Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/eC67NO6d7pYpj2BtnEdI0KQloK0.roa
File: eC67NO6d7pYpj2BtnEdI0KQloK0.roa (raw, json)
Hash identifier: nli03uNlXdclGEwuV+O1TEz5+jeN8zCGuNulax3KK2k=
Subject key identifier: 78:2E:BB:34:EE:9D:EE:96:29:8F:60:6D:9C:47:48:D0:A4:25:A0:AD
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 37D72DF1
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/eC67NO6d7pYpj2BtnEdI0KQloK0.roa
Signing time: Sat 01 Jan 2022 00:57:38 +0000
ROA not before: Sat 01 Jan 2022 00:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12657
IP address blocks: 212.72.64.0/19 maxlen: 19
212.102.160.0/19 maxlen: 19
213.131.192.0/19 maxlen: 19
2001:1579::/32 maxlen: 48
2001:1578:ff::/48 maxlen: 48
2001:1579::/48 maxlen: 48
2001:1578::/29 maxlen: 40
2001:1579:1::/48 maxlen: 48
2001:1578::/32 maxlen: 40
2001:1578::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936848881 (0x37d72df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jan 1 00:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=782ebb34ee9dee96298f606d9c4748d0a425a0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:62:46:50:49:9d:65:af:26:dd:03:8a:b2:
cf:6b:fe:21:34:1f:dd:fb:d9:f4:c7:cd:9e:eb:70:
4b:8f:87:07:44:4c:2c:d3:92:8d:31:f2:16:6a:9a:
06:94:18:72:ed:f9:86:fc:17:d9:0d:b8:69:84:36:
63:78:4d:a4:1b:b7:a1:b9:94:d6:1d:c7:2b:91:8d:
4f:4f:c8:06:77:c9:8d:d8:8f:36:04:12:d2:3c:6a:
16:98:c7:7b:20:58:d6:a5:17:d6:56:ef:a6:38:2f:
ef:23:da:5b:8b:a6:0c:b0:3e:5a:b0:f3:d7:c5:c7:
95:6d:55:b7:8b:d3:b2:ce:e6:c5:b3:63:94:a0:c5:
53:a1:e8:01:1b:6e:d0:36:e2:9b:b5:19:fd:1f:03:
3a:84:a2:58:43:8c:86:6c:18:47:c4:7f:ac:f9:a3:
ef:96:55:e0:03:72:d5:4c:17:53:02:92:6b:df:7e:
3e:8b:02:78:b2:c0:ab:51:bf:22:d2:14:21:8e:f4:
bd:7e:a7:82:d1:82:f6:14:66:73:c1:3d:cf:33:cb:
f9:67:c8:11:8c:be:6f:3d:97:83:93:27:6a:e5:f2:
8f:e2:93:70:29:d4:10:28:83:ce:31:53:b4:5d:79:
6e:c7:88:af:8f:13:1a:73:f6:c7:54:cc:13:96:2d:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:BB:34:EE:9D:EE:96:29:8F:60:6D:9C:47:48:D0:A4:25:A0:AD
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/eC67NO6d7pYpj2BtnEdI0KQloK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.64.0/19
212.102.160.0/19
213.131.192.0/19
IPv6:
2001:1578::/29
Signature Algorithm: sha256WithRSAEncryption
89:2d:39:ac:43:6c:10:2e:37:04:32:b2:e2:9f:a5:1a:50:c0:
37:97:18:91:e5:a7:58:93:4d:3e:17:7d:fe:7e:f8:39:6a:4d:
9f:63:fc:2a:be:a1:bf:cb:a3:86:82:77:e3:31:ae:05:ab:1d:
b9:5c:6b:67:b5:c5:c1:6b:35:fa:72:1b:21:25:f9:96:9f:e7:
86:62:e7:38:72:f8:f5:d7:c6:21:4e:b6:a1:27:f0:bc:12:16:
d7:26:12:8f:09:fb:36:38:c9:8a:bc:80:a9:ff:51:95:d3:61:
f1:6c:b1:78:e6:5f:f6:f8:e9:ed:a2:ab:78:da:a9:5c:68:05:
32:23:f4:37:75:65:48:6f:27:cd:1a:d3:01:4d:93:5a:00:af:
56:dc:da:33:95:e7:b9:ab:77:58:44:c2:f8:0b:6d:2f:85:4a:
c0:23:c1:29:0c:50:ff:05:35:49:cb:3c:9e:b5:bc:40:7e:45:
3e:3b:b4:45:a0:e4:fd:5f:ac:90:68:06:dc:cf:a1:15:c9:43:
17:69:e3:9d:3d:4e:39:96:92:c8:5e:44:8f:78:44:3c:34:91:
0c:8b:0d:4c:0f:c7:bb:94:fd:98:73:16:16:e8:d1:94:04:9a:
4d:d3:4a:20:dc:ef:60:a8:a2:0c:f3:d9:40:56:6e:e9:e5:1b:
5c:90:58:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net