Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/PBwejeYXSCFQy2q0QMfBQo51kX8.roa
File: PBwejeYXSCFQy2q0QMfBQo51kX8.roa (raw, json)
Hash identifier: 5cmF5nQoepWk2tXEjI2/LQF7L4LcEZ9LcNEYrfYD2FU=
Subject key identifier: 3C:1C:1E:8D:E6:17:48:21:50:CB:6A:B4:40:C7:C1:42:8E:75:91:7F
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FDFE393
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/PBwejeYXSCFQy2q0QMfBQo51kX8.roa
Signing time: Sat 01 Jan 2022 12:59:40 +0000
ROA not before: Sat 01 Jan 2022 12:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48648
IP address blocks: 195.12.56.0/22 maxlen: 22
91.211.120.0/24 maxlen: 24
91.198.233.0/24 maxlen: 24
2a0a:2c0:2::/48 maxlen: 48
2a0a:2c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266331027 (0xfdfe393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c1c1e8de617482150cb6ab440c7c1428e75917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:60:ed:6a:39:be:28:e6:bd:6f:b0:3e:45:
b0:db:f5:41:70:ed:5b:86:3c:7e:ed:36:95:50:67:
7e:b9:04:7c:f8:c0:90:46:a1:73:a0:eb:63:1e:38:
b3:d7:fc:56:bd:7b:ef:f0:14:36:c5:5a:2a:3d:51:
a3:e8:9f:a9:77:95:cb:d8:8a:5b:95:ff:54:6e:b6:
fb:f7:d4:90:0c:c2:c9:33:06:bc:57:84:b9:e3:4f:
75:b1:0d:b3:98:6c:79:0f:89:12:2c:8f:44:a5:b4:
de:71:08:40:0e:5a:ec:44:70:00:84:04:19:98:a3:
45:5a:f0:d2:c6:6f:36:c2:41:4a:2d:fd:72:80:76:
c7:21:17:d7:9f:8f:56:1f:61:67:3b:98:d8:8e:b2:
d3:91:41:f0:95:08:06:6f:7c:9b:9a:31:21:79:a6:
bc:ef:49:bd:87:dc:88:18:a0:9d:a8:04:d9:cb:6f:
b4:7f:80:48:11:9e:7b:2c:2a:24:26:a1:2a:3a:58:
78:57:f5:e6:b0:1b:fb:3d:49:83:47:d7:07:6b:5c:
6a:0f:23:c0:28:70:bd:b8:e8:9e:00:c2:8d:a7:7c:
19:73:22:9a:6a:a0:8b:37:29:1e:e5:5c:2f:f5:ce:
dc:32:f5:de:07:8e:eb:4f:1f:cd:66:de:9e:5b:b7:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:1E:8D:E6:17:48:21:50:CB:6A:B4:40:C7:C1:42:8E:75:91:7F
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/PBwejeYXSCFQy2q0QMfBQo51kX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.233.0/24
91.211.120.0/24
195.12.56.0/22
IPv6:
2a0a:2c0::/48
2a0a:2c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
4a:70:43:e6:bb:22:56:54:2b:42:22:14:81:9e:ed:31:bf:a9:
bd:6d:a0:80:62:d0:b2:80:53:d9:52:e8:4b:5c:09:84:32:b8:
a5:0b:53:1e:96:a4:45:d6:06:30:94:f9:9b:02:f7:31:64:5d:
de:a4:a4:88:8e:c4:e8:bd:0a:15:be:a6:81:fb:52:9c:7e:62:
21:50:33:61:76:28:d8:34:a3:37:96:e2:3d:79:76:d1:41:42:
f2:d0:7e:f5:cc:f3:1c:0d:f5:ff:4e:50:af:8e:b2:bd:b2:aa:
6c:ce:20:94:45:e7:86:4c:a7:46:0b:0c:23:66:21:c2:f6:38:
f9:1b:a4:8a:87:0a:65:41:5f:ac:8e:8c:19:13:bb:3b:aa:73:
30:e9:17:ba:5c:62:57:0e:64:8b:b6:b1:bd:13:d6:5f:08:87:
65:a6:f3:6d:5d:3a:9c:8a:76:1c:ed:87:11:67:3e:70:35:7a:
91:7a:48:f0:21:9f:eb:b4:58:89:16:0b:4e:f5:f2:55:da:a9:
83:75:3c:f0:88:83:d6:9e:bf:26:c6:92:e9:3f:4f:68:ce:ad:
b2:f7:26:34:4e:aa:fc:30:37:9c:59:1b:37:b9:c4:24:7c:6b:
34:f1:59:ce:c1:4e:be:86:bc:ac:62:36:f1:74:e2:3a:af:f8:
fd:f7:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:38 2023 by rpki-client on console.sobornost.net