Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/f0Nz3Kk4-e5jSE4ef5lOmScVLfI.roa
File: f0Nz3Kk4-e5jSE4ef5lOmScVLfI.roa (raw, json)
Hash identifier: JYgQLcoHGqRPd8GRvSjpP4nj6DAbiiaDZiufX0E0r4I=
Subject key identifier: 7F:43:73:DC:A9:38:F9:EE:63:48:4E:1E:7F:99:4E:99:27:15:2D:F2
Certificate issuer: /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial: 0807D011
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/f0Nz3Kk4-e5jSE4ef5lOmScVLfI.roa
Signing time: Sat 01 Jan 2022 09:59:02 +0000
ROA not before: Sat 01 Jan 2022 09:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210026
IP address blocks: 151.90.0.0/16 maxlen: 24
185.86.84.0/22 maxlen: 24
2a05:b740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134729745 (0x807d011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Validity
Not Before: Jan 1 09:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f4373dca938f9ee63484e1e7f994e9927152df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:a6:8d:e0:62:35:33:f1:76:6f:f0:dd:e8:
24:ac:76:71:03:2e:ca:e2:f9:29:e5:d5:66:de:58:
bc:90:5d:4d:92:d4:f3:9a:ba:19:f8:27:11:3d:c5:
fb:4e:38:78:08:73:a5:88:c3:3a:f4:fc:c0:6e:75:
9c:e5:7f:fc:64:63:6d:de:86:e7:1f:1c:00:65:5d:
43:6c:19:07:84:4f:53:51:5a:9e:82:11:e1:de:86:
8f:35:82:7e:a1:19:d9:66:a6:fe:62:b8:4e:38:a2:
98:f9:f5:aa:6b:b8:5f:6f:cf:bb:01:3f:5a:20:53:
34:f3:15:8e:88:21:09:32:93:80:5a:64:08:19:cb:
7b:4f:a5:84:97:7b:ce:cc:6e:f6:fb:a1:dc:02:cc:
8c:c1:0e:65:cd:72:e5:62:51:89:1b:80:b6:26:bc:
a0:5c:4d:ad:f3:07:35:aa:25:fb:7c:51:6b:57:e0:
22:c9:36:c8:c9:a9:a7:82:ea:e0:40:7d:bd:d2:55:
04:62:47:f9:92:76:65:42:c6:19:eb:b2:0a:3a:f9:
e8:ff:04:38:5d:6c:0c:f2:01:99:1c:23:98:32:fc:
52:60:2f:21:97:28:93:a8:10:cc:7d:45:d7:24:9f:
8a:ef:5d:7c:2a:91:ba:3e:90:4a:a2:2d:f7:20:81:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:73:DC:A9:38:F9:EE:63:48:4E:1E:7F:99:4E:99:27:15:2D:F2
X509v3 Authority Key Identifier:
keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/f0Nz3Kk4-e5jSE4ef5lOmScVLfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.90.0.0/16
185.86.84.0/22
IPv6:
2a05:b740::/29
Signature Algorithm: sha256WithRSAEncryption
1e:bf:cb:69:e3:89:70:f7:54:14:fe:da:99:d1:81:6a:9a:c6:
43:61:40:68:ea:c8:f3:f5:e8:15:29:38:6c:04:72:7e:c2:bd:
94:3a:44:1f:ac:2f:22:db:a4:28:41:3a:bb:0e:a3:10:1d:6f:
3d:74:43:35:86:82:6e:96:e1:c7:9c:ea:dd:d7:5c:54:23:69:
d8:a2:70:3d:be:8c:1b:8a:62:5b:60:0f:ad:6c:5d:d1:38:10:
c8:1c:97:3d:c9:a5:7b:db:cb:5f:d1:67:0b:c9:6c:18:41:fa:
08:a2:75:e5:1d:ee:19:28:eb:77:b8:43:11:79:cf:db:f6:be:
fb:ac:5d:ef:1d:2a:5b:a3:8e:ed:62:92:56:d4:0c:41:86:d8:
8a:04:1b:2f:82:a6:6d:cb:66:3a:d3:15:81:fa:b3:33:25:aa:
4f:ff:35:a5:e9:18:47:fa:65:85:25:1d:16:60:30:d5:6f:1c:
1e:bf:57:bd:86:5e:33:5f:6d:9a:aa:78:19:6d:cf:c9:e9:af:
86:c3:a1:ac:ab:fe:f7:5c:98:3a:20:a6:b3:08:14:e5:d3:55:
3c:78:73:3f:2c:9b:a5:6e:f1:8f:58:f7:e4:2f:0f:1d:40:14:
2c:d0:e3:97:af:98:05:d4:b7:92:08:03:e9:75:a0:a7:13:b7:
1a:6f:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net