Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/_uR9Cvyep4U62OrXzfKEYrtWEVA.roa
File: _uR9Cvyep4U62OrXzfKEYrtWEVA.roa (raw, json)
Hash identifier: D7m46ZHHrE+MuGvOiTwIZssR1FrnkG4ZO+7UwnU1nPw=
Subject key identifier: FE:E4:7D:0A:FC:9E:A7:85:3A:D8:EA:D7:CD:F2:84:62:BB:56:11:50
Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial: 05D1D0F2
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/_uR9Cvyep4U62OrXzfKEYrtWEVA.roa
Signing time: Thu 07 Apr 2022 06:45:20 +0000
ROA not before: Thu 07 Apr 2022 06:45:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61351
IP address blocks: 185.206.140.0/22 maxlen: 24
2a04:a240::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97636594 (0x5d1d0f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Validity
Not Before: Apr 7 06:45:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fee47d0afc9ea7853ad8ead7cdf28462bb561150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:65:33:ca:df:b9:3a:fe:e1:cc:1f:89:e5:
15:90:be:fe:69:e5:35:20:17:06:14:7e:22:0f:94:
e3:34:74:6f:39:91:d5:6f:e3:ed:a8:9d:16:b4:90:
e9:b2:ef:4b:3c:5e:13:27:bc:3c:95:06:41:6b:7c:
2d:95:3e:b1:83:ae:a7:a3:e0:94:51:fa:c8:73:ef:
d2:c0:ac:c5:ae:7b:51:26:82:e5:94:10:c4:b4:d1:
b5:98:29:66:a0:3b:7f:e0:2d:00:be:c1:10:1c:d3:
65:1f:49:4e:a9:58:a1:50:40:6f:b2:7f:ad:68:0a:
a8:91:48:0e:58:50:1f:1a:e4:42:db:fe:5b:e7:96:
fa:f8:4a:c3:1d:d3:b6:33:96:df:4c:b1:5c:ab:22:
b5:ec:bf:8d:e7:bc:9e:64:1b:3c:6e:52:cf:47:98:
67:36:38:0c:4d:62:aa:18:b1:83:f9:5b:e2:75:a6:
39:4e:17:75:1e:d0:e7:c5:52:18:39:83:48:33:cc:
db:6b:01:f4:cf:76:98:94:49:b2:f6:e1:e8:5e:f5:
c9:93:f8:9b:e4:39:7a:fb:fb:9c:ce:44:46:10:63:
9c:64:a9:6f:a9:e5:9b:77:64:2a:2e:c6:e6:d2:66:
f3:52:1d:e5:d2:9d:06:ad:70:81:f7:11:d5:2a:35:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E4:7D:0A:FC:9E:A7:85:3A:D8:EA:D7:CD:F2:84:62:BB:56:11:50
X509v3 Authority Key Identifier:
keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/_uR9Cvyep4U62OrXzfKEYrtWEVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.140.0/22
IPv6:
2a04:a240::/29
Signature Algorithm: sha256WithRSAEncryption
a9:12:3d:b0:7e:0b:a8:1b:0d:8b:f3:3c:ea:49:7a:a1:32:f3:
47:1c:d6:bc:e1:f1:d8:fc:64:1d:9a:48:99:21:33:52:a9:16:
e6:5d:84:92:c8:eb:dc:1e:b3:89:ed:66:ed:99:9f:75:b2:00:
fb:01:30:21:52:ef:fe:25:1a:22:b8:6a:af:ec:0e:16:aa:55:
d8:15:1e:a5:4c:89:63:b3:fd:a0:3c:75:5a:28:5b:33:5c:fb:
f8:06:55:5d:7f:95:c9:35:fd:19:04:ad:8a:cd:40:77:c3:79:
3d:c7:3d:32:a2:00:a9:ed:5f:a0:e2:f1:81:91:d3:a8:b9:49:
b4:a9:a7:89:fb:f9:d4:fa:07:85:f5:59:03:f4:90:a7:3a:79:
98:ed:71:50:15:cd:63:c6:de:13:9c:c2:fc:d6:70:f5:02:17:
23:7e:42:9a:0f:8d:51:4e:ed:9a:f8:ed:89:56:12:2e:ab:07:
a9:b0:86:48:2b:b1:fb:e4:ef:e4:f8:3e:5b:d8:66:81:8f:55:
09:cf:be:64:5d:c5:08:24:66:06:73:2d:89:4d:2f:6d:97:19:
d3:e9:d3:2a:28:e5:44:07:14:8a:9b:37:39:8a:ed:bc:f9:c0:
6c:d2:e5:df:89:29:c9:cf:3c:43:eb:b1:ea:2e:c8:dc:62:5c:
fe:1f:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net