70:ef:
b9:28:1e:74:ae:38:97:f4:bf:0e:82:6f:ce:b2:09:c8:6c:54:
00:d9:c5:89:eb:bd:ed:4e:12:98:33:c7:50:d2:39:6d:3f:29:
70:5a:64:59:87:77:ee:47:5e:dc:67:96:32:08:32:c4:a2:e3:
7f:15:8b:26:d6:41:3a:d2:e9:a7:80:38:6d:18:f0:7c:0a:b0:
c6:10:52:87:f7:ce:85:28:7c:52:b4:bb:2e:8c:b3:cb:ce:3c:
fb:49:73:e0:9e:33:b9:31:1c:52:36:b4:3f:e1:be:50:a8:23:
cd:cb:3c:8a:4f:44:3a:da:2f:21:9b:fd:14:96:30:cc:25:f5:
52:8f:1a:75:4e:e7:2f:06:24:e4:ad:5e:bc:2a:44:5e:d7:31:
33:dd:e2:2b:ef:ce:d7:48:d8:b1:98:19:33:10:c9:f9:87:4d:
f7:2b:ab:7f:1b:ee:90:80:ea:ea:12:cb:16:ee:f6:2c:cc:aa:
13:7b:e7:a7:e9:c4:4d:df:79:c1:9c:be:d6:1e:96:2b:7d:80:
2f:49:27:16:ad:21:00:28:7c:9a:23:b8:40:3b:57:47:34:03:
f6:cb:06:e1:12:8e:88:19:67:27:e8:9a:17:ba:94:54:3b:2b:
c2:2d:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:42 2023 by rpki-client on console.sobornost.net