Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/en9Xxmb6QVUe2xXT3v6LD8fjoEc.roa
File: en9Xxmb6QVUe2xXT3v6LD8fjoEc.roa (raw, json)
Hash identifier: M1Jjtj5SVazAArkebSjer4Pvw9nD+BrvOkFRaArS0XY=
Subject key identifier: 7A:7F:57:C6:66:FA:41:55:1E:DB:15:D3:DE:FE:8B:0F:C7:E3:A0:47
Certificate issuer: /CN=86497682e9307c4687935008173147d132a28c64
Certificate serial: 02BCFBA8
Authority key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/en9Xxmb6QVUe2xXT3v6LD8fjoEc.roa
Signing time: Sat 01 Jan 2022 01:58:52 +0000
ROA not before: Sat 01 Jan 2022 01:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60782
IP address blocks: 185.74.84.0/22 maxlen: 32
185.97.16.0/22 maxlen: 32
79.139.66.0/24 maxlen: 32
79.139.68.0/22 maxlen: 32
79.139.116.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45939624 (0x2bcfba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86497682e9307c4687935008173147d132a28c64
Validity
Not Before: Jan 1 01:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a7f57c666fa41551edb15d3defe8b0fc7e3a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:65:f3:7f:14:c0:b6:dc:08:ba:5b:06:64:
27:47:fa:ff:ca:31:a7:60:1e:25:1c:a1:f6:a6:4f:
94:e3:48:5e:fd:6d:97:7f:ca:10:aa:35:6b:72:97:
2f:8d:86:53:d7:18:58:66:6e:b6:b8:6b:e6:b2:49:
7b:5f:ea:de:d2:aa:8b:19:0b:2c:43:92:96:91:76:
ea:41:3f:3d:1a:77:64:83:3e:9e:b2:8b:b8:d3:12:
ce:42:10:4b:e0:13:8e:fc:4c:db:b0:68:f8:80:d8:
43:df:3d:7c:f9:a8:8b:ce:f5:55:f0:0c:a7:30:5d:
1d:cc:5a:06:6d:ee:b5:e6:08:b3:26:bb:41:8e:02:
e8:af:fa:1d:42:d6:3d:11:65:aa:9f:83:20:87:e8:
0d:26:d1:af:30:fe:2e:76:ab:f4:da:a4:8a:43:80:
eb:aa:c9:f1:c8:a1:36:06:64:c4:5c:33:3d:99:79:
4c:33:00:c2:5c:46:9f:74:6e:d3:06:2c:be:1d:9f:
f9:fa:ab:e7:23:c3:8e:46:43:bd:89:18:3a:2e:c6:
b1:84:51:37:67:97:fd:d7:5d:49:01:b1:78:d0:ed:
23:8b:15:4a:dc:45:a8:a1:f4:8a:db:4c:58:93:67:
73:7b:8f:8b:ce:73:45:4b:51:cc:ae:29:7d:c0:93:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:57:C6:66:FA:41:55:1E:DB:15:D3:DE:FE:8B:0F:C7:E3:A0:47
X509v3 Authority Key Identifier:
keyid:86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/en9Xxmb6QVUe2xXT3v6LD8fjoEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.66.0/24
79.139.68.0/22
79.139.116.0/22
185.74.84.0/22
185.97.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:93:ca:40:e6:03:4f:5f:ee:a8:06:9b:33:c2:01:ba:46:e0:
32:60:60:fa:b7:16:ef:46:0d:7e:ab:8c:9c:d3:1f:af:ed:1c:
96:93:90:ef:7d:0b:ab:c9:7a:48:d2:01:7c:c3:50:75:d4:28:
9d:9b:ba:79:aa:a3:09:9f:ba:b6:04:cc:88:b0:f9:66:d9:2e:
2c:ec:07:c7:b4:97:6c:24:01:92:35:f6:e7:85:b7:e1:c9:47:
01:a1:be:22:14:d2:a8:1d:8c:9c:50:17:73:93:a4:95:c4:8c:
39:cd:6f:98:7e:72:cd:94:9a:fa:7e:af:61:d2:a3:30:08:ed:
01:01:ba:89:6c:fe:28:01:41:1d:00:c4:56:09:c6:43:38:d2:
e5:97:fb:7f:ef:f0:45:c2:a1:ec:17:1b:b1:1d:e1:4b:37:17:
97:4f:db:d2:00:ab:a5:4b:9b:88:e4:ab:60:88:ab:1b:01:ac:
e4:85:13:55:7b:4c:c5:89:35:da:6b:a0:77:fa:d2:bb:24:a1:
de:b5:eb:23:39:9d:f6:af:90:29:19:60:14:81:f6:c4:8a:b5:
4b:1c:69:d5:0b:24:74:3c:63:d7:85:67:1c:58:bf:36:3b:89:
ed:a7:79:a7:55:f8:84:9a:ff:ac:db:97:d0:8b:cd:aa:40:9b:
4a:3d:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net