Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/mPQuMkUF0j69V-fhTzIVObKm4Es.roa
File: mPQuMkUF0j69V-fhTzIVObKm4Es.roa (raw, json)
Hash identifier: qyxmAaKFaGGuQvSXA6jYe7Xn6WQ52Xc7rgTXVfDqXl8=
Subject key identifier: 98:F4:2E:32:45:05:D2:3E:BD:57:E7:E1:4F:32:15:39:B2:A6:E0:4B
Certificate issuer: /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial: 0A983759
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/mPQuMkUF0j69V-fhTzIVObKm4Es.roa
Signing time: Fri 01 Apr 2022 18:32:09 +0000
ROA not before: Fri 01 Apr 2022 18:32:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35710
IP address blocks: 193.111.100.0/22 maxlen: 24
45.84.34.0/24 maxlen: 24
45.84.33.0/24 maxlen: 24
45.84.32.0/24 maxlen: 24
91.132.200.0/22 maxlen: 24
2a12:13c0::/29 maxlen: 32
2a09:d180::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177747801 (0xa983759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Validity
Not Before: Apr 1 18:32:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98f42e324505d23ebd57e7e14f321539b2a6e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:10:e4:a4:db:04:20:68:2b:2f:6f:ae:64:
93:91:0f:b3:e8:b2:e1:49:73:28:91:dd:94:aa:db:
46:5c:6e:d6:56:e5:ed:2c:33:fc:a3:43:ec:ef:3c:
3f:8c:da:20:62:52:9e:cf:20:99:7e:39:cd:ca:69:
71:82:39:94:40:f4:b9:83:e8:3b:78:f3:70:0b:af:
c8:83:61:4a:b0:a2:56:06:5d:38:ec:f8:63:2f:47:
9d:10:30:3f:01:7e:1d:10:2e:75:b4:39:12:12:a6:
83:c3:9b:e5:9f:a7:de:db:58:43:a9:28:0c:66:de:
2d:5f:1b:4c:2a:35:53:01:72:95:9a:a7:6a:a8:a7:
6e:8e:aa:8b:35:8e:84:61:77:eb:10:a7:9e:3a:3b:
11:d4:9e:67:1a:2d:65:17:58:4b:79:e4:9a:94:ea:
e4:dc:05:09:78:b8:25:2c:0e:59:2d:06:e5:72:c4:
66:2c:40:e1:88:b1:41:f2:a3:8c:fe:d3:3e:99:fe:
55:9d:19:54:76:6e:36:6c:76:05:79:5b:d7:9a:98:
27:ca:25:b8:8e:fa:14:b3:fe:38:d0:11:a3:e9:eb:
22:5d:66:43:ae:de:cb:c1:b5:54:82:9e:eb:63:b3:
a8:e7:3e:17:1e:d8:36:89:05:81:d9:72:d8:d3:41:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:2E:32:45:05:D2:3E:BD:57:E7:E1:4F:32:15:39:B2:A6:E0:4B
X509v3 Authority Key Identifier:
keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/mPQuMkUF0j69V-fhTzIVObKm4Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.32.0-45.84.34.255
91.132.200.0/22
193.111.100.0/22
IPv6:
2a09:d180::/29
2a12:13c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:f6:4c:50:07:98:8b:89:68:0e:42:3e:96:91:d8:78:52:5f:
ed:65:7e:23:c3:07:6c:25:62:83:89:ff:b5:30:60:51:47:9a:
06:8b:73:97:ec:c8:7e:a1:21:df:90:28:ee:60:b3:aa:c2:60:
f7:d4:36:8f:34:0c:43:f5:9e:71:66:13:d4:4e:ff:eb:17:78:
1a:61:e4:c8:4d:6f:35:93:fe:ba:c8:c0:aa:ac:b5:06:93:37:
d8:8b:33:20:c9:b1:3b:1e:97:76:f5:4a:35:9b:c1:94:21:37:
f9:bd:68:b3:67:b7:4a:67:11:bc:cc:c0:92:87:54:e8:5a:68:
51:3e:33:36:87:d0:9a:1c:cf:0c:4e:ae:7d:15:18:7b:9e:62:
01:7a:0f:df:61:6a:2d:5d:61:3c:f7:e4:d7:f2:ae:91:3a:1c:
75:d8:57:d3:fc:33:5f:c1:f3:8c:1c:34:4a:5e:66:78:4c:49:
96:d5:ea:53:62:7c:38:83:02:c8:a1:fc:a4:6b:71:63:78:fd:
c9:81:42:f9:90:46:23:71:26:97:47:52:fa:d7:f8:5d:b8:74:
71:43:ca:ad:7c:d0:c6:04:b3:3d:62:7a:cf:46:b2:24:af:95:
cb:4e:23:94:62:b5:5a:02:c3:57:74:bf:46:87:ae:85:ea:cc:
41:95:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:36 2023 by rpki-client on console.sobornost.net