Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/Kg4NXZF2fIeaewCTFwP-pLj-HIQ.roa
File: Kg4NXZF2fIeaewCTFwP-pLj-HIQ.roa (raw, json)
Hash identifier: w1vSlfaN6XvhA46kMCuZe9TwI37f1Kr+/FsuW+31ZeA=
Subject key identifier: 2A:0E:0D:5D:91:76:7C:87:9A:7B:00:93:17:03:FE:A4:B8:FE:1C:84
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 36C74098
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/Kg4NXZF2fIeaewCTFwP-pLj-HIQ.roa
Signing time: Tue 01 Feb 2022 15:24:54 +0000
ROA not before: Tue 01 Feb 2022 15:24:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30818
IP address blocks: 82.221.80.0/20 maxlen: 20
82.221.96.0/20 maxlen: 20
82.221.0.0/20 maxlen: 20
82.221.112.0/20 maxlen: 20
82.221.16.0/20 maxlen: 20
82.221.32.0/20 maxlen: 20
82.221.48.0/20 maxlen: 20
82.221.164.0/24 maxlen: 24
82.221.57.0/24 maxlen: 24
82.221.64.0/20 maxlen: 20
82.221.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919027864 (0x36c74098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Feb 1 15:24:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a0e0d5d91767c879a7b00931703fea4b8fe1c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:22:de:b9:6c:1a:f7:c4:27:7f:28:9c:dd:
e1:ba:bd:c4:4a:b2:79:4f:99:09:1a:36:c8:d1:01:
c8:4b:4d:31:21:8a:79:21:ab:9f:c4:e2:74:cb:41:
23:11:ca:19:f1:1e:cd:e7:55:f6:9c:25:dc:bd:32:
40:75:e4:79:3e:6f:ab:16:c3:59:be:e1:a3:28:86:
6b:ac:df:7c:fa:15:e9:cc:a0:74:7a:64:51:e1:13:
aa:25:05:3b:fb:7b:15:a0:f5:f0:44:91:ee:aa:ca:
0f:43:fc:3f:d4:34:7d:e6:15:35:77:62:24:ac:43:
6f:34:b6:70:ba:b7:3b:6b:b5:82:e4:58:0c:03:f0:
f3:88:e7:50:f8:60:29:7a:17:09:7a:28:94:4e:f2:
7a:87:a4:95:c7:dd:88:bd:f9:72:21:9b:4d:0d:57:
29:b3:7c:67:8c:ca:fb:91:da:a5:98:f9:34:68:6f:
00:e4:4d:99:10:be:97:60:40:fd:1c:50:b4:ec:0a:
6c:06:9b:c1:21:5e:b4:61:d0:04:cf:d0:41:1b:2b:
a3:96:6d:59:c1:bc:bb:ad:83:6f:2e:96:99:da:3c:
58:0b:6a:82:e0:52:62:8d:3d:fa:73:cb:07:6a:35:
00:f6:33:93:28:69:a5:5b:7a:c5:ae:ef:59:15:37:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0E:0D:5D:91:76:7C:87:9A:7B:00:93:17:03:FE:A4:B8:FE:1C:84
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/Kg4NXZF2fIeaewCTFwP-pLj-HIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.0.0/17
82.221.164.0/24
82.221.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:be:09:76:85:5a:8b:0d:fe:98:01:e4:05:2b:b9:38:40:76:
b1:4d:2b:2d:23:44:25:dd:57:3d:58:7e:37:32:d4:f7:aa:c9:
24:46:1b:f5:dc:f6:d1:0e:6e:aa:54:62:4d:31:a8:6f:f2:4e:
57:f4:96:fd:f9:a3:4d:bb:de:11:7c:a0:83:d0:f8:79:70:41:
6c:ac:18:61:eb:ae:b8:c6:ce:43:44:16:2f:9d:dc:e5:1b:08:
6a:f8:38:e8:a8:bc:ab:a5:69:93:37:0b:21:ad:69:f0:a9:5e:
8f:59:60:20:5a:ba:45:b1:46:d5:09:ca:71:34:85:30:01:d4:
5e:3f:05:c9:ec:d8:4a:49:4b:10:2b:65:71:2f:c7:c4:1f:69:
28:0c:50:97:84:44:11:2b:05:c2:09:35:68:1f:ac:66:60:19:
20:0d:55:4f:9b:88:76:75:c3:d7:70:92:8e:1b:1e:71:b5:79:
4a:55:ad:aa:ea:a1:51:b3:f6:38:3d:29:fb:5e:c8:ca:78:81:
bd:76:fa:5c:88:b6:28:f0:5b:17:70:d0:0f:c7:2d:c2:90:2d:
ec:c0:79:77:3e:d8:be:ea:e2:e1:ed:15:e7:63:78:9a:5f:f4:
7c:27:9e:98:45:14:7d:a9:f6:d9:9c:9f:b2:8d:31:8e:06:f4:
64:70:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:47 2023 by rpki-client on console.sobornost.net