Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/sqrsbEYaLGv3-ywHppbFXSSm7AU.roa
File: sqrsbEYaLGv3-ywHppbFXSSm7AU.roa (raw, json)
Hash identifier: OgyHzZ9fABoYiF3b82rZiodr4f4NqeL9rzwLjxeyD3s=
Subject key identifier: B2:AA:EC:6C:46:1A:2C:6B:F7:FB:2C:07:A6:96:C5:5D:24:A6:EC:05
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: A44F
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/sqrsbEYaLGv3-ywHppbFXSSm7AU.roa
Signing time: Wed 30 Mar 2022 21:29:48 +0000
ROA not before: Wed 30 Mar 2022 21:29:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34605
IP address blocks: 178.218.79.0/24 maxlen: 24
45.142.91.0/24 maxlen: 24
45.142.90.0/24 maxlen: 24
45.142.88.0/24 maxlen: 24
178.218.64.0/24 maxlen: 24
178.218.67.0/24 maxlen: 24
178.218.66.0/24 maxlen: 24
178.218.65.0/24 maxlen: 24
178.218.71.0/24 maxlen: 24
178.218.70.0/24 maxlen: 24
178.218.69.0/24 maxlen: 24
178.218.68.0/24 maxlen: 24
178.218.74.0/24 maxlen: 24
178.218.73.0/24 maxlen: 24
178.218.72.0/24 maxlen: 24
178.218.78.0/24 maxlen: 24
178.218.77.0/24 maxlen: 24
178.218.76.0/24 maxlen: 24
178.218.75.0/24 maxlen: 24
194.126.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42063 (0xa44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Mar 30 21:29:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2aaec6c461a2c6bf7fb2c07a696c55d24a6ec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:aa:19:23:a2:6e:3a:1c:ff:5d:04:fd:cc:
ee:77:1f:52:25:27:96:a7:ac:9e:53:40:59:8c:83:
af:d9:bf:11:44:3f:83:43:b2:99:24:7c:9d:53:cc:
e1:4c:f9:34:61:53:12:c4:1e:b6:19:ad:0e:af:dd:
16:11:64:6d:65:57:e6:31:a4:95:08:c3:49:37:3d:
d1:eb:b9:65:e0:47:b1:50:76:41:3c:15:5a:af:49:
f0:f6:88:e5:21:fd:4e:e5:24:eb:fd:b3:ef:6d:a2:
30:01:86:d4:fc:1a:82:09:f2:fe:f3:a0:cd:d1:1d:
77:9b:b6:f5:42:23:cb:5c:92:a5:f7:20:c0:41:b8:
77:f4:8e:c5:7b:0f:41:fa:ed:6f:0d:7d:e0:f6:00:
63:97:26:5d:1a:d8:df:c5:38:fa:3e:70:e2:07:76:
d4:e6:81:d4:12:ab:9b:a9:5b:49:d5:81:6d:65:22:
9a:af:44:52:c6:4b:59:6c:e4:68:77:a4:cf:d3:7d:
0b:a1:be:1f:89:70:b7:4b:32:23:d3:d4:51:15:d8:
04:41:c8:cc:79:39:95:2a:c2:b8:6f:08:2b:7d:de:
89:e2:70:68:44:ac:37:94:0b:e1:32:3e:ea:44:70:
47:2a:b4:f6:b2:96:1f:e8:b9:11:0b:53:38:48:96:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:EC:6C:46:1A:2C:6B:F7:FB:2C:07:A6:96:C5:5D:24:A6:EC:05
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/sqrsbEYaLGv3-ywHppbFXSSm7AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.88.0/24
45.142.90.0/23
178.218.64.0/20
194.126.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8b:a0:a5:b5:ce:f0:3d:44:17:9c:c1:75:be:14:a9:c8:c7:
64:da:0b:f6:fc:e7:d0:b6:cb:4e:cf:24:92:39:ab:fd:01:95:
d3:10:fb:e7:a4:68:97:5e:12:d0:b5:44:34:40:1e:ea:f2:30:
5d:d6:4b:51:3d:95:b9:03:7a:a7:de:7c:59:cc:13:78:2c:e0:
f1:80:55:27:65:4f:28:73:11:3a:57:40:d4:08:29:ae:cd:4e:
54:c0:df:a6:8f:49:c4:b8:44:d0:69:a5:21:06:e3:1d:c8:c7:
f9:36:ae:75:1a:cd:d2:68:02:6b:bf:60:8e:a6:9a:6b:73:2b:
63:09:e0:7e:4e:4a:ca:41:10:c3:62:44:06:e4:dc:6e:51:84:
94:1b:48:9c:d9:e8:61:4f:88:e8:8b:b4:fa:36:62:51:89:78:
25:cc:f4:4f:01:d1:7a:fa:86:51:61:38:62:c2:8b:7d:a0:ac:
7a:ce:7c:01:6c:03:79:fd:c2:e7:7f:61:eb:4d:06:02:dc:05:
9e:43:c0:fd:08:d1:86:4f:41:d6:8d:b7:83:ce:4e:a2:ec:86:
20:5e:0f:f7:72:34:46:21:08:3f:ce:64:72:ef:84:ae:12:25:
e9:5d:7a:27:0b:b6:02:b5:86:19:ef:8e:ad:bb:94:61:21:7e:
5b:13:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:58 2023 by rpki-client on console.sobornost.net