Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/P4EqQ9_ZknrPSe9Kb7tR2EC3N0k.roa
File: P4EqQ9_ZknrPSe9Kb7tR2EC3N0k.roa (raw, json)
Hash identifier: Gt4i+McAZ18s2NQtUDydJUaPl9n8W6d4lq5srmKGDYo=
Subject key identifier: 3F:81:2A:43:DF:D9:92:7A:CF:49:EF:4A:6F:BB:51:D8:40:B7:37:49
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0815367E
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/P4EqQ9_ZknrPSe9Kb7tR2EC3N0k.roa
Signing time: Sat 01 Jan 2022 03:00:53 +0000
ROA not before: Sat 01 Jan 2022 03:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209153
IP address blocks: 2.59.164.0/24 maxlen: 24
2.59.164.0/23 maxlen: 23
2.59.165.0/24 maxlen: 24
2a09:f540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135607934 (0x815367e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Jan 1 03:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f812a43dfd9927acf49ef4a6fbb51d840b73749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:c4:b3:e3:12:4e:df:48:fb:29:14:62:a8:
f7:db:34:ee:60:de:e3:32:67:cc:5c:95:23:32:52:
f6:05:28:3d:36:3d:73:80:cd:d2:3e:3a:82:bb:8b:
21:6b:db:ac:08:a0:fe:75:46:bd:34:5f:79:a1:ec:
36:bd:67:61:f6:bd:4c:3f:f1:34:a8:9e:4c:ab:3d:
5b:c8:37:79:56:c2:d9:c5:30:50:45:af:6a:d6:07:
75:6a:06:89:42:cd:8c:48:75:7c:73:36:90:3f:f7:
b0:15:4e:d7:31:e1:87:fb:0a:57:c7:60:1f:bd:c5:
0b:18:be:dc:7b:11:8f:f7:d5:f6:47:3d:df:2b:bf:
be:6a:75:d4:9a:30:7b:7b:88:ee:bd:37:ad:0a:12:
4d:62:0d:64:9e:0d:28:0c:e0:9f:6f:00:06:c9:cb:
34:e8:b2:2a:ab:83:2e:c8:07:a0:28:06:52:52:ce:
eb:0f:b8:e0:a2:00:2b:e1:71:6a:2b:5a:35:b3:03:
ca:f8:99:05:3a:86:36:62:4e:1e:ce:33:53:9f:a9:
3d:84:ff:3b:ae:57:31:cc:25:3e:e7:c4:82:b0:47:
3b:6d:7f:7d:3a:61:05:76:67:b0:31:13:36:64:d6:
2d:5c:41:36:94:f1:40:b0:fa:c6:3b:e1:1f:40:5f:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:81:2A:43:DF:D9:92:7A:CF:49:EF:4A:6F:BB:51:D8:40:B7:37:49
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/P4EqQ9_ZknrPSe9Kb7tR2EC3N0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.164.0/23
IPv6:
2a09:f540::/29
Signature Algorithm: sha256WithRSAEncryption
0b:a3:2a:26:7a:e7:89:6b:5d:96:01:08:c3:cf:00:5c:29:93:
e0:5e:73:ad:2e:81:aa:9d:f0:41:f8:f5:1b:dc:da:4e:78:84:
88:3a:b6:ac:76:c0:f7:05:71:65:31:24:1a:17:ea:e4:a7:36:
93:c1:99:c4:f5:25:62:32:8f:9c:a8:59:9f:10:60:1d:0c:f5:
c8:b8:f7:a2:69:e3:0d:fe:38:76:31:2a:2a:cf:b1:50:2e:05:
81:3f:48:90:c5:7e:2c:9c:aa:a3:e6:d5:ea:d0:85:c4:09:77:
30:92:74:3f:d5:bc:91:11:a8:47:80:42:b5:ea:11:90:52:4c:
b5:75:f2:d8:e8:52:60:62:56:20:3f:5d:01:4f:b4:4a:b1:01:
5c:68:a1:38:b0:77:ba:1b:be:49:d3:60:0d:b3:2d:6f:45:cc:
3d:b9:c7:8d:c0:d5:d3:44:de:b1:47:e9:54:22:7b:46:46:5a:
d7:30:da:f4:0f:d4:e7:b3:ee:42:83:30:a8:1d:10:2c:d3:0c:
d9:6b:44:7d:a9:49:0f:7d:5d:cc:eb:5c:f1:27:60:96:34:8c:
48:83:10:40:a5:02:59:8d:94:ee:35:48:a0:8a:a9:2d:95:08:
90:ad:27:0a:9f:56:09:f2:9d:22:d5:ed:ea:bf:cd:a1:c3:fd:
4b:5d:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:31 2023 by rpki-client on console.sobornost.net