Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/8yhnl6FpMWzf3WFDY2WJB8v8vw0.roa
File: 8yhnl6FpMWzf3WFDY2WJB8v8vw0.roa (raw, json)
Hash identifier: f5bCELqdT3qPEP04FRh6xz9LAKvkoY0BtsqnxLzohzo=
Subject key identifier: F3:28:67:97:A1:69:31:6C:DF:DD:61:43:63:65:89:07:CB:FC:BF:0D
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 076A4F70
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/8yhnl6FpMWzf3WFDY2WJB8v8vw0.roa
Signing time: Sat 01 Jan 2022 10:58:14 +0000
ROA not before: Sat 01 Jan 2022 10:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51093
IP address blocks: 185.108.16.0/24 maxlen: 24
212.48.224.0/22 maxlen: 24
212.48.232.0/24 maxlen: 24
2a06:300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124407664 (0x76a4f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 10:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3286797a169316cdfdd614363658907cbfcbf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:c2:ec:0c:5b:35:b9:89:6f:68:e3:12:3c:
10:be:85:d1:20:4f:c8:88:7b:66:a3:32:fc:1f:6c:
10:4e:56:d3:ed:e1:ef:fc:e9:fd:f6:d7:7d:bc:83:
d0:e4:b0:d9:2c:8e:da:49:65:a5:77:97:07:1d:04:
73:4c:2a:6f:4f:2e:8f:8b:b1:59:62:ab:c9:94:79:
ac:c5:61:ee:85:84:18:2f:a7:58:94:d0:69:19:92:
83:5b:85:41:07:72:ea:f0:6f:c9:20:76:de:f2:f9:
fe:46:12:0f:4e:50:4b:16:d8:fc:65:53:c9:53:9a:
ec:08:c8:70:cd:6b:55:1e:45:ce:d2:9a:04:66:6e:
9a:fb:77:60:ce:e0:7f:cb:ad:6e:f1:6c:32:d4:16:
de:2c:46:35:d0:40:04:29:ca:70:f0:85:98:8f:58:
53:b1:a1:5d:64:a4:9f:f4:0b:cb:ac:ec:cc:51:0c:
ce:aa:54:5e:70:d3:2f:bd:9c:54:c7:6a:62:2b:6e:
5f:26:b7:ab:3c:b0:da:2f:fa:09:78:56:40:d4:2a:
af:b5:39:fa:af:91:a5:81:e2:39:3d:ac:b7:c0:81:
1d:cf:d6:ae:ea:62:e8:99:1e:ad:71:b7:72:92:1e:
7d:db:1a:89:de:3a:1a:2b:ed:30:a2:28:81:2d:e9:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:67:97:A1:69:31:6C:DF:DD:61:43:63:65:89:07:CB:FC:BF:0D
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/8yhnl6FpMWzf3WFDY2WJB8v8vw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.16.0/24
212.48.224.0/22
212.48.232.0/24
IPv6:
2a06:300::/29
Signature Algorithm: sha256WithRSAEncryption
57:51:bf:ca:e8:58:88:fa:a4:fa:f7:19:b6:9e:6b:a4:2d:26:
72:35:1a:f8:f3:b9:c7:70:a2:58:4f:23:1c:1c:0b:58:01:c3:
ff:4b:2e:3c:fe:7d:dc:c3:ca:3b:44:b3:f4:1f:b6:56:51:d6:
21:d0:9d:c9:da:05:68:f9:41:2f:60:e5:21:6a:01:4f:94:d2:
c8:39:9e:8b:02:15:f0:96:82:3d:a9:05:93:f4:ef:c5:69:a9:
8a:05:36:68:05:37:49:60:3f:41:d3:b3:f9:51:0f:b6:ce:cc:
29:a8:c4:d7:d5:b1:f2:e8:67:8c:a6:ee:68:01:13:66:d5:ec:
16:32:30:87:75:60:ca:33:ac:65:67:eb:24:ff:fa:3b:20:be:
c3:fa:bb:b9:55:1a:97:80:dc:bb:d0:d8:21:49:cd:d9:7a:87:
7d:18:71:4d:f8:68:58:fb:a7:c2:9e:55:c0:6f:4d:d2:c8:1e:
45:20:28:e6:6b:7f:60:ec:b4:1d:d8:09:c6:76:e8:26:97:38:
23:e6:4d:90:5d:20:07:05:9e:31:31:f2:bb:52:85:45:e5:47:
11:3b:3f:ce:bb:f9:fb:9c:32:52:51:ec:2d:a5:59:64:bd:ff:
e5:3e:ec:57:37:23:45:fa:8c:f9:6c:33:e9:36:a1:71:ac:59:
55:41:f5:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net