Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/fsRYUDDUvL3qF3y38z5Q26vLyIs.roa
File: fsRYUDDUvL3qF3y38z5Q26vLyIs.roa (raw, json)
Hash identifier: ISyiMlAhjZFkmyr6aw1tgSMz7nSos5B5mvFZeZ1EhYY=
Subject key identifier: 7E:C4:58:50:30:D4:BC:BD:EA:17:7C:B7:F3:3E:50:DB:AB:CB:C8:8B
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 36B08E7D
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/fsRYUDDUvL3qF3y38z5Q26vLyIs.roa
Signing time: Sat 01 Jan 2022 04:56:55 +0000
ROA not before: Sat 01 Jan 2022 04:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50181
IP address blocks: 77.243.222.0/23 maxlen: 23
77.243.220.0/23 maxlen: 23
46.31.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917540477 (0x36b08e7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jan 1 04:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ec4585030d4bcbdea177cb7f33e50dbabcbc88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:15:fd:15:2b:00:18:6e:4e:00:0c:b7:fc:
4d:f7:b8:fe:7b:21:a9:84:d6:9f:53:79:e8:d1:37:
77:4f:3e:54:25:82:e7:21:03:15:53:97:ce:ca:44:
33:6a:0a:4f:9f:f8:9d:be:a8:87:bb:77:7e:15:e0:
c5:54:16:3b:51:d8:00:db:2b:7e:2e:cd:f7:b8:e4:
e6:f7:f8:d7:51:af:04:7f:ef:e3:37:be:dc:08:02:
2b:a9:76:5c:01:6d:47:b2:cf:0b:46:ae:dd:9f:29:
48:28:40:1b:0f:bc:02:a5:25:4d:df:77:35:3e:83:
a6:6e:73:13:17:18:24:52:0a:3b:06:2a:7b:ff:1c:
5a:26:f9:30:56:ec:a7:20:da:21:2d:0f:3e:b9:e0:
a8:bf:29:fd:6e:a7:63:e4:ac:8b:30:4c:44:95:18:
ea:4b:91:4b:73:d6:f0:ea:03:9a:ba:d8:4d:d9:e2:
c6:50:36:2f:f6:02:5c:4c:4c:aa:ea:e2:a2:53:54:
06:6b:6c:3a:5e:6d:1c:1b:1f:cc:13:7c:fc:f4:9c:
31:5d:17:af:c3:de:1c:25:a1:32:58:e8:ac:17:ff:
2e:ce:2f:dd:74:b5:02:02:b8:8f:86:f1:89:49:94:
a9:5c:07:22:8d:d2:b8:d4:78:bf:22:f7:f1:a4:b5:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:58:50:30:D4:BC:BD:EA:17:7C:B7:F3:3E:50:DB:AB:CB:C8:8B
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/fsRYUDDUvL3qF3y38z5Q26vLyIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.176.0/23
77.243.220.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b0:e6:fa:ac:ac:5c:56:b4:54:19:87:89:8a:7c:fd:fe:54:
cd:82:b1:f8:13:f1:07:3a:73:92:fd:6a:9b:2e:14:50:e0:1f:
49:4c:fd:cc:20:d4:44:61:de:0f:5b:c4:c3:fd:ac:d0:80:11:
29:de:44:a5:ec:b9:69:bc:07:e4:de:cf:30:15:c7:6e:0a:3c:
ff:d8:74:ab:f7:f1:cd:38:e0:97:5a:3a:a4:cb:8d:49:97:37:
9a:77:ee:cb:17:82:8b:85:31:11:fc:17:68:e4:29:74:20:b3:
49:9b:76:1a:8e:81:da:39:da:56:46:b8:86:e8:22:4e:b5:0e:
f7:a1:1f:51:bb:32:fc:fb:69:49:69:2e:89:1a:b7:b2:d4:e8:
a0:86:e6:c6:f8:72:e0:45:8e:8e:ba:c8:c4:12:f8:9b:49:23:
0c:8b:e8:54:cd:8f:b7:20:c3:9d:04:89:47:50:4d:ef:a8:f1:
44:1d:3d:c1:76:3a:b9:a4:93:2e:dc:93:a9:0a:2c:a3:89:15:
02:39:bf:6e:fc:04:c3:b0:31:c0:ac:3d:2b:f5:4c:23:ce:d9:
cc:a1:af:10:a1:0e:27:45:3c:46:e1:a3:e0:09:74:c6:1a:d2:
dd:88:54:5d:34:fc:43:2e:91:59:db:4f:39:a6:b0:d2:4f:ea:
80:0f:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net