Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/RSiZ2gsNThfVMzDycZMpgbdJwr8.roa
File: RSiZ2gsNThfVMzDycZMpgbdJwr8.roa (raw, json)
Hash identifier: nwo2Bgk3VwnDi+m+ebE04eaWZ9z9Ria6G65/np9CsEs=
Subject key identifier: 45:28:99:DA:0B:0D:4E:17:D5:33:30:F2:71:93:29:81:B7:49:C2:BF
Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial: 0155F6
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/RSiZ2gsNThfVMzDycZMpgbdJwr8.roa
Signing time: Mon 21 Feb 2022 13:47:25 +0000
ROA not before: Mon 21 Feb 2022 13:47:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8387
IP address blocks: 92.61.208.0/20 maxlen: 20
185.49.176.0/22 maxlen: 22
212.166.96.0/19 maxlen: 19
212.31.64.0/19 maxlen: 19
46.17.224.0/21 maxlen: 21
2001:9d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87542 (0x155f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Validity
Not Before: Feb 21 13:47:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=452899da0b0d4e17d53330f271932981b749c2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:d8:fb:2a:36:fd:4e:b1:ea:18:14:ee:a8:
30:df:3d:b8:d3:bd:42:45:5f:dc:d8:98:5b:1c:f6:
25:62:15:d1:aa:d7:d3:7c:8a:11:ee:10:09:e9:72:
44:c5:db:6e:44:37:09:b8:6d:8c:fb:4d:b2:dc:db:
4e:2c:09:36:e2:d0:a4:af:3c:ce:d9:29:a4:13:5b:
24:03:af:36:ff:dc:0a:62:41:f1:de:16:ff:b6:b1:
df:ba:d1:c0:1a:41:db:8c:94:cf:59:49:b1:51:f9:
1f:a3:0a:bb:15:54:61:0f:d5:12:ac:d5:7d:92:e7:
b9:79:4a:13:55:93:01:bc:71:f9:af:3c:42:e3:eb:
5b:20:f8:94:98:c5:00:9a:9e:66:f8:6c:02:8c:0d:
8e:5d:dc:54:e0:5b:88:31:fb:cb:70:b8:fa:3a:69:
40:f1:85:11:c9:f1:bb:f1:5b:5a:fa:f4:ee:96:88:
a7:8c:96:15:79:5c:f8:76:05:de:2f:cb:6b:f4:66:
8a:77:0b:8f:59:33:77:5d:26:41:51:c4:d6:fb:a1:
b5:4b:4a:14:f4:03:17:81:19:03:c0:1e:39:cc:28:
3f:cc:25:cb:61:2d:69:44:df:22:7d:b3:e9:5d:9b:
38:b4:33:cd:03:bf:b8:3e:b5:2f:11:15:75:19:3c:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:99:DA:0B:0D:4E:17:D5:33:30:F2:71:93:29:81:B7:49:C2:BF
X509v3 Authority Key Identifier:
keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/RSiZ2gsNThfVMzDycZMpgbdJwr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.224.0/21
92.61.208.0/20
185.49.176.0/22
212.31.64.0/19
212.166.96.0/19
IPv6:
2001:9d0::/32
Signature Algorithm: sha256WithRSAEncryption
10:a3:31:99:2b:38:54:f3:e4:be:89:c4:79:53:ac:98:1a:21:
2a:e7:da:5f:89:87:70:ee:a3:3f:a2:b6:93:42:53:a4:fb:84:
fc:e1:b3:fc:f2:34:d3:cf:ce:46:b1:91:bf:45:3b:d5:8e:8f:
f4:55:22:e8:3a:fe:19:e0:b4:86:7d:7b:4d:7c:2e:16:01:d7:
ab:20:8a:28:0c:e5:a0:14:e3:9f:bd:e3:c1:ff:b6:c1:7c:60:
39:5a:ee:30:5e:c9:70:61:cb:ab:69:a7:a2:87:09:0a:f0:99:
5f:15:00:54:12:4b:45:a7:b5:74:77:27:31:9a:04:e7:39:87:
c4:7c:a6:18:dc:9e:cd:7c:8e:5b:09:ff:46:3d:95:e8:2a:8b:
c2:08:4b:51:b8:5f:85:2e:40:43:d2:0e:38:7c:1b:f6:ab:26:
af:bf:2b:fd:88:cf:9b:1d:a8:01:9c:22:0a:57:86:3a:ac:a8:
0a:1c:be:e5:55:0a:eb:62:de:8e:49:c6:27:2c:2f:65:16:aa:
3e:05:19:85:a3:50:0d:d3:12:44:46:4d:49:9b:f1:4f:89:19:
02:01:5b:84:51:46:f8:d7:ef:bd:ea:c0:4f:f5:c1:98:d2:ae:
e2:8c:4c:d8:22:0a:4e:b0:6e:f8:3e:18:2d:48:39:5a:f9:71:
23:b5:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net