Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/1-FZqyLhFUm2djlCgoIlUa44liM.roa
File: 1-FZqyLhFUm2djlCgoIlUa44liM.roa (raw, json)
Hash identifier: 85oitOnYLGv9vf+KoEHYPgi/VE33mGpM6R/xOa4YT5U=
Subject key identifier: D7:E1:59:AB:22:E1:15:49:B6:76:39:42:82:82:25:51:AE:38:96:23
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 12D79414
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/1-FZqyLhFUm2djlCgoIlUa44liM.roa
Signing time: Sat 01 Jan 2022 10:54:03 +0000
ROA not before: Sat 01 Jan 2022 10:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20751
IP address blocks: 83.216.208.0/20 maxlen: 20
83.216.208.0/21 maxlen: 21
185.136.212.0/22 maxlen: 22
83.216.216.0/22 maxlen: 22
83.216.220.0/22 maxlen: 22
80.64.128.0/21 maxlen: 21
80.64.131.0/24 maxlen: 24
80.64.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316118036 (0x12d79414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jan 1 10:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7e159ab22e11549b676394282822551ae389623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:79:ef:bb:30:f5:1b:66:c7:9c:21:c0:2a:
09:0d:81:72:b4:bd:59:62:9b:47:63:3a:32:8d:16:
4f:55:33:ca:54:f1:6e:33:4e:2f:7c:82:99:23:0c:
3b:17:4b:38:73:ce:1c:43:f3:98:e3:e6:30:c8:4d:
9a:cf:5d:f3:2d:4c:4f:5b:57:e7:46:5d:8f:39:71:
f2:80:35:c4:63:50:12:b6:e1:69:bf:d9:e2:83:c7:
f9:0e:f0:73:9c:67:02:99:66:31:5c:f9:e9:de:f1:
c4:bc:ba:7b:e8:55:16:56:fb:29:54:65:70:c0:68:
03:cb:17:ea:f3:c5:63:56:a0:5b:8c:63:63:6a:2a:
fe:97:c1:2c:23:ad:ee:9a:28:d2:6f:33:bb:07:c3:
93:2c:ec:ff:e0:50:1f:d8:6b:86:7a:83:f7:0f:f7:
5d:9f:68:74:11:0f:d3:99:96:da:d9:e2:be:68:32:
e7:91:b0:04:d5:44:d9:30:30:e2:1c:4d:97:85:8a:
87:21:bf:55:df:dc:19:d1:82:6e:e5:bb:a5:c5:25:
f2:0d:d5:a2:1c:de:a1:98:c6:8c:ef:e7:95:11:be:
6a:bb:b5:14:39:e1:e0:bb:52:36:c5:52:a3:c9:11:
4e:39:8d:dc:51:d5:55:bf:c8:64:5d:2c:3d:c4:e8:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:59:AB:22:E1:15:49:B6:76:39:42:82:82:25:51:AE:38:96:23
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/1-FZqyLhFUm2djlCgoIlUa44liM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.128.0-80.64.139.255
83.216.208.0/20
185.136.212.0/22
Signature Algorithm: sha256WithRSAEncryption
59:48:4e:19:b9:25:c5:7c:03:b8:d8:ad:1b:27:6f:fb:e2:63:
4d:8c:86:c7:1f:cf:3d:37:c7:5a:90:e9:1f:03:20:d7:c0:9b:
65:68:cb:dd:ca:6b:18:3a:fa:fc:92:36:06:f0:fb:76:37:7e:
60:f2:8f:e0:13:bd:72:a0:3f:35:fc:1f:8c:88:72:ec:29:52:
06:b9:7c:5b:6d:01:65:a8:08:ac:fe:4f:a4:91:cc:21:c6:e4:
2e:ca:f8:f2:f4:1b:e7:d4:3e:ae:c9:39:5e:87:31:6c:cd:83:
c2:4b:af:26:0b:53:71:64:15:8c:89:7f:b1:a1:2a:91:15:ea:
dd:ab:6e:eb:6d:5e:39:0e:ad:6d:f0:e5:ab:fa:b8:6e:f1:9e:
65:76:e9:44:1a:ce:76:03:1a:6f:e9:af:0c:81:90:dd:df:db:
a5:9e:6a:7a:8d:1f:95:1b:0f:10:70:a8:b3:b7:de:10:ea:ca:
d9:c2:37:a3:aa:0d:01:3b:f6:dd:90:34:30:b7:d0:ec:1f:f5:
fd:61:03:b4:5e:cd:45:7c:44:98:91:39:60:9d:3d:65:e2:2c:
78:e7:e0:aa:2d:86:a4:8d:f0:4e:7e:dc:81:b1:c0:21:24:c5:
bd:4e:16:79:5f:cb:42:ea:f7:01:b2:af:12:62:f1:a6:14:7d:
14:ca:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net