Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7_9P8A9LF67zvKftZGb-kZDt7sk.roa
File: 7_9P8A9LF67zvKftZGb-kZDt7sk.roa (raw, json)
Hash identifier: W+3zYiZaae7OxOAvcGsFKkAMNVvvU0HdrawN8h6pN9M=
Subject key identifier: EF:FF:4F:F0:0F:4B:17:AE:F3:BC:A7:ED:64:66:FE:91:90:ED:EE:C9
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01850BE7BAB600F2214A5C027A1A2CC1871A
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7_9P8A9LF67zvKftZGb-kZDt7sk.roa
Signing time: Tue 13 Dec 2022 14:33:34 +0000
ROA not before: Tue 13 Dec 2022 14:33:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:e881:73ef::/48 maxlen: 48
2a06:e881:73ff::/48 maxlen: 48
2a06:e881:650f::/48 maxlen: 48
2a06:e881:9208::/45 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:9700::/44 maxlen: 44
2a06:e881:9300::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:e7:ba:b6:00:f2:21:4a:5c:02:7a:1a:2c:c1:87:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Dec 13 14:33:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efff4ff00f4b17aef3bca7ed6466fe9190edeec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:95:5f:a3:67:b4:57:41:96:db:28:10:e0:
47:53:a6:f4:80:d1:bd:34:ed:8c:f7:69:5c:fb:01:
a2:e6:67:b1:ac:96:46:c2:41:ce:89:c9:42:4b:83:
25:16:c6:ad:31:76:84:e1:fa:5b:75:22:77:54:7b:
c4:c5:87:fa:8d:9d:50:0c:1e:c2:4a:de:14:c4:53:
de:86:b4:e0:64:a0:db:45:23:7d:d8:ff:23:25:19:
55:1d:df:fd:b5:eb:31:b8:df:ef:dd:af:2a:c1:8f:
52:ca:d4:93:6f:c3:b0:2b:f2:79:cd:a9:2a:36:f8:
97:33:ff:8a:9c:48:98:22:1f:fa:56:2a:60:dd:9a:
d5:83:6d:e7:eb:32:47:5c:75:52:95:0f:e7:ea:39:
8a:06:ed:f6:40:75:ee:cf:69:05:e2:d7:74:7e:f8:
b0:73:f8:9b:5b:3e:5c:bc:d1:7f:9b:8b:d0:12:13:
ed:ce:bc:c3:de:f3:58:d7:83:27:67:90:25:2c:64:
16:fc:e1:50:07:4a:0e:2d:2f:8a:08:df:f7:ef:2b:
13:19:58:28:65:1b:48:50:87:0b:39:22:d9:2f:61:
b3:bf:f4:73:66:69:99:f9:98:fb:4e:95:09:c3:d2:
87:37:e7:11:35:b5:11:da:16:62:7a:c4:fb:0e:06:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:4F:F0:0F:4B:17:AE:F3:BC:A7:ED:64:66:FE:91:90:ED:EE:C9
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7_9P8A9LF67zvKftZGb-kZDt7sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:650f::/48
2a06:e881:73ef::/48
2a06:e881:73ff::/48
2a06:e881:9200::/44
2a06:e881:9300::/44
2a06:e881:9700::/44
Signature Algorithm: sha256WithRSAEncryption
1c:16:84:e5:fa:33:f2:7e:33:4a:cb:5b:37:a9:15:62:4b:e7:
ca:3c:f3:b3:e7:5f:6e:76:86:1f:90:c4:8e:34:3c:92:00:1e:
c9:c8:e9:cd:58:2e:a3:0f:39:e2:27:93:67:80:7b:92:56:a9:
7b:5f:6b:fb:50:45:35:0a:d0:d6:1e:1d:cd:8e:2e:d3:ba:51:
de:1a:ef:d2:2e:ff:98:f2:eb:87:2b:df:86:5e:b8:38:60:8f:
07:bf:06:89:d1:7a:9b:1e:17:b9:d7:5f:71:72:78:4e:7f:11:
27:18:b9:4f:00:2d:c6:fd:c0:f3:fd:a2:f0:30:b6:33:c6:9d:
f2:6c:3e:d7:51:c9:93:18:ee:3e:3e:41:93:7c:27:e5:a9:a4:
a5:9a:2b:62:90:1d:5a:f8:49:fb:75:61:0b:4e:e0:08:b5:90:
46:3d:0a:c0:d4:6c:16:70:09:d6:58:45:fe:77:60:01:e4:fa:
0d:e8:26:9e:b8:45:e0:7d:eb:46:d4:f3:25:b6:c3:2e:28:cc:
20:38:41:ba:52:21:43:af:f2:a1:56:27:3e:22:db:52:b3:b1:
02:0b:b8:b5:b2:7a:a0:4a:36:18:ab:de:27:fd:aa:0e:87:cd:
5a:a0:b5:22:85:0b:61:61:cd:b8:70:36:62:d6:e7:58:ca:20:
ce:72:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:40 2023 by rpki-client on console.sobornost.net