Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/O_bn9eBnV-0ia_4ufytceXBP_mI.roa
File: O_bn9eBnV-0ia_4ufytceXBP_mI.roa (raw, json)
Hash identifier: QDPuwL6icBgkD79Kb9V2x7Wq4DWXF5pUDhUxICN8sNU=
Subject key identifier: 3B:F6:E7:F5:E0:67:57:ED:22:6B:FE:2E:7F:2B:5C:79:70:4F:FE:62
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 1BB761E1
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/O_bn9eBnV-0ia_4ufytceXBP_mI.roa
Signing time: Sat 01 Jan 2022 08:01:34 +0000
ROA not before: Sat 01 Jan 2022 08:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35171
IP address blocks: 85.118.245.0/24 maxlen: 24
85.118.246.0/24 maxlen: 24
85.118.241.0/24 maxlen: 24
85.118.240.0/21 maxlen: 21
85.118.242.0/24 maxlen: 24
85.118.243.0/24 maxlen: 24
85.118.244.0/24 maxlen: 24
85.118.247.0/24 maxlen: 24
85.118.240.0/24 maxlen: 24
45.143.34.0/24 maxlen: 24
45.143.35.0/24 maxlen: 24
45.143.32.0/22 maxlen: 22
45.143.32.0/24 maxlen: 24
45.143.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465002977 (0x1bb761e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Jan 1 08:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bf6e7f5e06757ed226bfe2e7f2b5c79704ffe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:57:75:6f:c0:3a:41:8b:2b:ca:7a:d8:34:
89:e8:42:7f:f5:5b:16:79:b3:38:40:13:95:bd:6e:
5b:05:a0:ad:45:65:7e:63:a3:70:f2:37:13:b5:f3:
55:fa:a5:d3:a3:45:fe:91:75:dc:34:66:f1:c9:88:
55:f0:9d:a1:54:9e:3a:21:08:7d:10:9a:cc:67:33:
4e:3f:a3:ac:6b:64:34:bb:66:30:e5:06:04:1f:c8:
a9:82:50:86:99:d0:4f:25:35:9f:05:f1:47:ae:3d:
29:cb:76:3a:08:65:eb:f1:ea:db:f1:c8:5e:bf:45:
23:86:8e:bb:2a:3c:a9:dd:8c:b0:4b:af:d2:03:d8:
46:62:57:36:cd:c4:e1:e0:3f:53:48:5c:c2:af:2f:
cc:34:8b:34:06:ec:a8:3d:d7:90:f1:19:c1:40:ee:
8d:22:38:ef:e6:42:ed:b5:3a:6d:33:78:81:74:60:
ee:ef:3c:7d:66:d4:d4:77:68:04:3b:02:26:ec:3f:
53:e8:16:37:44:39:dd:b9:0d:93:ff:51:90:ca:9d:
5b:cb:b2:95:4e:7e:3f:9b:a0:a1:14:95:4a:69:37:
e0:80:25:ca:75:b8:02:0c:9a:d8:69:6e:2a:9f:ea:
02:1a:7d:ea:72:17:2e:e4:7a:ad:60:77:89:eb:5a:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:E7:F5:E0:67:57:ED:22:6B:FE:2E:7F:2B:5C:79:70:4F:FE:62
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/O_bn9eBnV-0ia_4ufytceXBP_mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.32.0/22
85.118.240.0/21
Signature Algorithm: sha256WithRSAEncryption
69:be:ed:f1:60:6a:c2:74:e9:d1:da:1b:de:37:12:d7:59:9b:
36:20:45:4e:cb:c0:dc:79:4b:cd:6d:f8:34:31:1e:74:d6:3d:
fb:ec:b0:1c:e5:c7:56:b6:a6:a1:c0:22:b4:03:12:db:cf:fd:
62:b8:a3:2e:06:01:f2:14:9c:38:3d:ad:b4:43:90:37:d8:eb:
9a:38:52:ac:08:09:d6:8e:7d:20:44:fc:8b:96:ee:39:e9:c0:
4f:f5:5c:b5:f0:d2:0b:fc:8e:e9:a4:f8:df:2d:95:7a:f9:fb:
74:15:92:56:8c:bf:6d:e6:fe:ec:ee:6f:1a:c1:38:88:8c:95:
cf:c8:ae:7a:27:d9:b6:a4:9c:a4:db:45:d1:19:09:66:ad:c4:
e4:83:c4:11:bd:48:19:e1:e1:25:5c:95:21:c3:01:3c:27:98:
af:83:cc:fe:87:6b:1e:8a:3a:db:ca:37:97:f7:d9:5f:85:0a:
b1:67:1c:67:62:ed:d5:aa:fb:67:ca:3c:8a:75:ba:01:e7:b0:
07:ff:2d:66:5f:99:8e:75:a7:9e:88:1e:a8:dd:f5:48:9a:0a:
b4:8d:4e:92:9d:c8:5c:c6:b2:f5:b3:a7:bf:cd:ec:4b:4f:9d:
e8:51:41:e1:12:e6:69:14:ba:22:09:62:72:16:1c:40:68:29:
88:e2:1b:0e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEG7dh4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NTE0ODM2NTViMzVhMmI4NDcxODVmNjg5YzhmZDE2MDFkY2M3MTg3MB4XDTIyMDEw
MTA4MDEzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2JmNmU3ZjVlMDY3
NTdlZDIyNmJmZTJlN2YyYjVjNzk3MDRmZmU2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXOV3VvwDpBiyvKetg0iehCf/VbFnmzOEATlb1uWwWgrUVl
fmOjcPI3E7XzVfql06NF/pF13DRm8cmIVfCdoVSeOiEIfRCazGczTj+jrGtkNLtm
MOUGBB/IqYJQhpnQTyU1nwXxR649Kct2Oghl6/Hq2/HIXr9FI4aOuyo8qd2MsEuv
0gPYRmJXNs3E4eA/U0hcwq8vzDSLNAbsqD3XkPEZwUDujSI47+ZC7bU6bTN4gXRg
7u88fWbU1HdoBDsCJuw/U+gWN0Q53bkNk/9RkMqdW8uylU5+P5ugoRSVSmk34IAl
ynW4Agya2GluKp/qAhp96nIXLuR6rWB3ietaMIECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ79uf14GdX7SJr/i5/K1x5cE/+YjAfBgNVHSMEGDAWgBR1FINlWzWiuEcY
X2icj9FgHcxxhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RSU0RaVnMxb3JoSEdGOW9uSV9SWUIzTWNZYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvMTI3OWZjLTFiMjctNDA3Yy04MWY0LWE3ZmIzNmNjMmZlMy8x
L09fYm45ZUJuVi0waWFfNHVmeXRjZVhCUF9tSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
MTI3OWZjLTFiMjctNDA3Yy04MWY0LWE3ZmIzNmNjMmZlMy8xL2RSU0RaVnMxb3Jo
SEdGOW9uSV9SWUIzTWNZYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi2PIAMEA1V28DANBgkqhkiG9w0B
AQsFAAOCAQEAab7t8WBqwnTp0dob3jcS11mbNiBFTsvA3HlLzW34NDEedNY9++yw
HOXHVramocAitAMS28/9YrijLgYB8hScOD2ttEOQN9jrmjhSrAgJ1o59IET8i5bu
OenAT/VctfDSC/yO6aT43y2Vevn7dBWSVoy/beb+7O5vGsE4iIyVz8iueifZtqSc
pNtF0RkJZq3E5IPEEb1IGeHhJVyVIcMBPCeYr4PM/odrHoo628o3l/fZX4UKsWcc
Z2Lt1ar7Z8o8inW6AeewB/8tZl+ZjnWnnogeqN31SJoKtI1Okp3IXMay9bOnv83s
S0+d6FFB4RLmaRS6IglichYcQGgpiOIbDg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:53 2023 by rpki-client on console.sobornost.net