Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/1Z1k1rTDhvFWlFp--6F2iNAez8A.roa
File: 1Z1k1rTDhvFWlFp--6F2iNAez8A.roa (raw, json)
Hash identifier: vq+NXF9mc4ql4BqLENqKiAWVlz6N9DTJbRQM7ApaLLQ=
Subject key identifier: D5:9D:64:D6:B4:C3:86:F1:56:94:5A:7E:FB:A1:76:88:D0:1E:CF:C0
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 03E26F64
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/1Z1k1rTDhvFWlFp--6F2iNAez8A.roa
Signing time: Wed 05 Jan 2022 13:52:24 +0000
ROA not before: Wed 05 Jan 2022 13:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/19 maxlen: 24
94.240.128.0/22 maxlen: 22
2a09:65c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65171300 (0x3e26f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jan 5 13:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d59d64d6b4c386f156945a7efba17688d01ecfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:e7:62:14:64:b0:d2:a4:a5:e2:ba:9d:70:
9a:ea:a2:78:6a:d2:97:27:ac:7b:cf:81:36:bf:8a:
84:20:ce:8d:53:67:10:62:e3:39:18:fb:53:d8:2c:
20:90:3e:19:9c:a3:cb:49:1d:01:81:5e:93:0e:6f:
ac:69:54:29:9d:09:46:b1:27:17:ed:84:bc:67:ec:
26:3e:60:68:95:a4:15:84:5c:10:f2:ed:4f:2d:11:
46:f5:4a:95:ae:9b:b7:84:a3:b2:1a:03:67:52:0b:
41:80:4f:ee:f3:37:35:e7:2c:6e:dd:b4:77:6a:21:
cb:0b:53:65:36:22:5f:f6:45:eb:bd:4f:40:e4:f0:
d3:97:14:99:79:92:38:38:36:08:f9:23:a0:36:3f:
d0:1f:a2:1a:a6:36:1f:7f:5d:21:27:ba:b5:5d:1e:
b1:9c:c4:1e:9b:af:f3:63:f5:a6:50:10:ae:68:20:
a7:47:39:3f:e5:da:08:a3:bc:b6:69:f9:bd:a8:fd:
ae:85:cc:aa:22:bd:cc:1d:b5:61:33:68:c3:10:8e:
fe:36:90:90:a8:ad:db:d6:68:8b:d8:66:8c:82:12:
f4:bf:fb:f7:26:bf:b8:34:2c:56:96:bd:9e:ff:17:
52:17:49:b1:03:3f:86:35:9a:ae:b8:79:cf:bb:cf:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:64:D6:B4:C3:86:F1:56:94:5A:7E:FB:A1:76:88:D0:1E:CF:C0
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/1Z1k1rTDhvFWlFp--6F2iNAez8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/19
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
90:89:47:b2:2b:94:bb:87:e2:8b:73:f8:3f:81:05:86:63:3d:
70:51:dd:2c:77:c7:41:8b:43:9d:dc:2d:b3:19:62:7b:ed:5d:
61:c6:ff:73:90:63:c9:e6:da:62:8f:3d:18:98:3e:f1:41:e5:
8c:74:11:31:5c:2d:20:82:eb:23:09:85:45:83:ea:33:37:d9:
01:ca:de:50:d2:c0:a6:6a:b7:86:02:f0:83:ae:27:e4:6f:57:
92:7d:72:0b:a3:86:13:97:17:34:15:8a:64:11:61:c6:56:2b:
03:37:eb:15:2e:58:c1:d1:28:4d:19:2c:80:11:93:3f:81:8e:
86:58:99:c8:eb:2b:5a:0d:14:c8:15:02:91:71:14:fe:bc:aa:
2f:10:e9:1e:86:c3:13:19:5b:c6:b5:0b:17:b3:f4:76:00:b4:
cd:9f:ed:ac:5c:8a:04:9c:ce:af:f1:26:72:77:27:e4:14:c1:
16:05:51:d7:a7:59:27:e5:f6:da:db:f4:d0:be:52:52:20:f4:
bf:c7:84:44:bd:07:b3:dd:d6:7f:db:5e:88:01:df:24:89:19:
f3:fa:f6:e0:66:d8:b3:ce:b2:84:6c:fa:55:55:54:f7:ec:cf:
16:80:de:c5:bc:3d:02:f8:55:8c:81:d5:15:0b:d9:69:e3:cb:
a8:81:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:58 2023 by rpki-client on console.sobornost.net