Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/u2DTyadZHCQHld5wkGVxGcn0ohU.roa
File: u2DTyadZHCQHld5wkGVxGcn0ohU.roa (raw, json)
Hash identifier: cqcEudbt+RaDqvzLRXEJ2nmDGAYngNhW+Y5/EU3POCg=
Subject key identifier: BB:60:D3:C9:A7:59:1C:24:07:95:DE:70:90:65:71:19:C9:F4:A2:15
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 0C1E96A8
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/u2DTyadZHCQHld5wkGVxGcn0ohU.roa
Signing time: Sat 01 Jan 2022 13:01:28 +0000
ROA not before: Sat 01 Jan 2022 13:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6894
IP address blocks: 95.131.152.0/21 maxlen: 21
195.14.64.0/19 maxlen: 19
195.14.65.0/24 maxlen: 24
2a02:b78::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203331240 (0xc1e96a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Jan 1 13:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb60d3c9a7591c240795de7090657119c9f4a215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:c1:fb:6a:a4:b7:7e:c6:c7:05:eb:2d:11:
6b:e1:8c:4c:d9:a9:cf:19:c2:93:b1:9b:9e:6c:24:
99:3d:0b:7f:bb:09:5c:94:43:a6:ad:4d:e3:56:1e:
10:61:cd:dc:6a:b9:b7:ec:fa:64:2c:1e:fb:7f:8e:
4f:b0:c0:9d:f9:58:38:9e:62:69:98:8e:a8:c0:2b:
7a:d3:cc:ac:06:e8:c0:b9:33:f8:69:15:db:df:31:
53:d0:b3:c8:82:51:55:bb:d5:a1:36:c6:ce:ad:68:
4e:08:9b:48:48:41:bf:c1:32:4c:0e:fd:6e:87:1e:
a9:bc:c3:51:43:a8:63:5e:e0:30:35:9f:00:93:84:
f6:c8:46:c9:69:64:7e:89:97:8d:36:e7:fc:6b:b9:
f9:03:b8:f8:60:79:07:3d:ae:1c:60:09:85:a4:dd:
23:05:e8:fc:73:e5:c6:87:d3:4f:9a:77:db:aa:f6:
fc:4f:52:27:d3:dd:15:70:c5:84:72:85:a4:42:eb:
84:f8:ec:19:97:49:1e:39:a5:df:8f:0c:f9:9e:33:
10:3e:80:ad:88:8c:8e:53:cc:a0:1f:57:f2:7c:a2:
91:4f:df:ab:b9:51:23:a6:2f:18:70:c6:e9:f9:4c:
82:f3:c9:e0:1e:cf:37:00:27:2b:a6:d3:56:8a:b2:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:D3:C9:A7:59:1C:24:07:95:DE:70:90:65:71:19:C9:F4:A2:15
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/u2DTyadZHCQHld5wkGVxGcn0ohU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.152.0/21
195.14.64.0/19
IPv6:
2a02:b78::/32
Signature Algorithm: sha256WithRSAEncryption
ab:9c:d7:05:6e:1a:32:6d:df:4e:11:88:c3:ce:2c:43:ef:32:
95:31:7c:0b:e1:08:7f:de:d3:32:7f:72:2e:0e:4c:01:e7:7f:
c1:b0:3f:47:eb:6b:2a:25:1d:fe:ba:82:9e:d6:be:31:7f:3b:
3b:9b:86:7e:87:a5:74:6b:c5:9f:7e:17:e9:0c:6c:71:a0:e9:
e9:72:67:9e:30:13:b1:5c:6d:b4:15:bb:ec:1c:26:e3:21:dc:
ad:aa:47:52:de:30:f2:84:74:66:7f:2d:26:cb:8d:f1:a1:1f:
b4:69:df:c3:3a:f3:48:2d:15:a5:02:0e:89:67:b7:44:7e:e2:
d6:84:25:ca:58:e1:b3:92:18:47:d2:2b:d1:d9:f3:5f:0f:0d:
13:61:53:0f:d4:8f:70:49:d2:c5:a2:37:b2:11:86:cf:36:20:
25:01:e6:d3:9a:ff:9a:1e:a8:cb:27:f5:74:dc:9b:b2:9d:1e:
fc:82:d1:e2:96:74:f5:26:39:48:2a:2c:61:17:94:c8:1e:bd:
55:9c:ca:b9:c7:6d:1a:86:31:69:4c:00:9e:d1:1a:67:be:05:
c8:fb:06:a2:e0:ac:85:1e:e2:ca:7c:7b:11:69:05:ac:64:d5:
a2:4c:8e:ed:72:4b:15:19:4b:74:2c:69:9e:37:af:75:91:c2:
2c:e6:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net