Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/7RjYKWFARlPI5TqlwDOArck3MSI.roa
File: 7RjYKWFARlPI5TqlwDOArck3MSI.roa (raw, json)
Hash identifier: 2r4DENdfUl4XiQoO/V+Z7gMTKyqwu7M0YToV/hyc8XM=
Subject key identifier: ED:18:D8:29:61:40:46:53:C8:E5:3A:A5:C0:33:80:AD:C9:37:31:22
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 08E2DF
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/7RjYKWFARlPI5TqlwDOArck3MSI.roa
Signing time: Sat 01 Jan 2022 01:57:48 +0000
ROA not before: Sat 01 Jan 2022 01:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212686
IP address blocks: 185.206.9.0/24 maxlen: 24
185.206.11.0/24 maxlen: 24
185.206.8.0/24 maxlen: 24
185.206.10.0/24 maxlen: 24
2a12:ff80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582367 (0x8e2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Jan 1 01:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed18d82961404653c8e53aa5c03380adc9373122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:21:31:b6:c9:25:2a:6a:b9:f1:2d:ff:5b:
75:d1:15:56:53:fc:43:cc:49:92:68:5c:0b:a8:52:
18:da:3a:80:07:ab:77:31:df:f4:54:5e:e5:db:cb:
ec:50:34:49:af:91:a4:12:10:eb:0a:b6:02:ff:0c:
66:dc:89:2d:f1:14:a8:a0:55:a5:5d:bb:e6:10:ab:
30:cb:16:c0:73:fd:ca:99:e4:29:30:f1:2d:ba:d7:
d8:0f:8c:95:b3:39:74:4e:ef:de:c3:1d:b0:3b:22:
8e:2e:17:64:2a:ba:da:e8:07:42:03:e2:eb:ff:2c:
ce:76:c8:f6:d1:0a:23:f4:0b:b8:d3:07:99:73:82:
28:56:31:8f:37:93:1f:99:92:0f:fa:ed:e1:4b:49:
68:15:99:81:29:9b:e0:d8:b9:90:84:e0:16:93:6d:
78:0f:8d:db:30:60:fb:a2:e2:ae:b4:c0:5d:83:4f:
00:99:5a:f9:c5:ec:d4:f5:fd:5f:c3:b6:33:71:3a:
f4:f2:81:07:96:66:6f:92:d2:02:72:37:dd:8e:cc:
9c:68:1a:3b:e3:51:0c:2c:83:e8:49:38:1a:de:2a:
c6:1c:f0:3a:ea:c5:62:ea:2b:ee:8a:28:8e:52:f3:
39:16:8e:e1:45:b1:e8:f2:bc:b8:04:ea:d7:9c:6c:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:D8:29:61:40:46:53:C8:E5:3A:A5:C0:33:80:AD:C9:37:31:22
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/7RjYKWFARlPI5TqlwDOArck3MSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.8.0/22
IPv6:
2a12:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
68:69:5f:3c:8f:b2:f2:68:60:2c:6c:bd:e0:65:7e:c8:0e:02:
63:29:91:fd:f9:66:b9:61:aa:75:c4:b1:f1:b6:a4:b7:56:0c:
ea:9d:15:1b:5d:15:b0:9c:90:a3:91:8e:ed:4e:b4:aa:10:33:
b4:a9:d1:a6:a6:02:a9:69:d3:26:a5:b0:2b:0f:76:14:95:9d:
fb:e1:28:3f:f7:ca:4f:92:d4:57:55:6b:a7:83:9f:43:ea:44:
bd:80:e5:7a:7b:1d:83:a0:c7:f8:f6:97:f9:c6:46:2e:ff:38:
eb:17:8b:35:fb:6b:2e:0c:de:3e:d7:51:1c:12:6f:8d:8f:cd:
5a:a4:e9:c3:47:fd:e9:c9:f3:3e:ff:da:65:9f:31:65:ca:50:
30:d7:fe:9e:2b:cc:bb:e0:6c:e5:3f:d2:81:1c:d5:97:c3:3f:
71:a9:48:54:83:2d:08:da:98:0b:9a:00:7a:cd:ef:f8:16:51:
79:bb:86:eb:d8:0e:de:6d:02:db:03:f9:40:16:c1:0c:40:8a:
8d:48:2a:cf:71:e1:b4:2a:d0:7c:a9:00:45:a3:69:00:0f:42:
6d:aa:3d:b7:e0:9b:dc:45:fa:3c:78:64:67:0d:e8:e3:70:18:
d5:ff:c7:63:df:c7:2c:b3:ed:91:3d:fb:83:b9:fd:f6:02:97:
61:f5:c1:c8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIDCOLfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
MWY2ZTlmZjFmYmJmMjFmNjQxM2ExMzdlNzM2N2RkOGE4YzAzNWMwHhcNMjIwMTAx
MDE1NzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlZDE4ZDgyOTYxNDA0
NjUzYzhlNTNhYTVjMDMzODBhZGM5MzczMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjIkhMbbJJSpqufEt/1t10RVWU/xDzEmSaFwLqFIY2jqAB6t3
Md/0VF7l28vsUDRJr5GkEhDrCrYC/wxm3Ikt8RSooFWlXbvmEKswyxbAc/3KmeQp
MPEtutfYD4yVszl0Tu/ewx2wOyKOLhdkKrra6AdCA+Lr/yzOdsj20Qoj9Au40weZ
c4IoVjGPN5MfmZIP+u3hS0loFZmBKZvg2LmQhOAWk214D43bMGD7ouKutMBdg08A
mVr5xezU9f1fw7YzcTr08oEHlmZvktICcjfdjsycaBo741EMLIPoSTga3irGHPA6
6sVi6ivuiiiOUvM5Fo7hRbHo8ry4BOrXnGy8rwIDAQABo4ICGjCCAhYwHQYDVR0O
BBYEFO0Y2ClhQEZTyOU6pcAzgK3JNzEiMB8GA1UdIwQYMBaAFIIfbp/x+78h9kE6
E35zZ92KjANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Z2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUtNWE5NGFkMTMzMTE4LzEv
N1JqWUtXRkFSbFBJNVRxbHdET0FyY2szTVNJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9l
MDc2ZGMtMTBkOC00NGNjLThhYTUtNWE5NGFkMTMzMTE4LzEvZ2g5dW5fSDd2eUgy
UVRvVGZuTm4zWXFNQTF3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuc4IMA8EAgACMAkDBwAqEv+AAAAw
DQYJKoZIhvcNAQELBQADggEBAGhpXzyPsvJoYCxsveBlfsgOAmMpkf35ZrlhqnXE
sfG2pLdWDOqdFRtdFbCckKORju1OtKoQM7Sp0aamAqlp0yalsCsPdhSVnfvhKD/3
yk+S1FdVa6eDn0PqRL2A5Xp7HYOgx/j2l/nGRi7/OOsXizX7ay4M3j7XURwSb42P
zVqk6cNH/enJ8z7/2mWfMWXKUDDX/p4rzLvgbOU/0oEc1ZfDP3GpSFSDLQjamAua
AHrN7/gWUXm7huvYDt5tAtsD+UAWwQxAio1IKs9x4bQq0HypAEWjaQAPQm2qPbfg
m9xF+jx4ZGcN6ONwGNX/x2Pfxyyz7ZE9+4O5/fYCl2H1wcg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net