Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/3HIcmy-JD6RU6WjafX3XnyU5pMQ.roa
File: 3HIcmy-JD6RU6WjafX3XnyU5pMQ.roa (raw, json)
Hash identifier: xJoOQYrF4a0rUTKMATYIPd8yd0VWGjMruCbdydGHPN8=
Subject key identifier: DC:72:1C:9B:2F:89:0F:A4:54:E9:68:DA:7D:7D:D7:9F:25:39:A4:C4
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 0B7ED619
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/3HIcmy-JD6RU6WjafX3XnyU5pMQ.roa
Signing time: Sat 01 Jan 2022 02:53:19 +0000
ROA not before: Sat 01 Jan 2022 02:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41405
IP address blocks: 185.7.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192861721 (0xb7ed619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Jan 1 02:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc721c9b2f890fa454e968da7d7dd79f2539a4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:c0:c5:f9:12:58:c5:25:d0:ef:89:ad:71:
a2:92:c0:0d:28:3d:e4:37:82:b9:1b:15:5d:61:74:
17:76:57:a7:28:e1:75:32:5e:37:ac:b5:f9:bb:a8:
4d:08:2f:64:8f:db:1d:2f:7a:e2:8d:b3:f9:ea:72:
93:50:a3:b7:fd:c0:bd:22:63:f6:ea:62:12:64:0a:
f2:a2:f5:bf:5d:79:63:7f:da:e4:9d:52:62:f9:b9:
00:d5:b7:41:92:07:79:65:ce:22:a2:7d:b7:fa:93:
5f:56:ff:a1:f7:1d:8e:18:10:e6:b3:5c:86:2d:a6:
c8:5a:b9:c5:d6:3f:16:a3:f9:b3:9c:ea:a6:52:83:
01:c5:78:44:f3:4b:33:dd:bd:fc:3c:bc:38:48:3d:
e6:74:b0:de:b0:12:e8:a7:ed:07:54:a3:0c:9b:f6:
d4:59:1b:4d:24:ee:02:2c:8b:6f:7b:89:c2:88:ed:
ec:59:35:20:d5:0c:54:52:2b:de:c6:59:34:19:7f:
d9:52:ba:27:c8:e7:20:57:c7:71:b5:22:62:7e:5c:
d9:bd:6f:95:ac:48:ef:cd:55:a8:a1:fc:eb:d3:b7:
45:0d:a2:38:ce:65:3c:de:9e:a5:bf:52:1d:91:d6:
95:07:a3:73:8c:9b:33:6c:da:95:80:6b:69:7f:50:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:1C:9B:2F:89:0F:A4:54:E9:68:DA:7D:7D:D7:9F:25:39:A4:C4
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/3HIcmy-JD6RU6WjafX3XnyU5pMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.240.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:7a:fd:c8:a2:c6:f3:82:d6:b5:18:5c:0e:ef:16:a4:9a:7b:
26:77:3e:e0:d4:ef:c8:88:2f:10:43:46:6d:00:9a:de:d2:e0:
bf:2d:ba:e4:90:1a:f0:ce:7d:9e:20:74:b6:61:64:fa:87:bb:
a7:6a:98:be:a9:2f:5e:c2:c0:a7:13:b1:4a:95:d9:22:59:e2:
60:83:20:8d:16:39:39:90:d7:6b:8e:e2:e9:c8:61:9f:53:ed:
98:1f:2f:60:05:4a:cc:4b:c2:7e:9f:ae:55:73:3d:29:ff:c0:
86:62:ef:c3:07:fa:67:1a:dc:4a:6a:e5:dc:dd:9c:d1:71:63:
3a:a1:c3:4e:a7:25:ed:80:37:aa:9e:c2:08:be:96:45:2c:c6:
05:7a:79:48:57:3c:ed:18:fe:13:0b:d7:e3:54:eb:aa:9b:f6:
5b:7b:58:e0:06:0c:14:05:1e:ab:a6:85:fc:5d:ca:1e:e7:1f:
94:f0:58:1d:a0:03:ef:de:19:c6:11:2c:25:83:77:ff:ae:a9:
54:05:6c:77:7f:56:18:b2:88:94:cd:88:68:d5:b9:cd:40:e0:
1d:4d:4d:f6:c3:f4:a9:f7:7a:4e:4c:5e:ea:1b:a8:8c:32:39:
5f:7d:70:e2:cf:56:d6:e8:2f:65:d7:57:78:91:83:bc:35:45:
6d:57:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net