Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/izj9t4LGBRMy9UkH4nD9DB-GdSE.roa
File: izj9t4LGBRMy9UkH4nD9DB-GdSE.roa (raw, json)
Hash identifier: PG6nCrvjplceBofUzVpvyExoDaYV9kYkrRCla9CblQ0=
Subject key identifier: 8B:38:FD:B7:82:C6:05:13:32:F5:49:07:E2:70:FD:0C:1F:86:75:21
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 0184E23EAAEA86A3093B4F872E3AE5AC3F73
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/izj9t4LGBRMy9UkH4nD9DB-GdSE.roa
Signing time: Mon 05 Dec 2022 12:24:28 +0000
ROA not before: Mon 05 Dec 2022 12:24:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 193.178.44.0/22 maxlen: 22
45.94.100.0/22 maxlen: 22
2a12:b840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3e:aa:ea:86:a3:09:3b:4f:87:2e:3a:e5:ac:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Dec 5 12:24:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b38fdb782c6051332f54907e270fd0c1f867521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:9a:b3:70:c7:64:6c:ca:1b:df:2a:fa:a0:
1b:21:88:54:2e:17:b8:cf:ed:9f:04:60:b7:01:4d:
8b:4b:2f:65:4e:84:4f:c3:a7:25:1e:f9:9d:c1:5a:
87:9c:52:0e:b0:ed:55:24:0a:3e:bd:aa:7e:8c:9c:
74:67:e3:5e:19:35:cf:ad:6a:a4:d4:f8:70:a9:1d:
4d:fe:2f:1f:b6:ca:d7:fb:c8:f9:6a:f7:a4:c5:50:
41:16:04:53:6b:54:2c:7b:13:d3:a0:be:1c:9d:a0:
fb:36:54:17:76:81:d0:cb:70:e6:87:0b:ad:d3:99:
4a:d4:92:38:48:a9:c0:1a:12:55:ca:73:43:09:56:
9d:40:18:5a:e2:c6:38:c7:ca:d9:f5:bb:3e:2c:bd:
a2:fe:70:54:37:40:9f:26:cb:11:75:43:b0:61:a2:
2b:60:35:a3:d5:a3:34:04:8e:3d:22:9e:52:ff:fa:
63:3c:c8:f6:a8:32:6b:3f:a4:b8:62:03:64:64:25:
ec:ba:1b:27:85:0e:da:be:e2:87:8a:6b:30:80:ed:
17:b3:63:0c:37:dd:bb:4c:73:3c:57:4d:bf:2f:fe:
67:07:68:87:a6:f3:81:b3:83:41:cc:7e:56:73:8c:
40:64:ec:22:4e:c5:85:0b:bf:22:02:a6:f9:88:ab:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:38:FD:B7:82:C6:05:13:32:F5:49:07:E2:70:FD:0C:1F:86:75:21
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/izj9t4LGBRMy9UkH4nD9DB-GdSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0/22
193.178.44.0/22
IPv6:
2a12:b840::/32
Signature Algorithm: sha256WithRSAEncryption
2e:c1:b9:2f:8c:e7:58:1c:9b:0e:4f:51:d2:4e:ad:07:42:72:
68:a4:d9:58:3a:03:dc:91:ee:4d:05:c6:fe:a5:70:eb:80:44:
89:b3:15:59:1b:b8:f1:b1:0f:37:fb:b8:0f:6b:bc:27:2a:15:
6b:21:c6:2f:6c:a9:3c:52:9a:2c:98:43:9a:34:fd:f2:56:af:
29:42:d3:6e:f3:c0:b6:1d:06:5f:f9:8e:b4:0e:42:5c:81:e4:
ba:bf:54:66:88:5f:5b:64:40:c3:91:c0:7d:91:e3:44:41:89:
f1:f4:ae:de:4a:a2:15:d6:7d:55:98:1a:28:0a:10:86:ec:f5:
84:4e:c5:c0:63:31:9a:3d:b7:dc:8e:80:47:78:e9:62:cb:bc:
55:14:bc:42:57:56:4d:58:67:89:40:a4:63:c1:d8:63:4f:66:
db:8e:d9:ee:aa:25:d4:12:7e:8d:be:fe:53:86:c4:0f:2d:58:
af:b1:10:ea:ec:34:90:45:2b:61:da:bd:3f:b5:31:46:a0:73:
1a:fe:5e:6f:19:36:4f:22:7e:df:9b:46:3e:69:35:f9:d0:70:
7c:7e:ae:61:66:8a:86:47:c0:05:b5:b1:50:50:44:5c:67:d1:
3d:cf:f8:7c:8c:94:2d:11:3d:8d:e7:65:f5:4c:8a:48:f4:2b:
28:67:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:14 2023 by rpki-client on console.sobornost.net