Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/nrPX7p8n_y3i-67El14hWI83R8k.roa
File: nrPX7p8n_y3i-67El14hWI83R8k.roa (raw, json)
Hash identifier: fq/1WEAWpl4vCyfW+0SdrSgKi4yCwWnDYzPOH73/Bu4=
Subject key identifier: 9E:B3:D7:EE:9F:27:FF:2D:E2:FB:AE:C4:97:5E:21:58:8F:37:47:C9
Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial: 072FB47D
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/nrPX7p8n_y3i-67El14hWI83R8k.roa
Signing time: Sat 01 Jan 2022 07:59:18 +0000
ROA not before: Sat 01 Jan 2022 07:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28792
IP address blocks: 195.46.60.0/22 maxlen: 24
80.82.240.0/20 maxlen: 24
195.85.245.0/24 maxlen: 24
185.58.176.0/22 maxlen: 24
2a01:248::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120566909 (0x72fb47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Validity
Not Before: Jan 1 07:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eb3d7ee9f27ff2de2fbaec4975e21588f3747c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:20:53:77:8b:fa:1e:c8:5d:85:64:42:c7:
a2:19:99:2f:f3:75:09:76:ae:ae:71:8f:ed:29:a9:
9c:00:ec:d5:2f:8b:20:a2:ec:99:c0:d6:cd:9d:56:
e8:0c:11:38:6a:13:64:3c:3f:a0:47:8e:cf:b5:55:
eb:5f:05:a5:43:0a:f0:39:c1:d0:13:e0:1d:b7:d5:
89:71:17:82:c4:36:ce:31:81:d2:18:e3:ae:04:f1:
a3:28:f7:fb:7c:68:21:04:03:c7:3d:cf:d8:2b:ca:
41:18:b8:16:5b:0d:e5:12:e8:3e:f8:c1:f9:dd:00:
77:65:4d:89:1f:b5:95:90:a9:ed:5c:2a:f1:95:16:
d9:c9:c1:4d:9b:4b:78:9c:57:09:71:c3:3c:ef:54:
8f:65:61:25:bf:03:e5:15:3d:ae:20:fa:c0:0b:98:
52:f7:2b:d4:17:d4:26:85:14:e8:35:63:1c:93:25:
3f:c4:00:c0:d2:ac:c3:05:5a:95:15:22:5e:2c:5a:
bb:de:c6:0c:05:f3:94:02:8e:43:bd:dd:bc:6c:78:
73:26:7b:aa:65:1c:df:0c:51:79:53:9c:63:0f:22:
22:c3:92:25:71:46:85:05:aa:32:e8:8e:00:58:f9:
22:90:05:ee:eb:65:60:93:05:ac:47:3e:50:80:a5:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B3:D7:EE:9F:27:FF:2D:E2:FB:AE:C4:97:5E:21:58:8F:37:47:C9
X509v3 Authority Key Identifier:
keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/nrPX7p8n_y3i-67El14hWI83R8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.240.0/20
185.58.176.0/22
195.46.60.0/22
195.85.245.0/24
IPv6:
2a01:248::/32
Signature Algorithm: sha256WithRSAEncryption
0a:0c:37:96:80:97:ed:c2:eb:2d:13:3d:1e:54:0e:7c:36:df:
3e:a6:14:a1:45:af:01:aa:cd:29:72:84:6a:ab:07:ce:d5:a7:
14:1a:06:e0:d0:ff:47:e5:2d:28:6c:21:fa:da:1c:2d:8e:58:
43:20:80:1f:ae:87:7f:68:0d:72:f8:2a:de:0a:fb:ea:a9:55:
be:4e:a7:61:b0:10:55:0f:ec:aa:a3:b0:9a:ea:bd:e2:8c:12:
41:b4:89:0e:25:40:f6:12:49:ab:8e:30:c1:5d:bd:46:ba:a4:
4f:c4:d6:84:7f:f6:9c:56:b5:3a:d4:e3:0e:2a:6e:b9:a4:a2:
a1:cd:e5:8b:ac:01:c9:2a:b2:df:eb:1d:ec:b7:57:1d:bd:4d:
e8:38:64:a5:91:e1:4b:51:c0:eb:79:27:f4:ea:69:d0:b1:85:
a1:52:20:de:67:60:50:37:2e:f0:f9:02:84:28:45:09:ff:ca:
1c:a9:03:29:25:06:f7:96:21:d5:0c:3b:f7:cd:52:53:86:04:
85:63:0b:6c:53:d3:c5:77:85:73:56:22:bb:b4:8c:30:5d:be:
c0:2b:90:c3:b4:1a:5d:f1:01:d5:ea:08:26:d1:5d:18:55:93:
af:59:0c:65:11:0b:0b:46:56:4b:9c:a1:b1:79:57:a9:dd:58:
e4:a4:76:4e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBy+0fTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZWQ2ZWYxN2U2Zjk1MTgxODkwZTU0ZDAwMGEyYWM4ZmYyZDI0OTliMB4XDTIyMDEw
MTA3NTkxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWViM2Q3ZWU5ZjI3
ZmYyZGUyZmJhZWM0OTc1ZTIxNTg4ZjM3NDdjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2zIFN3i/oeyF2FZELHohmZL/N1CXaurnGP7SmpnADs1S+L
IKLsmcDWzZ1W6AwROGoTZDw/oEeOz7VV618FpUMK8DnB0BPgHbfViXEXgsQ2zjGB
0hjjrgTxoyj3+3xoIQQDxz3P2CvKQRi4FlsN5RLoPvjB+d0Ad2VNiR+1lZCp7Vwq
8ZUW2cnBTZtLeJxXCXHDPO9Uj2VhJb8D5RU9riD6wAuYUvcr1BfUJoUU6DVjHJMl
P8QAwNKswwValRUiXixau97GDAXzlAKOQ73dvGx4cyZ7qmUc3wxReVOcYw8iIsOS
JXFGhQWqMuiOAFj5IpAF7utlYJMFrEc+UIClcTMCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBSes9funyf/LeL7rsSXXiFYjzdHyTAfBgNVHSMEGDAWgBSu1u8X5vlRgYkO
VNAAoqyP8tJJmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3J0YnZGLWI1VVlHSkRsVFFBS0tzal9MU1Nacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvYzdlYTFmLWFhMjctNGFjOC04Y2E3LTBhZTBmMWFjY2RhNC8x
L25yUFg3cDhuX3kzaS02N0VsMTRoV0k4M1I4ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
YzdlYTFmLWFhMjctNGFjOC04Y2E3LTBhZTBmMWFjY2RhNC8xL3J0YnZGLWI1VVlH
SkRsVFFBS0tzal9MU1Nacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBFBS8AMEArk6sAMEAsMuPAMEAMNV
9TANBAIAAjAHAwUAKgECSDANBgkqhkiG9w0BAQsFAAOCAQEACgw3loCX7cLrLRM9
HlQOfDbfPqYUoUWvAarNKXKEaqsHztWnFBoG4ND/R+UtKGwh+tocLY5YQyCAH66H
f2gNcvgq3gr76qlVvk6nYbAQVQ/sqqOwmuq94owSQbSJDiVA9hJJq44wwV29Rrqk
T8TWhH/2nFa1OtTjDipuuaSioc3li6wBySqy3+sd7LdXHb1N6DhkpZHhS1HA63kn
9Opp0LGFoVIg3mdgUDcu8PkChChFCf/KHKkDKSUG95Yh1Qw7981SU4YEhWMLbFPT
xXeFc1Yiu7SMMF2+wCuQw7QaXfEB1eoIJtFdGFWTr1kMZRELC0ZWS5yhsXlXqd1Y
5KR2Tg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net