Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/kW2xiZbjG5ylDuG3NafN3M6huPM.roa
File: kW2xiZbjG5ylDuG3NafN3M6huPM.roa (raw, json)
Hash identifier: Rf1u8BSwELONzDshDDGNL1WVcJ+nGbeiDvm/GKtN++0=
Subject key identifier: 91:6D:B1:89:96:E3:1B:9C:A5:0E:E1:B7:35:A7:CD:DC:CE:A1:B8:F3
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 16F3BDF6
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/kW2xiZbjG5ylDuG3NafN3M6huPM.roa
Signing time: Thu 21 Apr 2022 12:25:49 +0000
ROA not before: Thu 21 Apr 2022 12:25:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/24 maxlen: 24
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385072630 (0x16f3bdf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Apr 21 12:25:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=916db18996e31b9ca50ee1b735a7cddccea1b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:58:37:5a:2d:c0:fa:41:8a:ed:b4:55:43:
03:9a:fd:0a:15:2f:5b:71:e5:b8:ee:7a:f6:17:a1:
75:20:c7:f4:7d:e1:9f:ad:dc:8d:53:e7:8c:a0:9f:
d7:26:48:e9:37:77:02:36:3b:c2:24:d1:f8:76:f9:
79:aa:51:0c:64:e2:ed:3c:c0:64:dc:3b:86:35:74:
5b:1b:76:f4:ab:29:5f:f2:aa:47:c9:79:09:1c:a4:
27:c5:0c:55:d8:94:9f:21:a8:63:16:40:10:fa:d1:
b1:72:28:1e:4b:06:8f:cd:54:55:ef:b0:11:5b:b2:
e5:8a:39:e0:0f:b0:bf:13:7f:da:62:ef:b3:d1:a1:
06:a0:b6:93:e5:df:29:89:38:d8:9b:fd:75:26:4f:
c9:d6:07:2f:77:c5:09:7c:84:0c:2a:4d:6b:4b:d9:
10:48:2c:d5:11:75:a9:14:ec:55:4c:04:5b:97:f6:
7d:53:8e:6a:0e:26:16:7a:de:bc:7e:21:65:89:ae:
6f:69:ad:74:08:d0:ff:7b:da:3f:85:80:80:fe:d0:
51:61:06:39:25:12:90:7c:28:a7:b1:a6:d4:31:6e:
08:c8:e7:8a:59:f8:3a:f1:1e:db:fb:3a:e8:49:8f:
ed:1e:10:d4:c7:52:cc:24:db:5c:ed:c9:e1:25:54:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:B1:89:96:E3:1B:9C:A5:0E:E1:B7:35:A7:CD:DC:CE:A1:B8:F3
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/kW2xiZbjG5ylDuG3NafN3M6huPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.172.0-212.68.183.255
Signature Algorithm: sha256WithRSAEncryption
a4:a6:78:48:98:16:1b:d6:b5:0c:37:8f:ed:e2:7e:65:39:10:
8f:0d:64:19:a3:15:5e:a3:e5:40:c6:0f:1e:09:ea:63:e7:36:
fe:4f:9f:bd:70:73:02:3b:84:9a:7d:5a:2b:d3:10:24:49:d9:
39:3a:b3:31:f1:f4:05:95:4b:21:b1:b8:44:93:a0:19:75:4b:
d1:35:0f:51:a5:51:03:38:30:c6:02:91:8e:d5:b8:fb:77:21:
3d:eb:09:d5:db:82:46:90:18:48:29:56:99:45:cb:27:1f:00:
99:ff:d1:f9:c9:2c:32:d8:0e:9e:98:5f:64:5f:7c:c4:ed:71:
77:01:de:7e:e5:4d:94:bb:7b:fc:21:48:18:a2:14:22:a4:98:
2f:90:62:8a:bb:7d:55:c6:c9:e1:93:f1:82:13:06:69:30:dd:
3d:f6:88:57:fc:63:bf:85:21:49:ca:a8:53:fd:56:13:db:fe:
14:2c:98:d8:10:d4:7d:eb:fb:4e:7a:8d:7d:3a:71:80:0e:ed:
e3:f8:b0:2b:50:5b:4a:a3:3b:5e:4e:3a:78:98:44:5f:ea:96:
1d:27:89:74:07:7e:3d:34:8e:0d:31:53:2d:aa:04:fb:22:de:
f7:2f:96:a2:71:ff:c7:40:7b:33:37:b2:34:0e:68:4c:5b:92:
02:e2:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net