Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PeKpW6bWktkLykd1xUF_vvp_zUI.roa
File: PeKpW6bWktkLykd1xUF_vvp_zUI.roa (raw, json)
Hash identifier: 2m+cZKRYmQvUVb0lMm+yb7QWPaD7VIj6xOmmFPDw0Ew=
Subject key identifier: 3D:E2:A9:5B:A6:D6:92:D9:0B:CA:47:75:C5:41:7F:BE:FA:7F:CD:42
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0182126BD252B2C73F6AB6B9C16B6866A5D3
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PeKpW6bWktkLykd1xUF_vvp_zUI.roa
Signing time: Mon 18 Jul 2022 17:47:12 +0000
ROA not before: Mon 18 Jul 2022 17:47:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.94.4.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
2a10:9f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:6b:d2:52:b2:c7:3f:6a:b6:b9:c1:6b:68:66:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jul 18 17:47:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3de2a95ba6d692d90bca4775c5417fbefa7fcd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:14:40:13:5d:ef:bc:e5:49:ca:3a:a4:82:
37:79:65:07:11:b3:f7:32:ee:0a:65:a7:fc:7f:8b:
d1:e8:6e:cc:81:76:94:90:a4:2f:df:dd:ba:36:36:
84:5b:5d:5a:5d:ca:e1:57:cf:3c:d3:39:d6:68:ff:
f0:1f:18:b0:0f:27:16:4c:26:aa:b5:4e:56:c9:82:
10:e3:68:92:4a:32:0e:50:e9:6c:81:5c:e4:59:b8:
23:f5:21:5e:85:2a:e5:fd:cf:f2:04:f7:9f:52:da:
30:a3:78:b2:e6:17:29:8d:3f:ec:89:10:c4:d2:68:
d2:2b:f3:1a:05:2f:ec:e5:d9:2f:08:e2:ac:5e:68:
80:c0:60:f2:b6:9a:af:b7:a9:8c:34:82:a1:89:01:
ae:4c:f8:27:e7:40:27:2b:9e:0b:e2:48:72:4e:5c:
63:3c:be:70:55:bb:ef:ff:c0:99:1c:d4:0d:94:1c:
50:f9:24:c4:90:d5:81:d3:31:73:f1:7e:31:44:7c:
c1:20:ca:5b:76:6c:61:14:72:5f:46:80:c7:58:45:
36:29:42:c2:23:27:af:b7:6b:99:c5:83:da:77:e8:
10:33:5b:a2:a7:3d:fb:db:3f:24:fa:7c:49:d9:54:
cb:96:dd:36:24:f7:e4:f3:99:b4:81:a9:79:20:b0:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:A9:5B:A6:D6:92:D9:0B:CA:47:75:C5:41:7F:BE:FA:7F:CD:42
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PeKpW6bWktkLykd1xUF_vvp_zUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/24
IPv6:
2a10:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
9f:1b:9b:38:fc:ff:ab:c5:ab:c1:79:a6:89:d7:3b:5a:c7:be:
77:5f:74:da:87:dc:34:ba:ff:2b:21:fb:a5:e9:36:f8:cb:3b:
13:8f:e5:5b:b1:10:16:69:6f:19:c0:e2:cd:61:34:25:25:6a:
d2:68:03:9e:26:1f:d9:ba:de:99:53:db:a5:c6:12:10:87:61:
df:85:12:10:99:1f:f5:d2:66:ef:49:14:6b:68:bb:19:02:03:
3c:2a:61:2e:f9:fe:35:46:56:22:8d:4b:c8:2b:64:eb:23:81:
9a:ed:45:33:21:9c:ce:61:bb:63:be:b5:e1:a3:52:db:ea:ef:
ec:5c:23:b5:88:3d:9f:34:88:81:9b:19:a2:6a:93:b1:68:28:
50:a7:84:45:78:95:2d:b5:88:51:e5:19:11:00:82:17:a7:47:
0a:b9:44:03:55:3a:0c:6e:7f:c2:39:22:1f:6a:4b:24:0a:2b:
68:b5:ef:8d:7d:65:52:b5:c2:e6:29:2e:2f:17:66:de:04:ec:
ab:39:dd:30:e6:0a:7d:51:ca:43:fa:80:e6:6f:97:32:f7:a3:
22:d6:d1:95:50:00:6b:66:4c:5b:97:fa:83:61:23:9a:f7:9c:
03:0d:59:2a:5c:72:cd:20:ac:3c:49:46:6d:e9:52:8a:78:f6:
78:98:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:36 2023 by rpki-client on console.sobornost.net