Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/9kjR7d2Bycb5mXgoHlFUiCM_YPA.roa
File: 9kjR7d2Bycb5mXgoHlFUiCM_YPA.roa (raw, json)
Hash identifier: t0ero4o/XV1XohUAwN584dExpIDlQ1JdbW9CAmb9wYs=
Subject key identifier: F6:48:D1:ED:DD:81:C9:C6:F9:99:78:28:1E:51:54:88:23:3F:60:F0
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: E42089
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/9kjR7d2Bycb5mXgoHlFUiCM_YPA.roa
Signing time: Fri 10 Jun 2022 12:08:02 +0000
ROA not before: Fri 10 Jun 2022 12:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204706
IP address blocks: 185.143.130.0/24 maxlen: 24
185.143.131.0/24 maxlen: 24
185.143.128.0/24 maxlen: 24
185.143.129.0/24 maxlen: 24
2a0c:f080::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14950537 (0xe42089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Jun 10 12:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f648d1eddd81c9c6f99978281e515488233f60f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:04:cb:db:bf:c7:28:98:d2:65:20:7a:62:
ee:3f:d5:29:39:b3:4d:09:39:11:93:7d:68:a8:06:
3d:bd:65:fd:dd:17:1c:f2:6f:ee:83:63:4e:12:55:
c7:d3:70:0a:d1:be:ca:cb:77:b1:51:c6:8c:46:1d:
a1:84:f0:a6:ec:42:25:3f:2d:c0:65:e4:70:e1:87:
76:c5:6d:cc:f3:0e:b2:47:97:eb:ab:65:5b:dd:98:
c5:f1:93:d1:04:39:0d:37:1c:05:0c:66:1d:40:d9:
26:a0:d9:24:52:3e:50:6f:4c:15:91:1e:6e:54:e7:
a5:b7:ea:0c:5b:b9:87:e9:c1:33:b8:fa:65:26:79:
dd:cc:77:86:14:34:c2:bb:56:d6:2f:67:5c:a3:89:
ed:ea:21:24:de:85:50:4a:8f:9f:7c:b7:77:e3:fc:
50:76:d3:05:55:20:0c:87:4d:88:a0:ab:26:a3:6e:
21:5e:f6:b6:e8:7e:b1:c5:17:60:a7:d3:61:70:36:
e6:f9:f4:98:89:91:e9:f3:7a:c4:92:3d:53:c5:8f:
d4:62:7e:3b:88:6d:c6:34:b3:49:44:bf:f7:c7:c9:
3f:87:c8:0b:18:fe:50:1a:dc:29:64:be:bf:87:df:
48:80:a2:72:c0:e1:81:41:7c:dc:6e:67:3e:f8:56:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:D1:ED:DD:81:C9:C6:F9:99:78:28:1E:51:54:88:23:3F:60:F0
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/9kjR7d2Bycb5mXgoHlFUiCM_YPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.128.0/22
IPv6:
2a0c:f080::/30
Signature Algorithm: sha256WithRSAEncryption
31:5b:a2:ef:63:b4:89:27:7b:eb:f3:7b:5a:51:14:bb:eb:87:
15:70:1f:02:45:ef:41:9e:85:46:af:a5:a1:c8:d5:56:c0:e1:
72:e0:5c:3b:e9:c8:cf:ca:ba:c4:d3:54:d5:7e:be:09:90:b8:
b9:8f:96:ce:bb:48:90:b3:5b:48:40:19:e0:f8:cb:c7:b0:91:
e8:55:e0:2f:34:2f:7e:53:f7:23:74:1a:be:b8:12:c1:df:44:
87:ab:7f:a5:92:81:fc:46:af:01:28:78:9e:06:b0:bd:4d:6c:
4a:1b:7f:68:97:b4:91:10:84:b2:15:2e:39:74:2b:c0:77:bf:
58:ef:37:79:a0:c8:10:dd:21:bc:02:68:bc:ee:cf:9b:8a:a2:
48:0f:03:ea:a8:2f:f5:76:bf:10:42:ca:79:c4:d7:5d:2a:1b:
82:41:4a:8b:08:a6:46:0c:65:88:3f:4a:48:fd:84:ff:56:be:
3b:45:a4:db:cd:b1:26:a5:39:dd:6f:24:37:37:9f:84:6f:c2:
26:64:ed:a3:2d:3a:f0:b9:8b:d2:72:a1:4b:cf:ed:b2:82:a2:
c2:94:fa:36:98:71:cc:5b:3d:fd:27:89:eb:d6:ac:90:94:a6:
c1:52:9a:78:5b:8a:a0:9a:e9:7d:c8:bc:cf:8e:a2:29:17:b1:
09:69:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net