Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/J7ZhTvgf7MX7_cGi8fWKmKKOFhA.roa
File: J7ZhTvgf7MX7_cGi8fWKmKKOFhA.roa (raw, json)
Hash identifier: hp7XXSS1Oj2ResXfTwmdlivYLlyDGQRMTVarRAteva0=
Subject key identifier: 27:B6:61:4E:F8:1F:EC:C5:FB:FD:C1:A2:F1:F5:8A:98:A2:8E:16:10
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 1361DC25
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/J7ZhTvgf7MX7_cGi8fWKmKKOFhA.roa
Signing time: Sat 01 Jan 2022 12:58:30 +0000
ROA not before: Sat 01 Jan 2022 12:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35193
IP address blocks: 5.145.120.0/21 maxlen: 21
85.239.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325180453 (0x1361dc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Jan 1 12:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27b6614ef81fecc5fbfdc1a2f1f58a98a28e1610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:78:ab:1f:27:47:6d:e7:19:bf:57:b4:3e:
0d:af:9d:d8:d0:25:d0:ad:a1:5a:ef:c4:a7:2b:6f:
9f:76:a3:39:15:9e:9f:04:82:16:e9:b3:d8:c0:6a:
1d:a5:7e:40:90:d1:ba:9b:7d:33:fa:d6:4e:87:f2:
b1:ba:7c:23:92:79:44:6c:31:18:b3:e2:af:14:40:
1c:e4:8d:f1:d2:84:3f:67:5c:51:ed:26:75:5c:f4:
46:60:5c:2a:7b:8f:ec:8a:8b:ea:25:c6:3c:14:a0:
c0:39:0e:13:ab:b2:2f:b5:ea:a8:37:9f:da:92:64:
fd:d2:39:53:7f:c7:8f:48:f0:4a:57:67:29:08:d0:
30:af:86:a0:ec:f3:5e:a2:91:48:7d:3f:c7:ff:5f:
66:c2:e0:91:c1:d2:9c:cf:1d:4f:e9:06:31:f2:55:
fb:ef:b7:24:e5:58:2e:d5:75:4e:ae:d1:22:74:e5:
77:bd:22:5b:d8:9c:87:bd:e2:a5:f6:70:02:ce:25:
32:54:45:94:b5:38:eb:47:f8:d4:56:e9:98:70:e5:
e8:55:1e:1f:8e:8e:c5:24:7c:39:f7:b8:8a:29:14:
c5:49:e5:1e:69:14:c6:6f:07:27:af:c4:28:f1:72:
6d:d6:b2:f5:77:80:3c:c8:f6:2d:91:51:94:7d:0e:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:61:4E:F8:1F:EC:C5:FB:FD:C1:A2:F1:F5:8A:98:A2:8E:16:10
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/J7ZhTvgf7MX7_cGi8fWKmKKOFhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.120.0/21
85.239.160.0/19
Signature Algorithm: sha256WithRSAEncryption
65:01:75:3c:9f:58:0e:5a:2d:9b:73:ed:f3:ea:2b:be:9d:24:
31:54:d0:9c:c1:66:0e:2d:45:e1:3a:cc:82:63:f4:d9:7c:b6:
d3:ce:a6:eb:90:4b:f2:e3:bb:d8:d3:7c:f3:b0:d5:dc:66:75:
43:71:42:73:5f:9b:3c:29:12:0f:d1:a4:7c:9f:29:86:58:f4:
39:ef:3a:41:3d:7b:1a:ae:b5:af:ef:70:be:ce:59:f8:67:2e:
c3:93:eb:f9:ef:2c:18:e0:51:73:f5:ee:09:71:87:f7:62:7f:
97:1b:1a:f0:9e:0c:6c:cf:40:5b:76:53:bf:ad:50:1f:54:31:
99:45:c9:3d:85:75:d5:83:45:61:45:e3:fc:13:35:5d:30:f3:
c3:39:fa:f6:37:60:70:29:79:34:1c:24:84:06:61:1b:36:9e:
06:6d:1f:e5:e1:0c:67:47:c1:7a:89:4c:f0:68:66:d4:5b:83:
04:67:5e:60:5a:c4:78:d1:7b:00:a9:9d:52:0f:2e:75:31:3f:
a3:f6:f7:28:fd:25:48:64:c2:67:97:81:66:75:4f:b2:7e:45:
73:88:48:ee:5a:e3:81:74:48:da:63:41:a0:f9:35:0d:9c:08:
60:9f:52:c0:be:65:8f:ba:07:e0:02:bc:44:3a:bc:c4:66:79:
20:0d:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net