Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/8CyTbU7arW3MMl42AMge9DeOo_g.roa
File: 8CyTbU7arW3MMl42AMge9DeOo_g.roa (raw, json)
Hash identifier: L1309S9iXYiGOHDYP7hbp2m2e09+5QNmvfBMYRVUK8Y=
Subject key identifier: F0:2C:93:6D:4E:DA:AD:6D:CC:32:5E:36:00:C8:1E:F4:37:8E:A3:F8
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 018363D1E0FD66BA7ED7EEEB3C3CDFBF7673
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/8CyTbU7arW3MMl42AMge9DeOo_g.roa
Signing time: Thu 22 Sep 2022 06:10:42 +0000
ROA not before: Thu 22 Sep 2022 06:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41008
IP address blocks: 109.233.24.0/21 maxlen: 24
193.58.8.0/21 maxlen: 24
193.201.162.0/24 maxlen: 24
212.113.64.0/19 maxlen: 24
62.233.0.0/19 maxlen: 24
2a02:239c:0:24::/64 maxlen: 64
2a02:2398::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:63:d1:e0:fd:66:ba:7e:d7:ee:eb:3c:3c:df:bf:76:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Sep 22 06:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f02c936d4edaad6dcc325e3600c81ef4378ea3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:91:20:2d:d9:b3:c0:d2:be:ff:1e:a0:84:9c:
92:39:05:e9:fe:18:a4:ac:3d:ab:0b:9f:fd:23:4a:
ba:e2:9f:cd:65:c0:dc:6c:ca:22:a5:78:ca:76:48:
da:59:cf:9b:df:1b:55:de:27:1e:34:1c:78:cf:f6:
e2:81:2f:99:54:0f:7f:a8:61:b9:44:26:73:06:37:
0a:d7:18:6c:dc:51:d3:bf:a9:f5:a4:eb:27:ec:45:
d7:2e:ce:d9:c3:10:b8:29:94:1f:d6:a6:3b:06:e7:
eb:02:a6:9d:78:11:66:0a:51:4b:5f:25:70:0b:8b:
4c:c1:43:be:1b:bd:18:d6:bc:f1:95:e1:e1:ef:f2:
90:aa:74:35:1b:6a:93:5a:9b:d0:6a:18:d0:cc:4e:
6b:a6:cc:1b:dd:f9:2c:5a:d2:2f:a5:d0:a8:a2:5d:
75:84:64:0d:4e:34:c0:13:0d:88:ea:85:f8:45:30:
d9:33:14:75:87:df:10:f3:68:b1:db:c3:83:e9:12:
31:c1:7e:91:86:c3:3c:60:91:ff:c0:eb:a3:86:9d:
34:a4:b9:9c:2d:bf:5a:e1:d9:26:42:7c:bc:5d:bb:
11:05:4f:7b:dd:ef:7b:a3:4c:16:23:18:81:15:ff:
fb:cc:ed:4b:9f:a0:02:d0:6b:72:a9:f5:93:63:c3:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:93:6D:4E:DA:AD:6D:CC:32:5E:36:00:C8:1E:F4:37:8E:A3:F8
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/8CyTbU7arW3MMl42AMge9DeOo_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.0.0/19
109.233.24.0/21
193.58.8.0/21
193.201.162.0/24
212.113.64.0/19
IPv6:
2a02:2398::/29
Signature Algorithm: sha256WithRSAEncryption
22:81:59:8a:18:a6:9f:69:84:0a:82:f1:e5:18:86:81:14:d0:
53:2a:22:e6:3f:4d:af:87:e9:a4:31:5a:b1:4f:37:4f:05:5f:
e1:49:86:4f:24:77:4e:f6:eb:01:56:d2:ca:44:93:73:f7:f6:
f6:3a:8e:39:57:d8:63:c8:67:03:6b:e2:0f:a8:4b:04:2e:21:
01:6c:43:7a:5e:a1:01:b4:73:73:48:dc:b2:6f:32:f5:99:92:
13:51:5c:61:33:8e:92:1a:c5:fd:81:e4:83:1c:07:d8:4e:5c:
7d:36:c4:0a:7f:48:ac:28:73:65:b7:c0:3f:cd:e2:4d:14:b9:
05:27:dd:48:7f:72:64:bd:bd:29:ab:ad:fe:73:9c:b9:fe:64:
be:55:ca:ac:8e:76:77:8b:3e:bb:e2:79:25:a2:be:74:86:79:
4c:2c:ee:14:e7:88:78:61:85:7d:59:6a:1e:19:55:c4:05:fa:
44:1c:dc:76:a0:16:90:23:d3:ae:c8:91:0c:1b:fa:d8:ba:5c:
af:80:e8:e1:10:e3:c1:86:20:e2:22:c2:f1:c6:4a:8b:fc:b6:
1d:ed:fa:bf:7b:09:4f:9f:7a:b1:4b:0d:0d:fa:af:0c:7f:b3:
1b:26:15:5d:8c:94:1c:08:11:48:d8:98:3e:2f:f5:41:78:7c:
a5:99:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:35 2023 by rpki-client on console.sobornost.net