Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/ZiqsH-ZowJ5MTYCMfB4NBFiJdNg.roa
File: ZiqsH-ZowJ5MTYCMfB4NBFiJdNg.roa (raw, json)
Hash identifier: WmHLN1cmMBwByi18KXFSSXF2aYA+FnobY0SwTblX65E=
Subject key identifier: 66:2A:AC:1F:E6:68:C0:9E:4C:4D:80:8C:7C:1E:0D:04:58:89:74:D8
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 459CFD
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/ZiqsH-ZowJ5MTYCMfB4NBFiJdNg.roa
Signing time: Wed 25 May 2022 18:03:13 +0000
ROA not before: Wed 25 May 2022 18:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49935
IP address blocks: 185.1.243.0/24 maxlen: 28
195.62.90.0/23 maxlen: 27
185.135.191.0/24 maxlen: 27
2a10:1740::/29 maxlen: 126
2001:7f8:12d::/48 maxlen: 126
2001:678:9ac::/48 maxlen: 126
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4562173 (0x459cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: May 25 18:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=662aac1fe668c09e4c4d808c7c1e0d04588974d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:85:04:d8:22:20:86:96:e3:17:ec:73:2a:
a2:f8:ad:4e:a0:f7:bb:48:27:32:2d:af:c1:f9:f7:
3d:17:db:68:16:d0:2b:4b:61:51:70:ad:78:ed:5e:
69:0b:6a:e8:5c:e7:30:c0:a7:29:56:65:d6:7e:24:
76:98:6e:31:32:bb:65:b8:4b:1f:66:0e:48:30:c2:
b8:31:b8:67:99:3c:20:3f:ec:e4:39:ed:b3:ae:92:
a9:0a:63:a5:78:2b:4e:f0:e0:b4:5b:46:c7:a4:7a:
c2:4d:89:91:6f:2d:f2:a1:f1:ad:4f:28:82:d4:8e:
a3:ba:94:fd:b6:6b:88:0d:f8:c4:0b:f1:e1:38:a1:
cc:5f:9b:b9:e0:0a:bc:18:d5:b8:c9:07:a9:85:35:
26:91:22:39:5d:fc:9a:d2:bb:02:c1:93:72:10:0d:
f9:68:da:c0:60:58:86:f3:1c:f4:22:a9:a9:c5:6d:
1a:2f:99:bd:3b:8f:84:ee:ac:ce:33:05:56:29:5c:
aa:11:cb:72:81:53:1f:93:34:ff:3a:41:6c:69:70:
6e:c9:94:e5:6c:c2:61:30:3e:48:4d:b0:cc:2a:21:
fb:e8:b1:68:7c:10:06:de:9a:1e:65:8b:20:06:01:
e5:db:e1:fa:e6:76:2c:c9:88:59:09:a7:9a:f0:74:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:AC:1F:E6:68:C0:9E:4C:4D:80:8C:7C:1E:0D:04:58:89:74:D8
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/ZiqsH-ZowJ5MTYCMfB4NBFiJdNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.243.0/24
185.135.191.0/24
195.62.90.0/23
IPv6:
2001:678:9ac::/48
2001:7f8:12d::/48
2a10:1740::/29
Signature Algorithm: sha256WithRSAEncryption
2e:49:0f:0e:8b:4d:cb:1c:25:19:f5:27:31:cf:11:78:a9:83:
21:29:37:0a:4e:c8:d0:2e:5e:46:fe:28:8c:f6:5c:fe:e3:10:
d0:bc:c1:6b:a3:23:e4:5a:41:fa:e2:56:7b:df:aa:e6:6a:5b:
48:b6:a9:29:e1:59:7a:56:7f:0a:a6:05:5a:cd:72:8c:82:7d:
18:d3:98:30:ef:76:bd:c0:97:7c:a6:b7:76:47:39:20:f4:6c:
71:fe:b7:0e:70:27:5f:6e:35:66:df:1f:c2:32:ac:66:a7:0e:
cd:d5:a4:17:9d:4f:f3:28:ec:ce:b7:c7:ab:73:06:0d:0e:75:
77:76:97:db:51:e6:1f:b1:c9:01:54:5f:1c:85:7a:aa:e4:5e:
72:f1:32:10:dc:94:e2:bf:a2:25:d5:c4:fe:06:2f:99:bf:ef:
a1:04:66:9e:ed:94:0e:c3:ea:07:b8:dc:13:32:08:12:dd:40:
12:1d:ed:47:6d:b2:34:ab:ce:d1:57:bc:48:a3:1c:75:37:75:
51:be:5e:7e:1f:7b:8b:2f:00:ca:37:e3:19:bf:0e:dd:a4:20:
55:8c:8b:28:c9:00:5c:66:40:bf:94:1f:e7:a7:40:58:1e:55:
a8:53:5e:e2:7b:1c:51:98:4d:10:39:3a:2a:54:0f:a2:6f:62:
02:8e:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net