Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/5LZsgdwoGoxB3-EA69TviJRqDkY.roa
File: 5LZsgdwoGoxB3-EA69TviJRqDkY.roa (raw, json)
Hash identifier: B6PsaBIr7fFnmaxe3ptg4GbjPwv2oSg6wCtgBuky6TU=
Subject key identifier: E4:B6:6C:81:DC:28:1A:8C:41:DF:E1:00:EB:D4:EF:88:94:6A:0E:46
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018216969387145E9CAC24BE86C23D36A6DF
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/5LZsgdwoGoxB3-EA69TviJRqDkY.roa
Signing time: Tue 19 Jul 2022 13:12:23 +0000
ROA not before: Tue 19 Jul 2022 13:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12850
IP address blocks: 212.29.128.0/19 maxlen: 24
80.247.64.0/20 maxlen: 24
87.248.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:96:93:87:14:5e:9c:ac:24:be:86:c2:3d:36:a6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jul 19 13:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4b66c81dc281a8c41dfe100ebd4ef88946a0e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:49:9e:d8:a3:33:98:d0:84:45:9f:de:ec:
d3:9c:1f:4e:d7:5e:0b:0c:31:43:bf:cb:53:fb:7d:
2d:bf:b4:c4:79:64:5a:15:2f:98:d2:20:60:05:b0:
34:11:ae:38:54:1b:a9:fd:68:19:ee:60:7f:8c:88:
d8:92:69:8d:89:c0:9f:23:1a:6a:ad:16:81:b3:d4:
0b:67:10:1d:0d:c9:4b:f0:8a:ae:2d:78:53:74:06:
77:8a:74:31:23:d7:4f:ec:86:9e:6a:40:ba:f0:35:
4d:51:4a:b0:6c:71:be:fe:60:f3:36:4e:17:b8:7c:
bc:1f:86:d2:d0:be:f5:a1:63:92:ac:15:6d:1c:15:
d7:b6:34:63:69:25:e7:8d:4f:02:f1:fd:55:9b:1e:
74:c3:9d:50:b3:84:62:85:fe:e6:97:af:81:44:33:
ae:a7:7c:aa:d5:9e:2b:d6:0a:f7:85:4e:99:a7:f7:
1c:a2:4c:6c:40:46:77:d1:2b:4f:70:9b:52:56:14:
0f:11:60:b1:ea:71:f5:1b:05:af:ce:90:31:75:33:
97:6c:92:03:4d:3b:51:69:16:86:74:e1:f3:33:1c:
1c:2e:d0:41:21:24:b4:be:dc:5a:d9:8e:25:cf:85:
c4:b3:2f:34:63:ab:9c:06:3f:36:b8:59:aa:b8:76:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B6:6C:81:DC:28:1A:8C:41:DF:E1:00:EB:D4:EF:88:94:6A:0E:46
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/5LZsgdwoGoxB3-EA69TviJRqDkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.64.0/20
87.248.32.0/19
212.29.128.0/19
Signature Algorithm: sha256WithRSAEncryption
01:f5:27:63:15:63:1a:7d:f4:ca:8f:c4:5d:a1:87:0d:67:6f:
77:f4:df:5f:aa:0d:7c:cc:93:95:88:5d:f0:7c:da:18:cf:57:
fd:8b:b9:a0:a4:02:e6:30:e7:86:ce:ca:5e:7c:58:82:a3:59:
3f:1d:57:c1:ac:ad:ea:04:a6:8f:ee:62:f1:f7:f9:a5:1a:f8:
64:97:be:93:8d:d5:03:92:14:5e:9c:a7:1a:97:20:97:32:dc:
d7:55:26:ed:fd:a2:55:6c:17:6b:08:db:fb:eb:2a:06:83:f4:
f1:e2:53:60:19:7d:70:63:4b:b4:a3:3f:3b:a9:bd:ef:cc:ba:
02:97:75:31:61:65:22:a4:b2:53:f8:4a:e9:6a:f8:93:3f:f5:
25:a9:b7:29:17:81:83:22:c9:c4:7e:c5:9e:da:10:82:a6:8d:
60:1a:0c:f1:88:d3:c8:16:2b:d8:b1:46:f6:09:f1:9e:c7:dd:
5a:cb:44:ad:6f:01:a5:68:07:8d:43:4a:e5:19:73:bc:f8:f3:
73:19:ec:c6:17:63:64:67:4e:0e:c2:eb:82:7d:c0:b5:df:d7:
75:81:3b:4e:31:9f:66:7e:a7:fa:55:7e:60:e1:2e:09:59:6a:
99:3a:5b:28:93:97:11:40:15:d3:86:64:29:b9:21:a3:f9:b2:
92:b5:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net