Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/_HdJkxJHacZw7aVs488VEdbRrVg.roa
File: _HdJkxJHacZw7aVs488VEdbRrVg.roa (raw, json)
Hash identifier: S3M8c1LJf114IgifGsifZ1tc8smfAxfkRqfUl3VR0BU=
Subject key identifier: FC:77:49:93:12:47:69:C6:70:ED:A5:6C:E3:CF:15:11:D6:D1:AD:58
Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial: 011B7E32
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/_HdJkxJHacZw7aVs488VEdbRrVg.roa
Signing time: Mon 24 Jan 2022 15:12:17 +0000
ROA not before: Mon 24 Jan 2022 15:12:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209948
IP address blocks: 212.81.52.0/24 maxlen: 24
212.81.55.0/24 maxlen: 24
212.81.53.0/24 maxlen: 24
212.81.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18578994 (0x11b7e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Validity
Not Before: Jan 24 15:12:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc774993124769c670eda56ce3cf1511d6d1ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:25:09:73:94:50:68:a7:c4:ec:8c:0c:cc:
56:23:df:c7:af:42:6e:8d:eb:d3:d6:e2:c2:a7:76:
44:f5:a3:98:e0:fc:48:49:90:67:cc:ad:15:0f:02:
cb:8b:03:b9:5a:70:2e:e9:6c:3a:8e:b2:e0:5a:44:
6d:79:5f:da:90:04:2f:ee:31:dd:b1:55:59:f0:20:
c6:29:e8:35:25:91:cd:31:76:15:a7:57:db:03:11:
09:c5:3a:5d:2c:83:fb:31:d6:af:27:c5:d1:88:a3:
75:99:97:1a:2b:ea:80:24:e4:02:dd:45:60:4a:b0:
a5:16:39:e3:c6:49:bc:d3:e4:7e:70:1b:2d:b4:5d:
93:38:17:bd:2c:70:f0:38:c6:a8:8d:9b:eb:ad:b5:
cf:a8:1a:59:55:90:1e:10:6f:13:de:4b:8e:92:24:
5e:ef:0c:f5:22:ee:f4:07:59:95:d0:e4:93:9b:e5:
5d:4f:00:c3:d1:df:99:ef:8c:fd:80:bc:8a:19:c0:
52:af:e5:3b:cd:0e:fd:8b:c3:48:4b:e4:35:45:4b:
30:44:2f:c8:64:d9:f5:98:8d:0f:48:7e:08:6f:7f:
14:09:04:99:67:6d:b7:d6:b8:dd:b6:7c:65:e1:28:
1a:1e:07:64:b8:ae:2d:9f:17:7c:d9:14:21:6e:03:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:49:93:12:47:69:C6:70:ED:A5:6C:E3:CF:15:11:D6:D1:AD:58
X509v3 Authority Key Identifier:
keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/_HdJkxJHacZw7aVs488VEdbRrVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
df:b3:f9:a0:fd:13:a2:31:1a:05:ae:8b:6c:89:24:ab:05:19:
92:06:43:5c:8a:33:85:1b:23:a5:5b:42:e4:6f:06:c5:0a:c0:
0b:76:6c:52:b4:f4:a5:a7:24:1c:97:b4:a9:4d:bf:e8:86:61:
97:c7:0e:eb:b0:1b:d5:1d:d9:8e:bc:06:f9:c5:0f:d6:11:d3:
87:12:1b:4b:38:2e:fe:e8:1f:bd:19:42:bc:7c:dd:f4:cc:41:
4a:46:09:36:24:54:d1:5f:26:8a:11:c4:40:02:4d:66:2f:ef:
8f:36:0c:85:a5:41:69:47:72:12:f0:99:76:72:cc:2c:f9:6b:
2d:38:d4:4e:88:ad:f2:e2:80:e1:28:50:76:3d:91:1e:39:41:
1f:08:71:55:80:2e:b6:f4:92:9c:20:30:2d:94:e9:2a:e2:61:
c1:95:7b:a4:70:43:a6:88:b4:a3:74:d6:c1:1e:03:ae:5e:0b:
22:50:25:28:d3:22:47:1d:16:62:f6:29:06:8f:69:a1:96:49:
e0:66:76:e6:7e:79:50:94:28:58:f1:78:4d:59:e4:ac:82:cc:
17:ec:61:1d:75:83:cd:79:67:99:fc:d3:9f:a0:fc:8b:6f:e3:
89:41:21:a9:7b:44:aa:b0:a3:a6:cd:20:f8:0f:d4:a9:22:f2:
88:3a:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:17 2023 by rpki-client on console.sobornost.net