Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/7R5tz1AP2worPUYSHzUgHXQz3gY.roa
File: 7R5tz1AP2worPUYSHzUgHXQz3gY.roa (raw, json)
Hash identifier: CIBEmxLZ9QovlImwZgz/t2i87oZv2dyMhDzlJzUqmr0=
Subject key identifier: ED:1E:6D:CF:50:0F:DB:0A:2B:3D:46:12:1F:35:20:1D:74:33:DE:06
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 01387243
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/7R5tz1AP2worPUYSHzUgHXQz3gY.roa
Signing time: Sat 01 Jan 2022 10:01:11 +0000
ROA not before: Sat 01 Jan 2022 10:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44539
IP address blocks: 212.66.32.0/20 maxlen: 24
212.66.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20476483 (0x1387243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jan 1 10:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed1e6dcf500fdb0a2b3d46121f35201d7433de06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:67:45:6f:b4:36:2f:58:2e:78:b1:76:4b:
bd:6e:78:d0:b1:94:ad:d8:f4:4c:d4:a2:4d:de:11:
2b:44:f1:05:b2:e5:8c:10:e7:03:c5:6e:f3:0f:8c:
1e:1c:5e:9a:d4:6b:52:ca:c0:f0:88:95:6a:e5:a9:
a4:18:f7:64:53:8b:45:65:3a:07:0c:bb:f2:9c:31:
61:8b:23:b5:d6:73:77:3f:e7:df:39:9a:46:00:e4:
37:30:2f:28:d4:18:a7:7c:ca:2f:57:58:60:2e:d6:
64:3d:52:f3:f3:07:02:98:45:b6:67:85:9e:2f:5a:
b0:15:56:71:39:84:8e:80:d6:38:d7:0e:59:29:3b:
05:48:29:32:b6:30:5d:99:38:7f:5e:60:2c:ad:04:
f8:4c:14:2b:e1:3f:36:e5:c9:b5:4a:fe:a6:bb:48:
0e:47:20:b7:db:31:76:e7:f2:9e:e0:f8:0d:cf:ff:
d4:bb:54:89:24:6b:1b:96:4d:03:c7:8e:20:43:a9:
fb:0d:d6:fd:ce:41:ab:02:cb:56:35:97:06:db:37:
90:57:1e:83:2c:42:f2:2c:b9:e8:d2:8e:eb:54:1a:
6a:6d:0c:ee:88:7a:23:1e:07:07:21:e1:60:69:c5:
4b:88:b4:04:42:fd:b7:7c:61:dd:77:32:f6:52:3e:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1E:6D:CF:50:0F:DB:0A:2B:3D:46:12:1F:35:20:1D:74:33:DE:06
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/7R5tz1AP2worPUYSHzUgHXQz3gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.32.0/20
212.66.56.0/21
Signature Algorithm: sha256WithRSAEncryption
54:eb:0d:05:de:bd:07:63:70:10:2e:ae:69:a7:4b:d3:40:30:
7d:2d:23:a8:6c:e1:cf:02:e1:17:5c:1e:fb:67:1e:13:3f:aa:
59:da:3d:15:e5:3a:47:9e:11:78:ad:b9:ad:3e:75:85:ce:f3:
30:8f:fc:f2:cc:ca:fd:a8:63:ff:75:eb:fe:81:16:af:2c:8d:
50:54:96:00:4f:06:b3:98:53:13:f9:27:34:d7:ec:fb:bd:61:
fb:4a:76:ce:d7:72:54:c8:ac:f9:2d:97:05:de:23:88:cb:ac:
47:23:39:71:4d:1d:8e:bf:94:f9:f1:7e:96:81:aa:5f:0f:fc:
b9:e2:9a:3a:2b:ac:7c:92:12:bb:3f:35:ba:b6:f5:e9:b9:57:
5a:67:26:b1:be:01:be:8c:83:0e:1a:c2:84:0f:0e:f1:46:82:
47:75:4d:6e:78:79:42:02:5a:db:01:04:7f:99:be:8c:54:bc:
68:75:25:ec:91:92:47:f7:81:94:d9:87:28:b2:c0:39:ba:a8:
26:0a:30:32:aa:e2:56:78:02:76:44:08:e7:f5:fb:67:d6:d2:
68:4b:c1:6c:ad:e6:d2:22:de:df:9b:cd:dc:67:2e:59:72:3c:
16:e0:8a:cc:96:35:9f:2d:e7:82:5a:24:a5:5c:8a:aa:b3:c0:
2e:d0:70:3f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAThyQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Mzc4N2QyYmU2ZWFjMzZjMWQyNzgwZjc4NmI4N2M5ZTE1M2U4MWYxMB4XDTIyMDEw
MTEwMDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQxZTZkY2Y1MDBm
ZGIwYTJiM2Q0NjEyMWYzNTIwMWQ3NDMzZGUwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyoZ0VvtDYvWC54sXZLvW540LGUrdj0TNSiTd4RK0TxBbLl
jBDnA8Vu8w+MHhxemtRrUsrA8IiVauWppBj3ZFOLRWU6Bwy78pwxYYsjtdZzdz/n
3zmaRgDkNzAvKNQYp3zKL1dYYC7WZD1S8/MHAphFtmeFni9asBVWcTmEjoDWONcO
WSk7BUgpMrYwXZk4f15gLK0E+EwUK+E/NuXJtUr+prtIDkcgt9sxdufynuD4Dc//
1LtUiSRrG5ZNA8eOIEOp+w3W/c5BqwLLVjWXBts3kFcegyxC8iy56NKO61Qaam0M
7oh6Ix4HByHhYGnFS4i0BEL9t3xh3Xcy9lI+lUkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTtHm3PUA/bCis9RhIfNSAddDPeBjAfBgNVHSMEGDAWgBSjeH0r5urDbB0n
gPeGuHyeFT6B8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L28zaDlLLWJxdzJ3ZEo0RDNocmg4bmhVLWdmRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWEvZjU2NWQ3LTMyYWYtNGJlMS04MmFjLWI2MDJjZWRhYzM2Yy8x
LzdSNXR6MUFQMndvclBVWVNIelVnSFhRejNnWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEv
ZjU2NWQ3LTMyYWYtNGJlMS04MmFjLWI2MDJjZWRhYzM2Yy8xL28zaDlLLWJxdzJ3
ZEo0RDNocmg4bmhVLWdmRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBNRCIAMEA9RCODANBgkqhkiG9w0B
AQsFAAOCAQEAVOsNBd69B2NwEC6uaadL00AwfS0jqGzhzwLhF1we+2ceEz+qWdo9
FeU6R54ReK25rT51hc7zMI/88szK/ahj/3Xr/oEWryyNUFSWAE8Gs5hTE/knNNfs
+71h+0p2ztdyVMis+S2XBd4jiMusRyM5cU0djr+U+fF+loGqXw/8ueKaOiusfJIS
uz81urb16blXWmcmsb4BvoyDDhrChA8O8UaCR3VNbnh5QgJa2wEEf5m+jFS8aHUl
7JGSR/eBlNmHKLLAObqoJgowMqriVngCdkQI5/X7Z9bSaEvBbK3m0iLe35vN3Gcu
WXI8FuCKzJY1ny3nglokpVyKqrPALtBwPw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net