Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/R0FEaUXCVGAvjjk-3k3otpBhMI8.roa
File: R0FEaUXCVGAvjjk-3k3otpBhMI8.roa (raw, json)
Hash identifier: pCkQqnPyk4n3BC1RXkZPl78jYOU8i3Otrnfxue20J5Y=
Subject key identifier: 47:41:44:69:45:C2:54:60:2F:8E:39:3E:DE:4D:E8:B6:90:61:30:8F
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 04E0DC29
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/R0FEaUXCVGAvjjk-3k3otpBhMI8.roa
Signing time: Sat 01 Jan 2022 09:56:15 +0000
ROA not before: Sat 01 Jan 2022 09:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209609
IP address blocks: 195.210.38.0/24 maxlen: 24
195.210.39.0/24 maxlen: 24
109.71.76.0/24 maxlen: 24
2001:678:900::/48 maxlen: 48
2a0c:3340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81845289 (0x4e0dc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Jan 1 09:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4741446945c254602f8e393ede4de8b69061308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:f8:2c:9d:1a:46:23:2d:94:ec:d6:25:86:
a2:2f:5b:2f:9f:40:51:3c:6d:41:8c:25:b2:d3:96:
e5:d4:c4:62:23:5f:0c:86:41:78:62:2e:44:99:09:
31:91:e4:6a:86:1e:53:93:2d:7b:df:bd:87:c6:e2:
df:cb:02:9d:25:37:a8:c0:c5:32:97:8a:3f:2b:d8:
7c:26:84:f5:2f:cf:5b:65:a2:6d:66:52:6b:a7:72:
30:a7:83:87:da:8c:f7:7a:16:9a:9c:34:bf:ca:df:
70:ea:94:8d:00:63:61:1d:8f:93:e3:31:7a:7b:7d:
a2:dc:94:1c:61:ef:e1:65:f4:fc:cb:87:b5:48:3c:
88:c2:24:d8:5e:cd:d4:68:2d:34:16:21:9a:5b:51:
8c:31:0e:ad:55:6f:77:94:ed:c5:4b:3a:d7:ba:ac:
fc:c9:c0:68:46:c8:c6:dc:28:2b:23:2a:7e:1c:3b:
1a:7d:ff:bf:96:49:f0:9c:38:ea:4f:d3:76:c1:e2:
f9:f2:14:75:d3:a4:22:26:57:71:68:cc:85:10:65:
45:cc:64:24:b2:ff:82:83:11:83:f2:83:a5:48:ac:
8d:5c:cc:fb:46:f2:13:e8:08:b1:51:60:af:9c:a9:
f0:1a:a5:fe:e4:ce:1f:a9:21:e4:eb:35:a7:61:56:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:44:69:45:C2:54:60:2F:8E:39:3E:DE:4D:E8:B6:90:61:30:8F
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/R0FEaUXCVGAvjjk-3k3otpBhMI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.76.0/24
195.210.38.0/23
IPv6:
2001:678:900::/48
2a0c:3340::/29
Signature Algorithm: sha256WithRSAEncryption
02:c8:a8:bb:21:43:92:d5:4b:c8:12:52:10:4c:3e:c9:13:b2:
5b:cf:3d:d5:93:6a:2c:a3:98:f1:41:f9:de:e8:a1:37:ba:c9:
48:72:de:86:35:a5:0e:15:f5:87:d3:84:8e:03:38:06:e6:c6:
b2:79:5a:d1:9c:b1:34:53:d1:45:75:6a:2e:44:8c:38:11:37:
10:86:b5:98:a8:48:b6:f1:e9:3c:1c:ff:f3:2a:95:77:e7:6d:
92:f7:ba:b5:20:bb:2e:d5:fe:59:60:15:0d:c1:0d:cc:47:22:
5d:57:14:ff:d8:74:72:bc:a8:ed:6f:47:6c:30:68:dd:be:d3:
28:70:d1:d2:e5:63:f8:f1:44:90:8e:ec:65:dc:c4:2a:29:a1:
d5:15:8d:9c:74:f6:b7:87:93:b9:db:3a:83:f3:25:e4:55:e6:
02:de:68:59:a1:78:76:25:6e:a0:40:7e:a3:78:ce:57:33:46:
0d:26:68:3e:db:ee:66:6f:73:64:e3:8d:6c:2f:51:70:fe:af:
a0:88:e0:6e:2b:cf:80:10:e4:9d:24:5c:4d:62:41:25:1a:c1:
7b:07:53:fa:43:e3:8a:d7:04:81:0d:56:02:32:4b:0e:d1:b4:
4d:c8:92:32:6a:28:88:93:f7:88:04:1c:93:5a:70:c2:3d:05:
de:eb:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:20 2023 by rpki-client on console.sobornost.net