Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/3jqiEozMENAJ1zbYuZG8aV-L1_Y.roa
File: 3jqiEozMENAJ1zbYuZG8aV-L1_Y.roa (raw, json)
Hash identifier: OsfhjX7CZXenfcuJLfOmLOlj85Kghc61sjr+w6Dhc8Y=
Subject key identifier: DE:3A:A2:12:8C:CC:10:D0:09:D7:36:D8:B9:91:BC:69:5F:8B:D7:F6
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 08C14988
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/3jqiEozMENAJ1zbYuZG8aV-L1_Y.roa
Signing time: Sat 01 Jan 2022 12:03:03 +0000
ROA not before: Sat 01 Jan 2022 12:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57935
IP address blocks: 92.119.56.0/24 maxlen: 24
92.119.59.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146885000 (0x8c14988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 1 12:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de3aa2128ccc10d009d736d8b991bc695f8bd7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:03:37:25:69:86:a3:7b:4c:93:98:fb:49:
1a:00:b0:db:74:a8:74:57:65:75:8d:10:e0:12:14:
08:86:0d:26:8e:3c:54:d9:c9:c0:34:e1:6b:26:54:
f8:eb:b0:65:c1:0c:40:0a:5d:a7:b7:99:61:21:27:
ad:3f:fd:6c:fd:b8:c5:5f:f0:c3:55:40:fd:65:e8:
9a:20:7e:bb:4c:60:a6:bd:66:b1:7c:56:a2:1c:06:
17:63:c7:be:2d:5f:c2:2a:c9:8f:a9:67:a0:75:61:
90:76:07:e4:ff:26:33:16:e1:d7:3d:a6:72:60:ec:
fb:94:c8:46:02:8a:a4:90:91:8a:6f:81:63:4d:c0:
b6:5c:06:da:cf:59:81:42:18:42:4a:6f:84:e5:06:
bf:25:4c:d1:69:2e:02:6c:70:6d:b4:31:a6:4b:b4:
35:a1:ad:c2:6e:ac:a7:6a:7d:bb:85:8a:02:2a:ab:
14:1c:97:6f:f5:42:0a:7b:7c:48:ad:a9:dd:a6:6a:
2f:dd:dd:c8:1d:7a:d6:b3:6e:51:78:b1:42:59:33:
94:a2:8d:35:35:e0:62:10:a4:d9:46:57:78:72:5f:
2a:d2:fa:f8:d2:94:d2:a8:d5:56:86:ba:76:b4:a1:
16:83:f7:ae:63:6f:e3:e4:07:1c:d3:6d:c5:02:ed:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:A2:12:8C:CC:10:D0:09:D7:36:D8:B9:91:BC:69:5F:8B:D7:F6
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/3jqiEozMENAJ1zbYuZG8aV-L1_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.56.0/24
92.119.59.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0b:ff:62:30:2d:53:fa:89:7a:ad:54:51:c6:36:ac:11:c6:
39:ab:1b:fb:d1:04:8a:e2:f0:ff:c4:d2:35:63:12:62:d7:02:
52:0b:dc:66:8d:99:be:26:eb:92:66:b9:d8:c5:41:2d:a8:b0:
71:57:1f:93:54:9d:35:1e:b1:34:2c:e1:3f:27:19:4e:d7:1b:
49:ea:60:04:77:89:53:24:b7:be:69:0f:ff:f6:90:ae:a2:6e:
a7:14:07:bc:36:70:ca:da:6f:a8:dd:be:ce:4d:1b:92:9b:ed:
f8:28:d8:98:01:60:ef:37:8e:6f:d9:7a:be:f1:2c:ae:5f:34:
24:26:42:07:18:a3:56:7c:52:72:01:d2:62:e8:1c:0f:cb:49:
cd:71:27:7d:e7:42:00:1d:35:bc:dc:6e:f5:b8:96:fe:28:f6:
45:91:1b:1b:47:ff:be:c2:24:39:91:45:0b:a8:67:36:73:d9:
db:a0:06:27:2c:bf:ad:93:93:ae:2a:e2:97:fc:8b:8f:27:e8:
81:f1:74:ec:a0:ae:96:b4:e5:cd:9b:99:93:99:1f:8d:ac:7a:
1b:a7:8d:a7:9a:ca:08:1f:56:4b:1e:ae:84:9f:ab:11:11:ce:
8a:62:71:30:ee:4b:ff:66:3b:10:4b:61:a2:af:c1:53:60:9e:
41:3c:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net