Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/_B8ZlojOvwGofNBkBSb3oxz4JUc.roa
File: _B8ZlojOvwGofNBkBSb3oxz4JUc.roa (raw, json)
Hash identifier: xrMY9RlBOJyyz2Q4SjJb0YmzaRbXGlQeJ6lTmFgfOJ4=
Subject key identifier: FC:1F:19:96:88:CE:BF:01:A8:7C:D0:64:05:26:F7:A3:1C:F8:25:47
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 0184F74F9C229FE305717BB22F01B3D757C5
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/_B8ZlojOvwGofNBkBSb3oxz4JUc.roa
Signing time: Fri 09 Dec 2022 14:35:00 +0000
ROA not before: Fri 09 Dec 2022 14:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43202
IP address blocks: 45.128.4.0/22 maxlen: 24
2a12:83c0::/32 maxlen: 32
2a12:83c5::/32 maxlen: 32
2a12:83c2::/32 maxlen: 32
2a12:83c3::/32 maxlen: 32
2a12:83c6::/32 maxlen: 32
2a12:83c1::/32 maxlen: 32
2a12:83c4::/32 maxlen: 32
2a12:83c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:4f:9c:22:9f:e3:05:71:7b:b2:2f:01:b3:d7:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Dec 9 14:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc1f199688cebf01a87cd0640526f7a31cf82547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:39:6b:13:2d:0b:c3:71:34:1d:1e:ff:0b:
dc:8d:a1:79:16:82:34:42:36:83:9c:38:41:bb:e3:
e7:93:c6:ba:11:b0:05:d2:b2:60:8d:e2:77:b3:95:
fb:cf:07:d3:8e:7d:98:73:83:10:2c:df:10:64:36:
6e:1c:36:ca:6d:08:09:b0:75:76:60:9b:21:9f:a0:
76:c9:57:6e:40:9e:58:f4:24:42:7d:e9:a9:d4:ac:
8f:38:1f:30:14:68:5b:4e:ac:23:f8:db:91:46:22:
77:ae:ec:26:fc:ee:4f:bd:fe:44:41:8a:ea:3d:bb:
50:14:ba:13:59:c3:58:f7:d2:10:09:87:fb:fc:51:
21:fe:dd:2d:29:02:ac:2d:5b:81:46:06:de:ba:63:
60:25:ef:09:fb:ae:f9:5a:7b:91:e9:2f:b6:28:11:
45:1a:e1:c9:1a:dc:71:01:8e:5f:35:80:bd:f1:71:
65:d1:9d:b7:0c:db:0c:c3:da:09:37:10:7b:b2:8d:
82:57:b2:85:0b:5b:fd:00:a5:72:7c:f6:af:9e:91:
28:af:1d:a4:c1:66:aa:46:e2:d5:e2:47:ec:11:00:
db:b8:f2:ce:e6:f5:05:18:33:5e:f9:81:5d:29:09:
96:d1:b6:b2:2c:6b:24:2c:ec:5d:ad:7f:71:08:5a:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:19:96:88:CE:BF:01:A8:7C:D0:64:05:26:F7:A3:1C:F8:25:47
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/_B8ZlojOvwGofNBkBSb3oxz4JUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.4.0/22
IPv6:
2a12:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
95:dd:1d:0d:40:2d:5c:d3:57:95:11:5d:4a:ed:36:ff:80:9b:
6d:5e:e1:fd:3c:88:cf:2b:07:9e:c7:c2:39:f2:2c:5b:77:b3:
45:16:b7:e2:e1:b0:dd:6d:e7:75:f5:f3:18:78:bb:64:75:9a:
fd:e4:73:8a:aa:8e:ac:71:9c:c4:50:64:ee:fb:f4:f7:23:96:
22:fc:03:57:88:76:70:7a:13:33:80:35:fa:dd:c7:80:d1:9c:
ce:ec:d8:7f:27:e2:a5:6b:bd:ec:ff:98:f5:66:13:50:ff:60:
b6:1d:49:27:6c:f5:33:04:ea:7d:9d:fb:3f:18:7d:3a:70:c2:
a1:1c:86:3d:61:36:c5:30:b9:4a:5e:35:fe:4a:03:44:54:a6:
07:27:e5:f7:34:12:7b:84:63:48:21:c2:35:72:14:3e:6e:0d:
77:21:4d:5e:7c:22:eb:4d:29:e9:44:69:37:78:8d:40:83:d0:
cf:15:d7:63:9b:36:6d:ee:99:74:14:c3:cb:e9:a5:82:e3:b2:
ed:c6:af:75:4c:69:84:2a:7c:2b:0e:f4:df:04:16:36:37:e8:
8f:d3:3c:cb:04:42:7d:e9:35:77:10:9f:97:57:04:dd:d2:63:
81:04:53:36:e8:dd:8b:61:fc:87:69:81:af:f4:d6:3a:86:93:
21:31:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net