Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/FeOtdbCLiwLLz5sNmNWbW182JpA.roa
File: FeOtdbCLiwLLz5sNmNWbW182JpA.roa (raw, json)
Hash identifier: N1XNsJ9fSVhYshPyKzuNnMrijyLkyR7dAajJZDV4zu4=
Subject key identifier: 15:E3:AD:75:B0:8B:8B:02:CB:CF:9B:0D:98:D5:9B:5B:5F:36:26:90
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01850BE7B9FC9FB8C035A467B3CC5D5557FC
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/FeOtdbCLiwLLz5sNmNWbW182JpA.roa
Signing time: Tue 13 Dec 2022 14:33:33 +0000
ROA not before: Tue 13 Dec 2022 14:33:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:e881:73ff::/48 maxlen: 48
2a06:e881:650f::/48 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:9300::/44 maxlen: 48
2a06:e881:9700::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:e7:b9:fc:9f:b8:c0:35:a4:67:b3:cc:5d:55:57:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Dec 13 14:33:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15e3ad75b08b8b02cbcf9b0d98d59b5b5f362690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:37:db:b1:6e:f4:86:e4:83:d3:75:13:0b:
8d:55:b9:97:2a:fc:13:6e:0b:17:0b:d4:24:2e:e6:
6d:ee:0d:7e:2d:96:27:bb:2d:89:47:f2:54:87:fe:
5a:30:3b:da:63:48:50:9a:86:cb:ee:bf:3e:05:4f:
f7:d4:5f:5b:5c:84:91:2c:96:e2:3c:e8:a6:d8:74:
48:d1:a0:20:16:1a:85:66:e6:ec:d3:30:14:28:99:
f9:da:e0:05:26:93:38:8a:58:cc:fd:97:b1:14:04:
67:6c:d8:ad:2e:88:62:f6:81:cb:df:ab:a6:f6:af:
08:96:95:c7:02:8e:71:16:43:a5:43:c6:dc:48:d1:
55:eb:c8:fa:b2:fe:b9:df:05:9e:86:87:40:fa:a6:
3f:7e:5d:2d:d1:c4:9c:f0:14:63:70:03:b9:e0:fa:
0b:60:6b:ab:c9:95:e8:ba:09:20:5a:a1:cd:be:d2:
d0:7e:76:b6:74:6f:12:62:a4:bd:4b:b4:f1:63:4d:
38:cc:53:e4:dc:b9:e2:4e:29:8c:e5:6b:e3:c5:93:
9e:d5:a1:9a:71:f8:6c:1e:b8:8d:9b:7d:8a:00:a2:
57:f5:da:82:4a:6c:34:a0:86:14:01:6e:de:d5:58:
2d:3b:ad:cc:64:76:4a:99:ae:18:6b:1b:2d:c6:81:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:AD:75:B0:8B:8B:02:CB:CF:9B:0D:98:D5:9B:5B:5F:36:26:90
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/FeOtdbCLiwLLz5sNmNWbW182JpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:650f::/48
2a06:e881:73ff::/48
2a06:e881:9200::/45
2a06:e881:9300::/44
2a06:e881:9700::/44
Signature Algorithm: sha256WithRSAEncryption
9e:29:30:65:5a:c0:0a:d1:0a:68:b8:01:26:6b:30:b2:f6:65:
9a:89:f3:77:d7:0f:b7:a2:67:45:4c:90:b0:88:14:b8:4d:ee:
ea:5e:b2:f8:89:c8:18:3e:fc:45:0f:ef:e3:79:02:c6:6d:89:
6c:37:14:f3:d6:2f:25:67:26:d8:f1:1a:c2:07:2c:57:08:a1:
29:ae:62:d2:7f:62:85:99:7e:31:fa:a0:ac:b4:79:5f:b0:12:
35:e2:bb:33:88:c6:7d:f7:f5:8c:af:5a:ad:ca:c2:15:f5:26:
a7:14:e1:2b:bd:ba:ea:d9:97:01:a4:b8:f0:2e:0b:64:68:72:
a8:26:28:de:cd:fd:f3:46:83:f7:2e:64:d8:eb:df:7c:51:ea:
02:c3:63:26:08:22:75:d5:cc:59:34:15:bb:c1:60:47:66:a0:
c7:8c:45:4b:bd:46:f8:36:d7:59:a7:e8:ea:cb:35:0b:1e:c4:
37:cd:f1:6c:3e:63:b6:13:65:41:2d:2d:e7:84:06:62:85:99:
57:d5:d8:3d:81:9b:33:cd:76:68:de:c7:0e:3e:6e:ec:06:4c:
dc:06:dc:f5:68:26:97:03:86:24:66:6e:f1:fa:da:9e:28:bc:
15:63:83:30:2e:57:b4:25:6b:64:59:91:4e:f4:ee:2b:12:e5:
30:2c:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:40 2023 by rpki-client on console.sobornost.net