Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/uN6xQVpNh3UdmzleLtWp0EU_CE8.roa
File: uN6xQVpNh3UdmzleLtWp0EU_CE8.roa (raw, json)
Hash identifier: I/T/hpVYqyKOuCyDp5DoM0FeC6gmdHKDPUDhXTFTLL4=
Subject key identifier: B8:DE:B1:41:5A:4D:87:75:1D:9B:39:5E:2E:D5:A9:D0:45:3F:08:4F
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 0622A4BB
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/uN6xQVpNh3UdmzleLtWp0EU_CE8.roa
Signing time: Sat 01 Jan 2022 06:56:19 +0000
ROA not before: Sat 01 Jan 2022 06:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44134
IP address blocks: 217.71.0.0/20 maxlen: 20
79.142.224.0/20 maxlen: 20
2a02:2190::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102933691 (0x622a4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Jan 1 06:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8deb1415a4d87751d9b395e2ed5a9d0453f084f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:ee:b7:17:f5:bc:42:26:fd:0d:a9:8f:b5:
e4:be:ab:e1:f1:7e:97:09:10:a6:6c:96:bd:aa:9f:
0d:87:ae:0b:65:0c:6a:4f:fc:5f:06:33:63:20:4a:
2a:b9:ce:a5:89:6a:a5:ee:53:b2:9b:79:10:3b:98:
20:65:8a:88:c2:b1:a6:16:5d:0b:07:d7:c3:2c:d6:
08:d9:51:b7:ae:88:b2:69:5b:fb:c9:cb:0f:42:b0:
32:05:85:36:27:1b:fd:22:90:27:9a:c4:f4:a3:4f:
c9:ca:0e:8c:cf:8c:66:f6:d1:63:ca:ae:49:d5:0b:
2c:62:d4:00:96:45:c8:e5:a7:7f:d6:e0:dd:a3:cd:
75:86:38:b8:40:1c:7f:33:27:e0:37:7f:ec:63:df:
24:10:96:18:8e:0b:89:3b:5a:9e:9f:c4:43:84:64:
49:77:f1:df:00:ba:9c:af:bb:90:f2:00:dd:09:76:
1a:eb:6c:ab:c1:c2:12:c5:f3:62:fd:d6:97:c1:38:
f4:5a:c5:31:ad:bd:02:54:e0:f8:af:de:c4:b3:d3:
24:79:e7:22:e8:ff:21:8e:30:cc:57:77:d6:c7:35:
e7:0e:9f:c1:9c:19:67:64:3e:ee:bc:7f:46:15:21:
0f:59:06:99:7b:fc:2a:02:3e:da:35:7e:77:6d:4a:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DE:B1:41:5A:4D:87:75:1D:9B:39:5E:2E:D5:A9:D0:45:3F:08:4F
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/uN6xQVpNh3UdmzleLtWp0EU_CE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.224.0/20
217.71.0.0/20
IPv6:
2a02:2190::/29
Signature Algorithm: sha256WithRSAEncryption
6d:da:7e:38:76:7f:66:94:06:53:cc:6b:1a:49:87:ed:db:88:
d1:ce:5f:19:b3:bc:48:5d:88:46:19:0c:9d:15:ba:ce:26:3c:
e5:aa:0e:68:f4:55:be:0b:7d:ba:32:ec:32:37:2e:ce:8c:d3:
a9:04:86:ca:68:70:99:6a:4a:d0:8e:45:0b:c0:ac:e7:eb:4d:
7e:df:93:48:d9:d9:8f:4e:d1:2d:91:a4:4b:fd:c6:1a:4b:55:
03:ea:8d:a7:68:30:a9:a5:ac:47:aa:1c:a9:b3:3e:86:a8:9e:
49:49:57:e9:40:6a:17:b6:94:1c:3e:cb:75:ae:2c:74:41:ed:
2d:e3:d2:07:cb:df:d9:62:80:77:6c:33:7f:f4:e9:2f:59:d0:
7f:b5:a8:82:ca:3f:dc:5c:a0:23:8a:7c:fe:2a:d0:2a:58:60:
d9:1d:84:cd:02:e2:c0:31:7a:20:2a:28:51:13:6c:1a:1f:6b:
35:d5:92:7d:57:c3:1b:fc:5f:65:f4:a5:fb:cd:0e:e6:ea:66:
eb:88:73:ce:db:1d:69:c4:d7:87:b6:93:43:17:f9:79:35:93:
06:76:82:39:d0:36:8e:45:68:bb:64:be:52:01:8c:0d:86:b7:
8b:dc:bd:af:70:15:19:eb:3a:b7:6a:1e:63:27:4d:7e:5f:85:
37:0d:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net