Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3We35UFsAHHGkLbm_H3HHEjBdu8.roa
File: 3We35UFsAHHGkLbm_H3HHEjBdu8.roa (raw, json)
Hash identifier: ykkXsnlUl/yOIBD0dPiKhj96dXLtXdoARuQddueNplo=
Subject key identifier: DD:67:B7:E5:41:6C:00:71:C6:90:B6:E6:FC:7D:C7:1C:48:C1:76:EF
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018423698F880F9EBE341B1D7A887277525C
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3We35UFsAHHGkLbm_H3HHEjBdu8.roa
Signing time: Sat 29 Oct 2022 11:03:51 +0000
ROA not before: Sat 29 Oct 2022 11:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49468
IP address blocks: 193.32.160.0/24 maxlen: 24
193.32.161.0/24 maxlen: 24
2.57.123.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.134.49.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.13.214.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
45.13.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:69:8f:88:0f:9e:be:34:1b:1d:7a:88:72:77:52:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Oct 29 11:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd67b7e5416c0071c690b6e6fc7dc71c48c176ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:72:bc:f8:7d:12:7d:ce:57:bf:4f:f8:06:
a9:a4:d7:a2:63:f7:ed:f8:4b:60:b5:1e:b0:3c:ce:
9c:af:4d:3a:b5:19:c4:7c:b3:3f:b6:58:6c:58:d4:
e5:a9:12:2c:91:b1:d8:bc:21:68:37:e8:55:4e:0c:
d9:0b:bb:5f:b4:65:81:41:f1:56:5f:09:af:49:d9:
46:bd:42:67:29:ab:d2:54:3f:fd:7f:4b:ff:da:8f:
0d:a6:cc:01:96:78:bf:34:09:83:a9:c6:ec:53:2e:
05:f7:ca:b0:06:61:7d:2a:71:0f:25:49:93:64:3b:
ff:51:4e:41:90:43:f3:76:de:2d:52:b4:14:54:e3:
84:ea:c3:48:2b:12:b1:90:d7:4d:95:03:d0:71:fe:
01:b8:1a:8e:c5:bc:d1:01:21:51:fb:5f:ec:cf:46:
f8:e8:e2:85:bf:6b:9d:42:96:8f:e7:63:6f:83:a7:
72:5f:f3:1b:0d:f2:90:98:94:f4:02:2a:07:6f:48:
31:23:15:73:91:aa:9e:64:f1:71:aa:63:f2:e3:3d:
54:97:06:ee:55:f7:37:86:a8:43:e9:39:b2:12:7a:
10:ff:a5:93:63:18:21:a0:e3:52:d7:a3:2a:5e:54:
3f:e6:e8:32:42:6b:cd:d0:a1:62:12:58:3b:6e:ee:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:B7:E5:41:6C:00:71:C6:90:B6:E6:FC:7D:C7:1C:48:C1:76:EF
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3We35UFsAHHGkLbm_H3HHEjBdu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.123.0/24
45.13.36.0/24
45.13.214.0/23
45.129.12.0/24
45.134.49.0-45.134.50.255
193.29.12.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a0:4d:df:ff:ef:60:01:06:c0:e9:5b:12:8b:8a:9f:6d:68:
02:7d:bd:80:4d:1e:84:b4:cd:19:98:f7:da:ce:e8:a7:a9:af:
d3:ae:57:55:04:ea:6b:25:e6:f0:70:67:8a:0c:32:a9:7d:0b:
84:94:ea:6a:52:e2:62:b2:de:1d:a2:e0:1e:76:5c:58:46:c3:
1f:25:7a:96:ae:5a:eb:1c:18:82:91:fb:a7:db:4d:a0:a6:58:
95:4e:2f:77:1a:94:20:0d:59:b3:04:18:6b:2a:d0:93:ef:24:
37:da:04:e6:89:7a:1d:b9:dd:7d:47:29:83:31:00:79:5c:48:
45:18:04:2d:2b:84:d8:ce:0f:de:57:0c:59:b0:81:6d:8a:2e:
fa:55:8c:b4:93:c0:8f:a6:47:b5:49:f0:6a:00:4c:1b:b3:6c:
4b:da:ca:f2:00:cc:f5:c9:2e:9f:ea:74:84:8c:32:25:24:19:
9e:b3:63:7d:04:e8:15:95:5d:2d:36:8a:dc:6d:b3:e0:f0:03:
8d:08:64:44:94:43:5f:9d:91:6a:40:c2:4c:91:16:4d:42:38:
d5:d7:45:b3:e3:7a:8d:0e:bf:e2:a1:c4:7e:50:68:25:66:6a:
e3:23:d1:0a:5a:29:eb:fa:0f:ad:53:28:f9:e4:2c:d5:2a:c1:
a4:e2:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net