Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/qQL8eZK-ojQjELg2blxwmbqX16o.roa
File: qQL8eZK-ojQjELg2blxwmbqX16o.roa (raw, json)
Hash identifier: SJFpcw5LWqSRd/OJzH+FK//R5MD/+0i9WLg3KlB7K2g=
Subject key identifier: A9:02:FC:79:92:BE:A2:34:23:10:B8:36:6E:5C:70:99:BA:97:D7:AA
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 0654446B
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/qQL8eZK-ojQjELg2blxwmbqX16o.roa
Signing time: Sat 01 Jan 2022 14:02:35 +0000
ROA not before: Sat 01 Jan 2022 14:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209970
IP address blocks: 45.67.112.0/22 maxlen: 24
185.155.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106185835 (0x654446b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Jan 1 14:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a902fc7992bea2342310b8366e5c7099ba97d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:b3:f3:4f:09:7e:4c:3d:d8:e2:3f:d6:b2:
89:b7:e5:4d:dd:5d:11:02:3d:cc:4c:ca:38:d2:7b:
b4:8b:c1:27:f8:4b:5b:07:60:ce:e3:71:75:38:aa:
e3:75:f3:82:52:13:bd:2a:68:9b:73:3e:65:57:29:
b5:3b:8e:73:70:e7:36:60:9d:56:4c:71:78:76:91:
5b:f7:b4:14:72:7c:f4:d4:6d:dd:fb:d2:6b:64:f1:
82:95:2c:82:5d:2d:b1:2a:88:3c:56:e3:aa:55:47:
4e:70:fb:c2:f8:d8:95:94:e6:90:3b:3f:d9:bd:f2:
7f:39:e5:2f:ce:b2:87:f1:a9:5e:b8:bb:04:f1:ed:
90:33:66:15:a6:ab:5b:11:ec:83:4c:df:fe:f7:71:
ac:e8:45:23:9d:f7:8f:e8:29:eb:24:ca:7e:25:f0:
3a:a3:9f:8f:4d:1d:88:cd:a5:d7:c7:36:be:8d:76:
38:63:bc:b7:35:c4:14:0f:18:41:e9:27:4c:b4:e4:
7b:aa:96:51:8f:3b:8e:ed:b8:76:d0:ae:98:d5:53:
f0:e6:b5:07:aa:ca:2c:b4:eb:d8:d6:35:b0:32:13:
62:20:af:9d:e5:e3:f6:43:bc:ff:78:fc:45:0a:af:
21:dd:f4:a8:e3:0f:3a:4f:6d:a3:5a:8b:46:04:47:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:FC:79:92:BE:A2:34:23:10:B8:36:6E:5C:70:99:BA:97:D7:AA
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/qQL8eZK-ojQjELg2blxwmbqX16o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.112.0/22
185.155.120.0/22
Signature Algorithm: sha256WithRSAEncryption
22:46:2a:31:df:d6:68:d1:4b:fc:32:7f:d2:5e:5b:c4:c1:f4:
34:4c:bd:67:d0:da:ba:2e:57:05:a2:66:e4:09:be:e9:40:43:
41:e2:be:17:bf:dd:53:5e:a9:0b:b6:b7:e1:85:68:53:15:e2:
1d:c4:c5:9e:ed:09:e4:54:95:25:b8:88:75:24:7a:4d:3f:8e:
de:f0:f5:80:4e:3a:64:77:d9:13:e4:7d:ff:95:62:e8:36:16:
36:d0:97:fa:b7:9b:78:c7:a4:b0:86:df:06:3c:ed:d6:47:18:
f2:40:73:10:73:98:d8:f1:d9:fb:8e:ad:7b:1d:3a:99:b0:8e:
e3:8a:c0:ab:00:9e:61:9d:fc:e2:cb:28:e3:ad:d2:92:be:26:
97:38:ea:fe:c8:60:44:53:79:9d:d9:a7:90:9d:bd:e4:96:67:
a1:e5:44:d3:70:78:42:e9:85:2a:c1:65:1f:5e:65:7a:b1:68:
e6:88:22:e0:c2:23:29:08:fe:34:4c:9d:97:39:fb:9b:f7:2d:
d3:a8:ac:d7:2c:ad:7e:fd:1d:ba:df:5d:bf:6a:75:f6:96:ec:
07:9e:c4:df:1d:6e:7e:3f:00:b6:c2:43:a9:62:f9:ed:a0:19:
9b:de:41:8c:23:94:1c:04:ea:8f:00:27:4f:93:fd:10:30:e5:
91:14:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net