Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/f3tHEZgC6Nqs6K2OdrOKmKlN6NQ.roa
File: f3tHEZgC6Nqs6K2OdrOKmKlN6NQ.roa (raw, json)
Hash identifier: VJ8xsfHU7C1Xfnk+4poCOd0AkHL0DZpXPQM6uQ9SeWI=
Subject key identifier: 7F:7B:47:11:98:02:E8:DA:AC:E8:AD:8E:76:B3:8A:98:A9:4D:E8:D4
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 0816A598
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/f3tHEZgC6Nqs6K2OdrOKmKlN6NQ.roa
Signing time: Sat 01 Jan 2022 06:03:53 +0000
ROA not before: Sat 01 Jan 2022 06:03:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209905
IP address blocks: 185.191.72.0/24 maxlen: 24
185.191.73.0/24 maxlen: 24
185.191.74.0/24 maxlen: 24
185.191.75.0/24 maxlen: 24
185.191.74.0/23 maxlen: 23
185.191.72.0/23 maxlen: 23
185.191.72.0/22 maxlen: 22
45.65.74.0/24 maxlen: 24
45.65.75.0/24 maxlen: 24
45.65.72.0/23 maxlen: 23
45.65.72.0/22 maxlen: 22
45.65.72.0/24 maxlen: 24
45.65.73.0/24 maxlen: 24
45.65.74.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135701912 (0x816a598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jan 1 06:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f7b47119802e8daace8ad8e76b38a98a94de8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:3e:25:8c:c0:30:c1:f2:66:15:ff:37:3a:
4f:30:0a:ba:43:9f:25:a1:aa:5e:fa:8f:fa:47:38:
f0:98:0f:23:7c:5a:a6:1a:30:18:1d:a0:35:0d:c0:
48:6c:a0:05:c6:90:c0:cc:19:81:75:e9:38:29:b4:
d4:45:59:e5:14:d3:50:56:b1:1f:c7:a9:97:d3:9c:
10:8d:95:6e:77:0f:68:00:c3:48:d8:06:1c:3f:bd:
7a:b8:f5:7a:a7:92:ec:82:a1:8f:89:cc:68:f6:f9:
c8:9d:58:46:82:fa:b6:98:35:5f:a0:dc:f9:14:a9:
7b:c8:09:c0:d9:0f:f2:e8:70:3f:02:a4:71:d9:e5:
0d:9f:9e:2a:de:b7:16:f0:5e:95:c2:d9:63:49:45:
77:ee:b7:19:c2:f7:28:4e:42:15:cc:21:67:b4:35:
a7:fa:e0:f8:63:e0:42:7b:0c:00:e3:bd:a2:dd:04:
d7:66:4e:ca:9a:d5:28:f7:70:d5:c2:a4:d9:27:79:
ec:8e:0b:9f:69:74:03:80:a3:d9:7e:f5:cd:71:a2:
69:02:02:11:32:8b:ef:9d:db:f0:a4:dc:e3:8d:06:
a3:6d:cb:26:af:8a:97:25:65:49:30:79:8b:ee:5a:
9a:34:54:76:03:f7:f2:06:a3:c6:41:93:ae:b1:1a:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:47:11:98:02:E8:DA:AC:E8:AD:8E:76:B3:8A:98:A9:4D:E8:D4
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/f3tHEZgC6Nqs6K2OdrOKmKlN6NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.72.0/22
185.191.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:e5:d8:b1:13:01:87:b3:ba:e7:52:0f:84:ec:28:d1:a0:81:
64:4e:3c:ad:7f:ba:4a:11:3b:a8:54:5d:cb:35:ff:b3:d8:a3:
ee:44:95:96:48:13:3c:87:d9:96:5c:3e:e4:5a:e8:1b:f8:cd:
ea:34:70:58:58:77:7d:fa:bd:3a:eb:4d:23:f0:8a:0b:96:d7:
3b:89:61:86:ec:c6:67:fd:25:f3:6c:47:9c:e5:be:e2:f7:40:
38:84:77:3c:38:8f:e9:11:98:12:b3:9e:4e:e9:e2:c6:d8:f3:
34:df:7d:2b:1d:18:a5:a5:69:3d:c6:dd:27:e6:4e:0f:0f:41:
9f:a7:8d:d1:29:ee:38:b7:e1:82:56:36:e9:42:bc:ce:ab:45:
ce:96:85:a1:05:be:2a:81:bd:08:a5:63:11:75:53:b1:ba:79:
ec:6c:5e:74:77:03:29:32:88:1a:7b:91:2c:97:3c:6b:fe:8b:
9a:ff:92:4d:77:d2:20:0c:db:cd:fe:85:7e:20:94:b3:01:f2:
a5:da:fb:f9:1c:80:64:42:9e:9e:f7:bb:22:33:88:5b:4d:07:
5d:a0:fb:c3:ae:a9:c3:8e:d0:4e:62:79:f6:8c:9a:12:53:17:
a8:16:ea:d8:21:6f:42:3e:44:bb:cf:89:7a:49:99:4a:09:81:
14:55:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net