Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/Oacu90Syxu0uum5rn0LhOW0Hcjg.roa
File: Oacu90Syxu0uum5rn0LhOW0Hcjg.roa (raw, json)
Hash identifier: cd/tUJGSLwZE+2nsKoNP9v2VEoScGLqFR1EBzfsbnbs=
Subject key identifier: 39:A7:2E:F7:44:B2:C6:ED:2E:BA:6E:6B:9F:42:E1:39:6D:07:72:38
Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial: 35F0F69F
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/Oacu90Syxu0uum5rn0LhOW0Hcjg.roa
Signing time: Tue 25 Jan 2022 10:01:06 +0000
ROA not before: Tue 25 Jan 2022 10:01:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39904
IP address blocks: 46.227.168.0/21 maxlen: 32
91.215.12.0/22 maxlen: 32
195.189.0.0/22 maxlen: 32
2a02:7a00::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904984223 (0x35f0f69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Validity
Not Before: Jan 25 10:01:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39a72ef744b2c6ed2eba6e6b9f42e1396d077238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:08:43:a9:2c:a7:bf:19:08:3e:be:f0:03:
65:c1:c9:e3:39:57:c7:0f:b9:00:81:7e:d1:83:2a:
87:1b:6a:83:6b:cf:10:21:39:0c:0e:03:78:d6:9d:
ab:a7:7c:84:59:7b:7d:25:25:f5:ed:98:4e:0a:b1:
5e:ad:6c:14:8d:63:7e:48:23:79:b2:9b:c7:f8:1e:
15:a0:a4:f0:c7:bf:be:77:f2:3e:c0:8d:b4:76:e6:
c8:4a:d9:e8:22:ff:32:cf:94:40:c3:e4:5b:58:19:
f6:f5:b4:35:36:db:8b:4b:8d:1f:68:84:0f:0d:37:
57:98:0d:5e:d4:d8:22:0d:28:c8:6b:b2:ce:17:4b:
0a:bf:69:ff:56:1f:0c:08:7e:f9:7c:ec:57:34:96:
e4:6c:30:db:5b:23:89:c0:d5:a8:06:e0:97:40:3d:
b4:21:ea:0c:3c:0d:37:bd:98:2b:fa:07:ab:fa:c9:
77:62:0a:ad:40:97:a4:91:f7:8b:17:55:0f:07:ea:
fc:67:2a:81:f0:6a:1f:02:5b:66:6c:a2:16:8e:57:
70:ae:03:df:40:35:d3:cd:9a:03:e8:b6:91:6e:f0:
53:28:3b:3a:31:dd:34:a1:51:89:3d:04:42:a5:ef:
0f:f8:42:b1:e4:46:0e:d0:9a:a9:01:5b:f1:d7:0f:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:2E:F7:44:B2:C6:ED:2E:BA:6E:6B:9F:42:E1:39:6D:07:72:38
X509v3 Authority Key Identifier:
keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/Oacu90Syxu0uum5rn0LhOW0Hcjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.168.0/21
91.215.12.0/22
195.189.0.0/22
IPv6:
2a02:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
60:99:0a:b0:ee:fa:dd:e4:bf:50:f8:16:c9:a3:ec:e0:ba:e3:
79:ee:df:d6:60:06:a2:7e:f1:70:a5:98:96:ed:3e:60:d5:c9:
fe:ed:05:e7:8b:24:bf:19:7b:7f:88:36:98:8f:8b:ef:7e:11:
97:a2:74:e8:8e:ce:27:2b:bd:63:5f:2b:fb:b2:bc:25:d0:3f:
74:d2:bf:1e:b5:2d:85:da:72:28:34:42:09:b8:63:83:cd:d9:
fc:6b:d2:22:ee:f8:b9:3a:56:5d:a9:77:60:e1:63:bb:3d:8d:
b4:55:28:d0:48:fb:c2:40:24:28:92:a5:f8:9c:6f:ea:8a:58:
2a:17:97:83:c5:07:67:aa:e7:29:18:c1:a1:74:ed:eb:b5:e5:
90:a5:0e:cc:be:39:12:06:5d:ac:95:af:ba:8d:d9:b9:a3:86:
cd:6f:c9:95:85:fa:5e:41:53:43:f4:ab:4b:15:3a:ac:f0:a9:
b8:ba:44:16:b6:2c:1e:80:22:73:68:8c:20:23:63:4b:f7:1e:
da:6e:45:9d:c9:fd:22:c6:8c:27:34:96:06:21:ca:72:61:08:
e2:70:21:ec:f7:fb:be:13:00:f4:6d:0b:4c:55:41:13:75:d0:
96:24:25:a8:6d:4b:2d:34:dd:5b:bc:54:30:15:57:e0:c2:66:
9d:d9:54:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:16 2023 by rpki-client on console.sobornost.net