Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/ln1EKRWyknumIx_sr4gDJ2RJD4w.roa
File: ln1EKRWyknumIx_sr4gDJ2RJD4w.roa (raw, json)
Hash identifier: r9L7MleOITLkUxNNaFWbvT46BG3zwkC2vu5zvq4yJd8=
Subject key identifier: 96:7D:44:29:15:B2:92:7B:A6:23:1F:EC:AF:88:03:27:64:49:0F:8C
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 05D760D2
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/ln1EKRWyknumIx_sr4gDJ2RJD4w.roa
Signing time: Sat 01 Jan 2022 09:03:09 +0000
ROA not before: Sat 01 Jan 2022 09:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202913
IP address blocks: 185.130.144.0/24 maxlen: 24
185.130.144.0/22 maxlen: 22
185.130.144.0/23 maxlen: 23
185.130.145.0/24 maxlen: 24
185.130.146.0/23 maxlen: 23
185.130.147.0/24 maxlen: 24
185.130.146.0/24 maxlen: 24
80.78.129.0/24 maxlen: 24
80.78.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98001106 (0x5d760d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Jan 1 09:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967d442915b2927ba6231fecaf88032764490f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:97:aa:30:2f:65:f5:cb:8d:f8:3b:1a:3b:
ba:c8:9b:e4:14:0f:54:6d:74:92:60:9e:b9:e4:57:
24:dd:31:02:97:4a:3d:0c:e8:82:d0:ef:fa:4a:f9:
cf:96:91:81:d5:80:f0:6b:47:f7:fe:96:c4:f3:f8:
0a:00:ff:1d:c7:15:3d:fc:99:0f:d8:32:8d:67:8b:
a3:7b:63:30:a7:e8:c0:c2:24:00:b0:3b:a3:d2:75:
2c:37:fb:78:bc:e0:ea:73:66:ad:10:d8:bf:59:47:
dc:28:0f:31:4f:33:85:b5:d5:61:e0:72:24:0f:c5:
b0:13:54:23:c0:2b:e7:6c:a2:bf:c5:35:a1:50:fc:
f2:ea:a9:12:d7:3b:93:e2:e2:35:ae:8d:70:95:9d:
1d:34:c5:09:b2:c6:1a:2c:ec:ca:72:2e:6c:62:6f:
35:07:ca:5e:da:a6:12:a1:36:6e:bf:20:71:0b:f2:
3f:78:b8:25:6a:b5:59:72:5d:cd:70:07:7a:fc:d0:
5c:8a:59:81:e1:0d:b2:e7:c6:5a:a4:d4:68:d1:66:
21:a2:cb:c9:fc:40:29:55:2b:a2:0d:f8:7c:91:c4:
4e:82:c3:cc:31:42:c2:10:f2:5c:1e:70:ba:79:f4:
0a:6f:1a:cc:66:ab:65:47:ef:13:27:2b:17:59:d6:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:44:29:15:B2:92:7B:A6:23:1F:EC:AF:88:03:27:64:49:0F:8C
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/ln1EKRWyknumIx_sr4gDJ2RJD4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.128.0/22
185.130.144.0/22
Signature Algorithm: sha256WithRSAEncryption
36:03:f5:8b:85:98:3f:97:cc:39:ae:ef:ae:c8:8d:0e:86:c0:
02:f6:4f:a3:63:17:1d:ff:dc:51:af:51:39:37:41:f9:b6:03:
9f:c8:72:c6:81:0f:f8:77:c4:0d:be:9d:c2:0b:b0:52:ed:45:
98:7d:47:77:0c:30:5e:86:8c:8e:e6:e7:ec:c2:07:26:7b:4e:
b6:a3:f2:47:b0:77:9c:80:88:0d:f7:92:24:8e:88:a6:86:c2:
4d:9c:bc:87:3b:8b:30:c1:af:a5:90:d0:98:a2:92:f5:b5:b1:
9f:04:86:a4:3a:e1:08:02:e2:bd:f8:56:0e:0c:b6:b6:e0:cd:
5b:45:a4:65:eb:0a:44:fd:a9:13:14:53:c8:8a:ab:33:c3:a0:
00:9c:55:79:3e:c8:34:78:1d:06:62:ef:15:93:26:0d:17:42:
d4:97:d6:8a:01:be:27:df:03:6e:48:f5:b7:4b:47:84:e8:f0:
07:9e:35:ed:9d:ba:c5:07:37:7a:f2:4b:73:12:74:83:a3:0d:
ec:c5:b9:8d:0a:4e:2c:5d:c0:68:66:8a:cb:0a:a3:00:89:88:
1d:4f:4d:0f:e8:a1:f7:ff:17:15:54:37:ce:43:33:88:31:71:
8e:3f:5c:f0:04:32:f5:b8:12:e5:a8:39:f2:9c:9c:90:0d:c1:
b1:fa:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net