Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/HRpMPvA-EooDv7FUHhbp8xDE_N4.roa
File: HRpMPvA-EooDv7FUHhbp8xDE_N4.roa (raw, json)
Hash identifier: f8/+Je0vwkmCzXVFFBdmPcs3S87Y5O8nbad16Y1V1A0=
Subject key identifier: 1D:1A:4C:3E:F0:3E:12:8A:03:BF:B1:54:1E:16:E9:F3:10:C4:FC:DE
Certificate issuer: /CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Certificate serial: 034533E3
Authority key identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/HRpMPvA-EooDv7FUHhbp8xDE_N4.roa
Signing time: Sat 01 Jan 2022 14:05:23 +0000
ROA not before: Sat 01 Jan 2022 14:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12840
IP address blocks: 212.109.96.0/20 maxlen: 20
212.109.112.0/22 maxlen: 22
212.109.120.0/23 maxlen: 23
212.109.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54866915 (0x34533e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Validity
Not Before: Jan 1 14:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d1a4c3ef03e128a03bfb1541e16e9f310c4fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:67:f3:bc:95:96:df:68:2d:f4:b2:24:19:
52:b6:35:7d:97:71:8b:9f:11:ad:4c:a5:1e:e9:42:
d8:cc:66:db:9f:99:42:e0:12:4d:59:a5:85:75:2a:
1b:9e:1e:58:f5:ab:18:88:51:b4:29:15:23:4d:46:
48:82:4f:7a:ce:89:14:e8:13:99:ae:f5:28:2f:7d:
c9:ea:78:0f:2f:10:94:56:69:7a:93:d9:5f:e2:9d:
69:95:d3:9e:f8:d8:a5:c3:f0:80:8b:ee:90:d8:06:
24:d7:2e:a8:81:5d:31:0c:8c:5d:94:31:f1:b5:1b:
1b:d8:51:80:7f:68:ab:af:5a:6b:17:7c:16:df:45:
4c:3f:78:fd:bf:d2:f2:bc:74:01:2a:13:97:73:8e:
eb:da:bd:47:7c:2e:c4:ba:e3:e5:f3:67:d9:a1:37:
7b:12:4a:d2:1b:3a:41:05:dc:b5:ab:b7:09:34:4e:
62:a5:1c:d9:3b:98:56:82:10:c4:03:f8:0a:40:59:
bf:22:f2:87:9b:d0:69:dd:8c:d2:58:96:37:1c:a6:
31:9d:df:c5:e6:47:e2:32:b1:92:ea:91:78:8e:19:
c8:9d:6a:84:e9:08:b7:14:24:b3:f3:fa:83:43:07:
55:dd:4d:a6:24:cf:90:41:fe:8a:86:a6:9d:71:03:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1A:4C:3E:F0:3E:12:8A:03:BF:B1:54:1E:16:E9:F3:10:C4:FC:DE
X509v3 Authority Key Identifier:
keyid:68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/HRpMPvA-EooDv7FUHhbp8xDE_N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.96.0-212.109.115.255
212.109.120.0/23
212.109.123.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e0:0d:42:66:0d:53:ba:23:70:b1:96:6f:13:4d:1b:43:4f:
5d:4d:76:a3:18:07:c3:00:be:7b:94:7c:87:0a:b9:21:49:f3:
11:4e:51:09:b8:81:ad:f7:57:82:1f:b4:cd:d8:3c:57:84:35:
5c:1d:04:b2:f3:03:37:78:bf:4f:90:f1:78:b6:c7:1a:b9:41:
c0:bf:a9:0c:dd:ac:4a:27:07:e6:53:cf:0b:17:2d:bc:9c:b1:
2a:dd:b9:5c:c5:68:97:12:83:13:f5:8f:a2:0c:e7:10:df:05:
9d:d2:31:06:4d:f2:99:73:49:97:da:41:49:ca:22:c2:31:da:
eb:84:1d:93:8b:71:f4:e8:cd:65:c8:a8:b5:d6:18:1f:08:7c:
a4:dc:7f:a7:03:c3:92:88:60:54:e0:77:3f:d8:c5:28:44:d9:
b1:a2:90:25:82:e4:e2:81:92:48:65:1b:ba:69:21:f3:2a:0a:
ef:a7:1b:9e:06:89:55:00:bf:c9:bb:1e:99:11:81:b4:d0:d5:
a7:31:d5:94:51:3f:81:31:83:04:65:16:f2:18:12:52:19:66:
51:8a:c3:0f:a9:d4:a0:c7:5d:56:7b:d4:d9:5b:4e:69:1e:b4:
9e:74:6f:e8:f4:a9:b3:df:d8:77:17:35:84:4e:e5:f0:d8:1d:
bb:55:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:34 2023 by rpki-client on console.sobornost.net