Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/v6FVBqDOAqyE6-mlF3hZu1Qf40s.roa
File: v6FVBqDOAqyE6-mlF3hZu1Qf40s.roa (raw, json)
Hash identifier: OAOiVTbA8ttPXlisL7WO2LTPzoRNAoVmnSjt0As4TjY=
Subject key identifier: BF:A1:55:06:A0:CE:02:AC:84:EB:E9:A5:17:78:59:BB:54:1F:E3:4B
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 0580A814
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/v6FVBqDOAqyE6-mlF3hZu1Qf40s.roa
Signing time: Sat 01 Jan 2022 13:07:25 +0000
ROA not before: Sat 01 Jan 2022 13:07:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12496
IP address blocks: 93.89.128.0/20 maxlen: 20
91.135.0.0/20 maxlen: 20
217.144.80.0/20 maxlen: 20
212.69.32.0/19 maxlen: 19
2a02:390::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92317716 (0x580a814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Jan 1 13:07:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa15506a0ce02ac84ebe9a5177859bb541fe34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:1e:c3:ee:a1:49:87:22:77:01:d7:18:c9:
0b:a5:ae:e1:0d:86:39:3f:5d:e6:e0:11:ca:5c:88:
95:56:58:3f:cd:88:db:7f:bb:f4:ad:96:ef:50:a7:
f6:06:eb:9d:8f:cc:3b:15:d2:b1:32:7b:c8:09:c2:
d4:7e:80:bf:68:41:83:81:b0:ec:b5:3f:58:9a:4d:
77:78:ee:46:53:ec:03:70:f0:29:31:f9:89:f9:bb:
7a:ad:cc:ae:a0:88:42:04:6f:f2:84:c2:51:5c:df:
a5:7f:68:98:68:66:29:0f:bf:a5:91:2e:8b:0e:a9:
28:19:fb:23:23:d3:11:05:61:95:3e:9c:50:ca:b5:
96:3d:e1:1c:90:65:d8:c9:13:f5:6e:a1:cd:f5:2e:
99:f7:11:6c:31:55:0f:9d:c3:09:0b:b9:6e:b4:be:
3c:d0:55:32:94:60:b7:7b:35:5b:80:72:23:01:05:
78:63:27:e6:24:64:3d:20:8e:d0:26:4e:a0:d6:30:
58:af:63:3b:03:9b:0c:32:0b:fb:5c:35:f4:9a:b5:
5d:96:49:f6:e1:83:cc:47:b9:9f:56:61:ea:01:33:
e2:09:b9:72:c5:2a:4f:73:eb:0b:9b:98:47:9d:21:
37:22:22:79:94:7b:e5:7f:d5:0c:d3:0d:87:c2:19:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:55:06:A0:CE:02:AC:84:EB:E9:A5:17:78:59:BB:54:1F:E3:4B
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/v6FVBqDOAqyE6-mlF3hZu1Qf40s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.0.0/20
93.89.128.0/20
212.69.32.0/19
217.144.80.0/20
IPv6:
2a02:390::/32
Signature Algorithm: sha256WithRSAEncryption
06:3c:bd:52:6b:75:cf:1c:e1:8b:88:e6:86:42:26:c3:d0:51:
95:1d:a2:db:b7:21:7c:6e:a9:f5:43:e1:c9:0c:ee:df:5c:50:
db:a2:29:49:84:11:60:8d:f1:ad:e6:0e:4e:93:2d:79:af:96:
71:08:07:1a:8d:8e:c6:83:11:9a:39:f9:1e:c3:23:fe:52:89:
47:92:21:84:dc:be:d3:1f:dd:e2:af:9f:3b:6a:ee:c2:fe:da:
e3:89:9a:fb:4e:6a:aa:87:8b:81:7d:d5:03:a4:9b:14:e9:c7:
8d:71:ba:a0:19:b9:a9:c2:49:67:51:77:a2:e0:5f:61:ea:0d:
f5:15:22:95:63:67:29:68:a6:8b:59:ac:b1:9e:57:93:99:38:
c5:bc:d8:7e:82:e8:d6:06:90:9c:6a:42:46:32:9a:9c:47:23:
ad:62:a8:67:f4:0c:dc:de:20:d4:0d:df:ae:64:c9:f0:86:e7:
de:d4:3d:5b:05:17:d5:5b:73:c6:72:d4:b7:53:96:b8:1c:b1:
2d:f4:5e:13:c0:da:16:bb:80:09:0e:74:5a:ad:5d:4f:0d:cd:
b6:73:0e:f4:ca:76:b2:9c:a4:66:f7:15:95:c8:30:d1:89:77:
4a:a3:37:7c:2b:fb:8b:f1:1b:2e:d8:86:c6:aa:e8:b3:c6:56:
4e:58:35:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:42 2023 by rpki-client on console.sobornost.net