Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/d2iJPIgBSGrB7Z7H591Il_yfhLY.roa
File: d2iJPIgBSGrB7Z7H591Il_yfhLY.roa (raw, json)
Hash identifier: rhSX6Yr9jZgBcMQc9qWvTYg4btVNbB8qD1zqIBnM0Ew=
Subject key identifier: 77:68:89:3C:88:01:48:6A:C1:ED:9E:C7:E7:DD:48:97:FC:9F:84:B6
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 01BCD2F3
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/d2iJPIgBSGrB7Z7H591Il_yfhLY.roa
Signing time: Sat 01 Jan 2022 15:05:14 +0000
ROA not before: Sat 01 Jan 2022 15:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21217
IP address blocks: 45.66.220.0/22 maxlen: 22
185.54.7.0/24 maxlen: 24
2a0f:9180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29151987 (0x1bcd2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jan 1 15:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7768893c8801486ac1ed9ec7e7dd4897fc9f84b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:ee:4d:65:e7:23:75:dd:dc:74:ba:9b:af:
ea:e3:98:00:e2:e7:f0:f2:af:e4:08:c2:30:e7:98:
fa:43:79:95:02:72:d6:06:9a:12:b6:c4:ca:12:5f:
a6:fe:84:89:36:78:22:32:19:56:f6:f1:cf:2c:e1:
f1:14:7f:ca:04:4d:7f:c7:3a:27:c4:bc:15:ff:17:
f3:87:3c:e6:40:5f:aa:55:3b:d6:88:ff:3e:5a:a1:
fa:9a:88:bb:55:53:22:9a:03:aa:be:e8:3e:ff:25:
1e:b9:b7:0c:c1:95:76:09:4b:5a:99:e0:0a:0f:fc:
b8:4b:20:ff:a6:fa:37:09:c6:35:37:48:f4:46:1e:
cb:95:5c:05:e2:4e:6d:58:c1:05:33:63:9f:96:a4:
ec:f9:a0:33:52:ef:f1:5e:3c:36:d6:b3:6d:50:bc:
d8:72:fe:be:37:c9:8a:9a:c1:f1:30:23:0c:ff:96:
b6:26:e7:17:b8:82:23:cc:d6:c1:61:98:5e:20:05:
c4:d2:fc:d9:d2:b3:cb:39:ae:10:a7:03:3c:10:67:
c3:10:1c:00:b4:9c:a6:e5:12:f4:b4:6e:0f:9e:9f:
c2:04:31:a3:70:f2:4b:f5:cb:01:72:54:f4:7f:27:
1b:a4:f4:03:a0:20:5b:ee:52:d5:99:bc:b9:67:6a:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:68:89:3C:88:01:48:6A:C1:ED:9E:C7:E7:DD:48:97:FC:9F:84:B6
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/d2iJPIgBSGrB7Z7H591Il_yfhLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.220.0/22
185.54.7.0/24
IPv6:
2a0f:9180::/29
Signature Algorithm: sha256WithRSAEncryption
a2:2c:bd:29:32:a7:87:81:bf:9e:74:2d:20:f1:1b:c0:55:73:
a4:0d:07:2f:ae:ec:2a:24:a6:60:9e:f3:12:ca:9c:30:64:22:
6f:7b:38:c6:51:f0:aa:1a:90:fe:94:76:92:9e:22:64:e4:9d:
8f:6e:a6:76:67:b1:52:26:c4:51:a1:f3:ce:55:93:ef:27:59:
5b:2d:3c:c1:b2:d0:08:e8:11:bb:db:43:2a:4f:a5:59:8e:b8:
d9:9b:80:83:e3:12:f6:51:53:60:74:3a:8d:cd:46:28:e1:07:
12:c2:4e:2b:e4:55:80:25:37:5e:69:60:5a:95:62:da:45:e6:
86:29:8c:fb:01:ce:78:b7:f6:55:e9:08:fc:e1:2b:4f:80:27:
b4:b0:4a:72:01:f0:5a:1f:32:08:eb:0c:81:40:2b:96:a7:3b:
fc:31:59:b1:74:42:00:51:e1:f1:74:c0:1c:35:ec:c4:1d:0c:
5f:15:51:c7:e3:f4:68:13:8f:14:d2:39:56:14:c8:37:23:f6:
df:c1:61:9d:9d:2d:c5:5b:46:e9:96:46:b5:7c:3a:71:a0:a3:
04:37:c1:9f:8a:0f:28:3e:5b:3c:a1:0d:f6:5a:cb:eb:48:35:
6d:2b:11:9d:49:1f:65:2f:b6:34:2a:59:f5:05:91:a5:ba:f2:
01:78:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net