Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/r9Y-7n5gC6004htCVeX07QdGhsc.roa
File: r9Y-7n5gC6004htCVeX07QdGhsc.roa (raw, json)
Hash identifier: uYhA9B3znWYf/upUrslAxQUManm2NEZHhfcZUDEcyYU=
Subject key identifier: AF:D6:3E:EE:7E:60:0B:AD:34:E2:1B:42:55:E5:F4:ED:07:46:86:C7
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: B7E377
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/r9Y-7n5gC6004htCVeX07QdGhsc.roa
Signing time: Tue 10 May 2022 06:48:27 +0000
ROA not before: Tue 10 May 2022 06:48:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.244.106.0/23 maxlen: 23
212.46.37.0/24 maxlen: 24
45.155.64.0/23 maxlen: 24
45.155.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12051319 (0xb7e377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: May 10 06:48:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afd63eee7e600bad34e21b4255e5f4ed074686c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:e4:1b:7a:da:c5:81:70:c7:67:16:f2:40:
4d:58:3a:0f:da:82:f8:4d:13:ca:a6:f9:68:9c:21:
cf:4d:c6:6c:f5:cf:41:3c:5f:56:8a:1c:58:38:f9:
51:eb:7e:dd:2d:86:16:39:92:d2:ed:cf:ed:ce:cb:
b0:1b:13:4f:74:f9:42:3f:0c:b2:46:ab:35:50:06:
86:b3:e1:86:98:35:15:e0:40:bf:38:a6:1c:9a:9c:
df:fa:c0:55:96:3a:5f:90:41:c1:4f:96:b0:25:4d:
ec:99:82:42:dc:07:ef:eb:ea:c5:79:5a:4a:64:81:
d7:c3:cf:e0:d2:bd:20:49:9c:7b:26:ef:fc:ff:17:
05:81:13:0b:9a:45:46:a7:d7:4d:ea:dc:8f:0e:59:
b8:70:aa:18:dd:8c:d7:c9:06:d2:a3:b7:a9:20:0b:
14:fe:dc:ef:89:4e:9f:45:0b:1f:88:79:7c:cb:26:
11:30:2c:70:58:ff:1b:ca:d3:42:0c:43:6c:7e:6c:
49:2b:e6:3c:39:8e:83:f6:f5:29:75:09:66:af:0a:
f7:84:b3:0f:d8:73:4e:a5:2d:c1:c2:3f:8b:89:25:
08:bf:3a:ae:47:34:97:03:d6:eb:58:3a:2e:f8:97:
f1:ba:24:1d:d1:65:de:59:56:28:2c:aa:d8:9c:07:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:3E:EE:7E:60:0B:AD:34:E2:1B:42:55:E5:F4:ED:07:46:86:C7
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/r9Y-7n5gC6004htCVeX07QdGhsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/22
185.244.106.0/23
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fc:f6:67:77:f1:e4:43:b4:14:a3:f9:db:12:c9:0e:06:db:
4f:01:6a:a4:05:33:64:91:4b:e3:ba:b3:2c:9d:c4:69:51:0e:
58:26:29:79:f4:79:84:fa:99:fe:ef:96:24:91:ec:d7:0b:fc:
55:7c:8e:56:d5:ed:f3:a6:e1:09:67:bb:c5:df:60:af:e6:0e:
2e:60:4b:7b:b6:51:84:48:77:1c:3c:62:7a:c4:50:a5:b7:0c:
7c:bb:24:70:d9:5c:d9:ac:4f:7a:b0:20:16:53:0c:43:d4:b4:
4e:1f:78:b7:2f:b0:ad:f0:35:49:90:4f:b9:3d:9b:b3:a2:49:
3a:cd:36:2c:d5:8c:9a:60:2f:36:d9:58:e5:b6:85:d8:f0:f5:
1a:89:91:8e:9e:f1:95:6e:75:dd:3c:ec:41:c9:1f:78:da:f9:
f6:85:e3:76:32:37:e0:1d:6d:8e:6c:ed:22:d0:1b:df:00:e6:
86:03:52:a8:c8:3c:b8:51:70:e0:c8:0b:74:d8:27:10:19:8b:
9a:cf:cd:2e:88:d2:a9:b0:1e:4f:9d:9e:df:6c:04:86:3b:5a:
2c:4d:6c:8f:f7:81:21:a0:5b:28:a3:3a:93:9e:14:19:45:16:
5c:2f:24:cd:ed:6c:ac:14:13:a3:e3:22:9e:33:78:3e:c0:29:
bd:dd:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net