Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/T56IX-6bA3MND4FGXK6wIJvp9fo.roa
File: T56IX-6bA3MND4FGXK6wIJvp9fo.roa (raw, json)
Hash identifier: ImRJ6bikM1gKhmeW34lUdksLg5dO8SkYc5/H0HoT2fY=
Subject key identifier: 4F:9E:88:5F:EE:9B:03:73:0D:0F:81:46:5C:AE:B0:20:9B:E9:F5:FA
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 5A5D7E
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/T56IX-6bA3MND4FGXK6wIJvp9fo.roa
Signing time: Sat 01 Jan 2022 01:58:34 +0000
ROA not before: Sat 01 Jan 2022 01:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211196
IP address blocks: 185.53.112.0/24 maxlen: 24
185.198.68.0/24 maxlen: 24
185.53.113.0/24 maxlen: 24
185.53.114.0/24 maxlen: 24
185.53.115.0/24 maxlen: 24
2a0b:6f80:101::/48 maxlen: 48
2a0b:6f80:500::/40 maxlen: 40
2a0b:6f80:400::/40 maxlen: 40
2a0b:6f80:300::/40 maxlen: 40
2a0b:6f80:200::/40 maxlen: 40
2a0b:6f80:100::/48 maxlen: 48
2a0b:6f80:103::/48 maxlen: 48
2a0b:6f80:102::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5922174 (0x5a5d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jan 1 01:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f9e885fee9b03730d0f81465caeb0209be9f5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:bf:4a:3d:31:c5:26:fd:bc:f2:3c:98:b5:
13:74:f7:d2:38:c4:db:cd:ef:9e:2d:97:c3:4c:78:
9f:f1:48:a5:b5:30:98:06:b3:d4:8e:f3:11:78:87:
06:c1:ef:69:73:6c:da:f1:d7:4d:e9:c9:a2:23:f7:
67:3b:31:cd:e4:d9:90:26:35:d9:a7:76:f8:21:0d:
1a:f1:be:14:07:bd:ca:90:75:0e:22:62:6e:1a:c2:
ca:9c:5e:fa:90:c6:95:9f:11:e4:c8:a3:b1:d4:61:
66:dc:82:50:34:9c:02:55:4c:df:bc:e8:77:c6:f7:
63:eb:4f:52:f8:6c:5e:09:7d:0c:22:7d:42:55:3b:
32:ee:bd:d9:62:69:da:1f:31:ba:fd:e0:fd:45:32:
11:eb:b2:0c:76:d2:da:76:80:a1:95:86:8f:c7:b6:
73:1f:b7:3d:c7:9c:7c:68:b4:60:00:73:b1:5d:62:
33:f8:56:b8:30:c7:4b:54:ed:fc:4d:2c:e7:74:65:
cc:e1:6e:bf:b2:24:92:1d:6a:2d:5b:d5:d9:7a:67:
7f:80:60:ef:ad:b8:07:e6:27:0c:d7:99:bf:73:45:
98:50:18:bc:98:f1:c4:e7:28:95:b9:e5:b6:90:74:
56:62:fb:99:27:7a:9e:71:07:d0:8c:99:d6:6b:ed:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:88:5F:EE:9B:03:73:0D:0F:81:46:5C:AE:B0:20:9B:E9:F5:FA
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/T56IX-6bA3MND4FGXK6wIJvp9fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.112.0/22
185.198.68.0/24
IPv6:
2a0b:6f80:100::/46
2a0b:6f80:200::-2a0b:6f80:5ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c6:5b:f4:9e:8b:4a:1f:d2:19:54:88:f9:dc:bf:8f:32:01:e2:
1a:2d:f5:1b:f0:4f:4b:30:5b:3c:46:71:0e:04:f7:69:cf:a7:
67:4a:5f:c7:49:75:6d:b0:65:c2:2d:04:06:4a:09:14:b4:b8:
73:3d:25:b9:7b:26:31:f7:a7:cf:4d:02:8a:3b:a0:64:f1:0f:
70:77:05:53:fa:dc:db:ea:ab:54:84:c9:78:ff:42:c0:f7:f7:
9d:62:89:01:ec:b9:5b:39:80:e6:1e:0a:6b:4e:37:a2:de:0e:
a8:b5:eb:8a:69:3d:7c:98:a6:a2:47:59:10:b9:ac:5b:e1:5c:
95:e4:d2:01:af:92:ce:37:fd:c3:f3:09:b0:bf:6e:5f:08:02:
be:f4:46:1d:dc:de:99:b3:e0:60:a3:33:ae:4a:d0:12:13:ca:
46:d2:75:31:29:d4:3d:7b:14:db:88:e1:3f:6b:db:60:87:30:
b0:65:9e:8c:31:3a:dd:e2:58:05:6d:41:54:c3:e4:f2:8c:ea:
16:dc:58:33:10:be:f6:00:30:1b:98:28:aa:ee:c3:e0:2a:3b:
2c:fa:d6:81:a4:1a:1c:59:28:95:e5:b3:e2:b1:96:e1:35:08:
97:4c:ab:94:fa:e9:43:72:d7:1a:a3:81:14:77:35:6c:77:41:
2b:57:8b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net