Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/ftmnqf-k0x7PnyNTlXW3kcYVaJY.roa
File: ftmnqf-k0x7PnyNTlXW3kcYVaJY.roa (raw, json)
Hash identifier: GYixYfbstOPiI/2Ob6xCdpGA4Ox/ZsRtiDlYR+cJkpw=
Subject key identifier: 7E:D9:A7:A9:FF:A4:D3:1E:CF:9F:23:53:95:75:B7:91:C6:15:68:96
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 1209F94B
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/ftmnqf-k0x7PnyNTlXW3kcYVaJY.roa
Signing time: Sat 01 Jan 2022 13:06:05 +0000
ROA not before: Sat 01 Jan 2022 13:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204834
IP address blocks: 185.129.240.0/24 maxlen: 24
185.129.240.0/22 maxlen: 22
185.129.241.0/24 maxlen: 24
185.129.242.0/24 maxlen: 24
185.129.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302643531 (0x1209f94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 1 13:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ed9a7a9ffa4d31ecf9f23539575b791c6156896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:d5:1e:f7:5d:a1:51:38:08:a7:ab:6a:13:
2f:18:69:4a:a5:96:ba:5a:c9:fc:21:2c:8a:ec:0c:
50:83:5a:5a:09:14:e0:a1:c4:92:24:80:1d:ad:de:
fb:00:6c:f6:7b:ad:ba:db:d5:80:b6:e4:78:d5:25:
70:1c:fe:0a:ed:c8:a3:37:5a:00:c4:dc:97:e7:a1:
33:a8:6b:de:5f:39:c5:10:36:84:f7:ed:6e:05:29:
39:3c:8d:6a:3a:6a:c2:45:d5:46:0f:3d:e6:fb:c8:
a5:8d:dd:f8:84:ff:49:bc:d4:fd:19:d3:cf:0c:83:
cd:91:2c:df:f8:10:e7:91:27:7d:25:e4:c0:a5:ea:
e4:c8:b7:9c:80:91:e4:20:2c:37:96:6a:2a:0c:25:
a8:3f:05:a5:d5:c6:a3:a7:87:1b:0d:c2:cc:51:15:
94:3f:6d:84:96:6d:78:79:c9:7a:f1:97:40:51:eb:
50:ae:f1:f7:d0:fe:51:ac:55:89:42:ab:b6:9b:cc:
c6:65:67:fa:f5:76:8f:66:5e:92:75:78:14:7c:31:
07:95:a1:7d:f7:c5:1e:d5:b4:fe:9d:ab:1c:f3:96:
8f:ff:14:1c:ad:66:5c:1d:88:e5:72:81:72:e6:9b:
e8:8e:fd:6d:5f:fa:d8:e2:99:3c:ec:4f:31:c8:76:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D9:A7:A9:FF:A4:D3:1E:CF:9F:23:53:95:75:B7:91:C6:15:68:96
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/ftmnqf-k0x7PnyNTlXW3kcYVaJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.240.0/22
Signature Algorithm: sha256WithRSAEncryption
08:ec:65:34:e4:82:69:f4:a6:ba:fb:e0:a1:e0:9b:34:70:77:
63:b6:41:19:da:fa:73:69:85:b9:37:0f:2a:62:93:69:ee:32:
b6:70:96:64:0f:0e:88:45:38:09:0e:cd:d6:cf:19:4e:69:7d:
ec:11:6f:56:31:e1:a9:ef:74:12:79:ed:fb:d8:e9:e4:f8:7b:
46:3a:01:44:34:e6:59:00:4b:66:f3:16:cd:dd:3a:84:14:b3:
10:7d:5b:bc:cd:b6:db:c7:e5:75:ee:b3:40:dc:1d:49:32:59:
ba:59:08:61:c2:29:ad:75:30:54:bf:80:f5:33:c9:0d:73:8c:
b6:f9:15:8b:80:e8:03:de:af:60:0e:0f:4c:26:b6:3d:50:31:
8e:70:05:1c:a4:20:d6:b1:f7:f7:70:87:f8:74:40:fa:05:a9:
fd:72:b0:bc:d8:3e:b9:47:57:13:9b:1d:56:c8:84:e1:73:cb:
7f:b3:3b:8d:ed:33:c8:bc:83:e8:e3:42:e1:d9:53:16:26:ad:
4b:8f:d2:e3:ed:fc:93:74:ac:f6:1f:f3:ac:42:77:67:1d:66:
68:ed:40:fe:3c:24:cf:f3:6f:85:cd:51:f0:c9:11:f4:fc:55:
55:51:7f:17:69:9d:e2:21:90:75:0f:59:a6:b9:dc:77:36:1b:
af:cf:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net