Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/fjzx0cH_213NIrP3iwLmMzK7218.roa
File: fjzx0cH_213NIrP3iwLmMzK7218.roa (raw, json)
Hash identifier: o2kVfPOy2rWkeRtv7QxPjvOdB1e+7+u1OA8Z8nygoR0=
Subject key identifier: 7E:3C:F1:D1:C1:FF:DB:5D:CD:22:B3:F7:8B:02:E6:33:32:BB:DB:5F
Certificate issuer: /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial: 0AB7BBD1
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/fjzx0cH_213NIrP3iwLmMzK7218.roa
Signing time: Fri 15 Apr 2022 17:57:38 +0000
ROA not before: Fri 15 Apr 2022 17:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35710
IP address blocks: 193.111.100.0/22 maxlen: 24
45.84.34.0/24 maxlen: 24
45.84.33.0/24 maxlen: 24
45.84.32.0/24 maxlen: 24
91.132.200.0/22 maxlen: 24
2a12:13c0::/29 maxlen: 32
2a09:d180::/29 maxlen: 32
2a0e:9580::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179813329 (0xab7bbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Validity
Not Before: Apr 15 17:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e3cf1d1c1ffdb5dcd22b3f78b02e63332bbdb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:73:5e:43:34:4d:44:60:78:cf:fb:81:36:
06:7c:67:cd:60:78:9c:24:a1:b2:ea:fe:84:a2:c6:
40:e7:99:6d:93:68:5d:ee:fa:bd:8c:67:43:b7:89:
3e:f0:94:7f:86:7b:59:db:ba:d3:23:83:d3:c5:2b:
74:f6:bc:0b:b3:ae:bf:c4:9f:a2:e8:c7:37:e3:2a:
62:9a:17:02:1a:45:6c:a0:a2:62:e9:1b:df:f8:0e:
b4:ea:62:62:f3:1c:c7:70:f6:95:48:5e:6e:67:fc:
56:14:71:c8:1c:15:05:62:96:32:09:03:be:8e:d3:
ef:29:82:9c:7e:35:09:d3:89:a2:76:63:9b:65:e6:
84:b6:5e:67:58:87:08:ff:29:9a:2b:e2:6e:0e:b6:
07:df:12:fb:5c:1a:a8:fb:8e:b2:c8:f4:74:c7:1c:
38:c8:ae:0a:c5:8f:43:96:9b:b4:00:e9:f9:f0:ca:
ba:20:47:b9:71:2c:61:6b:d9:fb:e5:51:20:d2:ff:
cb:50:9c:dd:bc:bd:9e:67:11:6e:fa:6b:f5:20:b1:
20:65:0d:41:5c:eb:59:1b:b7:f3:c8:13:5d:80:58:
dc:34:28:d0:30:37:3b:76:40:88:aa:43:2a:9c:03:
d2:9b:90:02:ec:7a:22:c5:af:be:80:0c:d4:9a:ba:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:F1:D1:C1:FF:DB:5D:CD:22:B3:F7:8B:02:E6:33:32:BB:DB:5F
X509v3 Authority Key Identifier:
keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/fjzx0cH_213NIrP3iwLmMzK7218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.32.0-45.84.34.255
91.132.200.0/22
193.111.100.0/22
IPv6:
2a09:d180::/29
2a0e:9580::/29
2a12:13c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:93:2a:18:df:dc:95:4d:ed:91:f3:d5:8e:94:22:09:ab:41:
d4:83:14:de:eb:f0:2e:52:ba:2b:71:d5:cc:0f:7d:8e:f9:c8:
e7:27:53:a0:02:ad:f9:39:a8:27:0b:e8:47:51:8c:52:9c:08:
50:36:17:7c:7e:00:96:f6:d4:dd:43:04:19:7d:72:fd:c4:24:
38:d0:a2:07:e6:3a:b3:36:7a:c1:e1:ae:4a:e0:6c:55:c7:2f:
cf:e0:07:3f:cd:e3:cb:c5:6e:0d:19:02:c9:60:56:f1:12:4d:
b1:19:63:4c:08:4c:2c:17:84:16:3d:20:e1:10:71:00:23:02:
df:06:f1:d0:70:ef:49:28:40:48:64:10:50:85:03:48:a9:4e:
cc:15:f6:67:93:cc:4c:88:a0:1d:83:5e:b1:93:8a:d7:ad:2f:
8f:59:6d:57:6d:8e:4a:7f:2e:71:ed:78:63:f4:b6:2b:33:23:
72:22:aa:7b:ad:5f:cc:4d:14:87:54:0c:c5:5d:b7:bd:50:02:
6a:7d:79:f8:0f:57:10:0e:f0:4c:bd:2c:46:cf:71:b9:15:18:
bd:76:85:d8:f6:ec:44:5a:73:37:d4:6f:57:61:ae:0f:32:1b:
f9:13:c6:ea:2b:97:75:42:0e:bd:4a:36:b8:64:a9:e0:3c:59:
d5:f4:a3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:36 2023 by rpki-client on console.sobornost.net