Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/A_NtIxNy4moIvN1P0zK9RwDd_oc.roa
File: A_NtIxNy4moIvN1P0zK9RwDd_oc.roa (raw, json)
Hash identifier: VFlvpxuR+cif/J3eMdwUDSnelYJqzxD8O/CRKzgZ8EI=
Subject key identifier: 03:F3:6D:23:13:72:E2:6A:08:BC:DD:4F:D3:32:BD:47:00:DD:FE:87
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 223119
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/A_NtIxNy4moIvN1P0zK9RwDd_oc.roa
Signing time: Sat 01 Jan 2022 00:55:13 +0000
ROA not before: Sat 01 Jan 2022 00:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41983
IP address blocks: 93.159.224.0/23 maxlen: 23
93.159.227.0/24 maxlen: 24
91.103.64.0/21 maxlen: 21
77.74.180.0/22 maxlen: 22
2a03:2480::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240793 (0x223119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jan 1 00:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03f36d231372e26a08bcdd4fd332bd4700ddfe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:62:2f:95:8a:6d:4c:13:8b:c6:52:fd:e3:
ea:1c:ff:f4:ff:90:fc:4d:57:c8:4d:91:1c:a9:8b:
79:10:b1:44:ec:4e:14:f0:fd:a3:cd:4d:7d:a5:56:
99:60:0f:f6:91:9b:82:b9:cb:5d:76:ca:20:01:d4:
49:5b:fb:43:0f:90:15:fc:53:f8:5b:54:76:12:25:
10:78:0d:7d:b0:e7:d1:8b:1c:4c:c3:74:a9:a9:82:
7c:7b:23:64:39:e7:a9:54:aa:16:12:a8:7d:cf:2c:
a5:ce:09:de:53:a7:ff:f0:e4:b1:f0:f4:ce:1c:c9:
39:0c:97:eb:2b:68:62:e5:02:e7:f8:b6:b1:78:f5:
39:85:04:ec:6c:55:25:ac:fd:08:5f:03:5d:21:bc:
7e:55:70:c2:9c:c4:bc:0c:3e:cd:a8:88:ee:2d:20:
95:15:5b:ad:d4:95:06:d2:33:e4:ee:5a:cd:ff:b9:
c7:2d:7c:4a:65:56:0c:e9:61:44:47:89:60:b1:83:
d2:1b:0f:69:0f:a6:6c:81:15:40:1f:99:4c:e0:49:
3f:c1:77:0d:8e:ed:ac:28:e8:ad:d3:5d:4d:bd:2f:
ad:bf:c8:ff:ce:50:51:1e:4b:03:46:7c:5b:eb:1f:
fe:c3:58:34:5c:c2:a8:35:45:eb:a0:de:24:5b:90:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:6D:23:13:72:E2:6A:08:BC:DD:4F:D3:32:BD:47:00:DD:FE:87
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/A_NtIxNy4moIvN1P0zK9RwDd_oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.180.0/22
91.103.64.0/21
93.159.224.0/23
93.159.227.0/24
IPv6:
2a03:2480::/33
Signature Algorithm: sha256WithRSAEncryption
24:41:18:d2:21:2a:60:10:93:bf:19:97:3c:68:f7:ec:ac:18:
d1:64:fc:06:bf:ae:05:8f:24:41:65:5e:5c:cb:87:52:b0:5d:
30:0e:e8:f7:b6:20:0c:b7:58:47:e7:b3:b6:e5:c7:34:d2:3b:
9f:35:8b:ac:cd:30:ef:0f:b7:ab:2c:b3:ac:37:55:9f:e7:fa:
c1:ba:1d:64:76:d4:e4:c8:fa:03:d9:04:73:1f:47:27:0c:f6:
b9:e1:e1:70:b8:11:4e:52:3a:0e:ee:cf:8e:32:9c:5d:eb:14:
3f:9b:32:6f:ed:cf:83:47:53:1b:3c:9a:c0:da:9d:e9:f9:43:
d7:b3:2a:cd:7e:9f:54:e7:ed:8f:ab:cc:ee:8f:50:15:6a:3e:
32:81:d7:5d:d1:14:15:da:53:87:63:c5:f4:36:18:6b:fd:a8:
1f:85:b3:fe:69:ca:55:6d:4e:4d:8e:22:6a:f4:16:21:d8:a3:
e5:0f:65:74:aa:74:a5:00:91:90:08:8d:a1:9e:ab:6d:52:85:
ce:3c:37:a3:76:90:0f:0a:b4:6c:ba:8f:65:48:26:58:9c:2c:
f7:a0:27:74:74:66:84:4f:82:d0:bd:8a:2a:a8:76:b3:a3:a8:
6f:fd:55:e7:e3:15:23:ff:b9:08:3e:8e:d0:b9:06:8a:ea:0d:
82:26:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net