Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/CZ7p7HvNFy4E-dqrsTwhW_r5lXA.roa
File: CZ7p7HvNFy4E-dqrsTwhW_r5lXA.roa (raw, json)
Hash identifier: Sk2UPCIgcqtSLjTl2q3w2BCvuhDpdHcb9fq0cK7OKlc=
Subject key identifier: 09:9E:E9:EC:7B:CD:17:2E:04:F9:DA:AB:B1:3C:21:5B:FA:F9:95:70
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 0BD1A889
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/CZ7p7HvNFy4E-dqrsTwhW_r5lXA.roa
Signing time: Tue 12 Apr 2022 08:00:57 +0000
ROA not before: Tue 12 Apr 2022 08:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13101
IP address blocks: 95.214.160.0/22 maxlen: 22
185.243.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198289545 (0xbd1a889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Apr 12 08:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=099ee9ec7bcd172e04f9daabb13c215bfaf99570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:7c:ee:a6:a1:24:db:08:50:0e:cb:bd:5a:
26:24:19:78:4d:ce:1d:09:cd:0a:8a:0c:a8:f0:cc:
6e:ad:3f:de:b4:fc:02:aa:8f:3b:1d:88:ee:e3:ee:
2a:c4:53:cb:bf:f0:14:32:27:3d:60:50:86:0b:da:
a0:0b:89:71:84:2e:15:64:04:0b:b6:0a:a3:82:3d:
e2:98:54:0e:83:93:5e:c6:2a:12:94:8f:c1:f6:c5:
b9:a0:6a:03:49:19:a7:dc:de:84:14:44:af:47:39:
9c:fc:91:76:4d:fb:87:28:8e:b3:a4:72:2d:54:92:
0f:e8:3d:8c:1e:62:cc:93:e3:bc:92:45:c8:d8:ca:
80:49:1e:bb:c5:01:b5:df:c4:c1:cb:ba:b4:27:ef:
bc:d1:e0:d1:ea:c4:0e:c2:06:8e:a5:be:06:90:64:
46:c3:a2:b0:9d:2a:4e:02:09:66:ba:7e:fa:98:d4:
4d:36:a3:0c:53:d2:dc:ee:6a:39:99:7a:aa:43:4b:
5e:54:0d:22:9c:d9:62:cd:31:83:20:3c:9c:54:a1:
31:83:0b:6f:69:8a:7d:71:8c:a3:4a:1a:38:07:6d:
27:96:54:5b:4d:01:bf:23:62:22:70:57:c3:8a:45:
d9:82:24:7c:c0:63:dd:57:44:41:b9:54:8b:a4:43:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:E9:EC:7B:CD:17:2E:04:F9:DA:AB:B1:3C:21:5B:FA:F9:95:70
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/CZ7p7HvNFy4E-dqrsTwhW_r5lXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.160.0/22
185.243.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:c6:ca:02:83:a2:f6:7b:0f:30:80:22:73:21:1c:80:c5:8f:
f6:64:4f:45:56:31:cc:65:e4:67:8c:1e:d7:f3:8d:ff:97:cf:
fb:d2:0c:03:87:e1:e6:d7:af:0d:ba:1e:1f:d5:22:f8:88:41:
96:31:01:d1:c0:8e:c9:aa:d4:6e:fe:1d:73:4e:73:e0:88:b0:
89:40:9d:fe:3b:5f:2d:63:b2:c0:15:7f:c2:56:4a:2c:77:58:
29:a2:98:f5:f9:f4:cb:e4:52:b4:35:a9:0d:f3:bb:f8:d6:6d:
0c:5b:1e:8c:38:d3:67:7b:85:8f:e0:d0:e3:65:55:c1:10:62:
ff:3f:a2:14:4d:94:c0:4e:90:0f:d5:0a:50:18:61:5a:3a:e2:
18:55:35:f5:17:a9:fc:62:8b:6f:db:13:54:db:e1:e6:0c:2d:
51:4d:cb:29:26:0b:e2:25:f1:bd:67:b2:68:ef:f6:b0:6b:42:
6e:8d:e3:ad:f4:3c:ca:c0:d4:bb:df:ee:07:e2:d6:ae:91:18:
0c:12:de:c7:83:77:e4:ff:59:9c:e8:6e:e4:13:2e:5b:02:1d:
2e:cb:a7:5b:26:14:ae:35:68:0d:bd:3d:3b:fa:1b:32:3b:36:
46:66:ec:31:07:3f:71:f6:15:ea:a2:3e:2f:20:92:7d:45:89:
a5:04:70:d7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEC9GoiTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OTE2YWFhNWQyNTJmZDkwMTQ1ZmVkYWM2ODM3NjJkNmUyMDc0MTU1MB4XDTIyMDQx
MjA4MDA1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDk5ZWU5ZWM3YmNk
MTcyZTA0ZjlkYWFiYjEzYzIxNWJmYWY5OTU3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALIZfO6moSTbCFAOy71aJiQZeE3OHQnNCooMqPDMbq0/3rT8
AqqPOx2I7uPuKsRTy7/wFDInPWBQhgvaoAuJcYQuFWQEC7YKo4I94phUDoOTXsYq
EpSPwfbFuaBqA0kZp9zehBREr0c5nPyRdk37hyiOs6RyLVSSD+g9jB5izJPjvJJF
yNjKgEkeu8UBtd/Ewcu6tCfvvNHg0erEDsIGjqW+BpBkRsOisJ0qTgIJZrp++pjU
TTajDFPS3O5qOZl6qkNLXlQNIpzZYs0xgyA8nFShMYMLb2mKfXGMo0oaOAdtJ5ZU
W00BvyNiInBXw4pF2YIkfMBj3VdEQblUi6RDfBUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQJnunse80XLgT52quxPCFb+vmVcDAfBgNVHSMEGDAWgBSJFqql0lL9kBRf
7axoN2LW4gdBVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lSYXFwZEpTX1pBVVgtMnNhRGRpMXVJSFFWVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvOTA3NDA5LTVlNjEtNGM2Ni05NGU2LWQ2OWVhOTNjYmFmYi8x
L0NaN3A3SHZORnk0RS1kcXJzVHdoV19yNWxYQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
OTA3NDA5LTVlNjEtNGM2Ni05NGU2LWQ2OWVhOTNjYmFmYi8xL2lSYXFwZEpTX1pB
VVgtMnNhRGRpMXVJSFFWVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAl/WoAMEArnzRDANBgkqhkiG9w0B
AQsFAAOCAQEAT8bKAoOi9nsPMIAicyEcgMWP9mRPRVYxzGXkZ4we1/ON/5fP+9IM
A4fh5tevDboeH9Ui+IhBljEB0cCOyarUbv4dc05z4IiwiUCd/jtfLWOywBV/wlZK
LHdYKaKY9fn0y+RStDWpDfO7+NZtDFsejDjTZ3uFj+DQ42VVwRBi/z+iFE2UwE6Q
D9UKUBhhWjriGFU19Rep/GKLb9sTVNvh5gwtUU3LKSYL4iXxvWeyaO/2sGtCbo3j
rfQ8ysDUu9/uB+LWrpEYDBLex4N35P9ZnOhu5BMuWwIdLsunWyYUrjVoDb09O/ob
Mjs2RmbsMQc/cfYV6qI+LyCSfUWJpQRw1w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:26 2023 by rpki-client on console.sobornost.net