Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/ejypyc-PpIeEWHz6b1a82LG29KY.roa
File: ejypyc-PpIeEWHz6b1a82LG29KY.roa (raw, json)
Hash identifier: 8jg5E7KvETRcrO9bgN4UHat9z6q0zEjlXKImI+/ZW5Y=
Subject key identifier: 7A:3C:A9:C9:CF:8F:A4:87:84:58:7C:FA:6F:56:BC:D8:B1:B6:F4:A6
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0184C2E1AD4E60162D347849C9A108A0E01F
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/ejypyc-PpIeEWHz6b1a82LG29KY.roa
Signing time: Tue 29 Nov 2022 10:14:40 +0000
ROA not before: Tue 29 Nov 2022 10:14:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207872
IP address blocks: 185.213.44.0/24 maxlen: 24
178.236.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:e1:ad:4e:60:16:2d:34:78:49:c9:a1:08:a0:e0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Nov 29 10:14:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a3ca9c9cf8fa48784587cfa6f56bcd8b1b6f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:9f:06:49:4f:0f:e6:ea:e7:b4:61:e1:13:
7b:46:f8:db:9c:c5:43:c7:37:c4:45:69:74:d4:53:
cb:b0:24:71:68:05:c3:ad:ec:c2:62:57:64:5c:ec:
83:aa:d8:d5:b8:2f:4d:33:7e:e7:4c:de:e8:e4:cc:
bf:df:2b:7e:62:6a:a1:f6:df:76:68:db:c6:52:49:
f3:55:3e:0d:f0:4b:e9:05:99:35:7a:a5:bd:76:98:
c3:74:07:12:39:5c:b6:9b:05:ec:7b:21:1b:aa:96:
9d:a7:a9:66:2d:36:89:90:3b:cb:32:6a:93:4c:0c:
11:bd:40:2e:c8:00:44:96:5b:90:3c:b2:40:02:f1:
d1:98:41:b4:19:7d:03:04:c4:66:9c:f2:82:17:08:
33:9a:3f:e9:da:c9:08:76:9a:66:ae:1f:50:6f:03:
93:5a:02:73:43:2b:ce:e4:56:d2:1a:7f:3b:ea:cc:
d8:51:e1:4e:e5:b4:fe:72:16:eb:58:f6:76:81:5f:
68:fb:fc:2b:ba:4f:09:17:ff:70:ac:b4:cd:e1:2b:
00:1c:b0:9d:7f:cb:3b:39:2f:ef:47:59:d0:ed:8c:
08:2c:06:a1:46:8e:af:46:d7:b6:2c:70:4f:44:90:
70:d9:ea:a8:95:be:06:15:61:37:03:14:dd:6b:7e:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:A9:C9:CF:8F:A4:87:84:58:7C:FA:6F:56:BC:D8:B1:B6:F4:A6
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/ejypyc-PpIeEWHz6b1a82LG29KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.203.0/24
185.213.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2c:61:09:4a:1b:a1:22:98:29:29:b2:fd:8e:99:22:80:7e:
af:57:c8:ad:1b:09:a6:b7:f8:82:06:cb:71:58:58:32:f3:79:
7e:e8:ee:3f:cc:73:b5:47:ed:77:15:de:38:2d:a8:12:83:b5:
1b:86:48:73:ca:e1:dd:4d:89:c1:59:6e:3a:f9:51:30:73:14:
5c:6d:a7:ad:30:50:28:54:d8:4d:74:1d:2c:95:af:93:03:29:
97:0f:78:a3:9b:7c:3b:56:77:62:5e:26:0c:06:dc:7a:09:5e:
48:22:29:4f:2a:3f:9c:a9:1c:5e:77:54:96:64:a1:a3:36:16:
23:2d:9f:c4:1e:60:ff:0b:e0:9b:58:61:27:46:c0:ca:16:a6:
a4:89:de:22:e8:39:35:34:9f:8f:a8:de:b4:36:81:38:43:cf:
05:6e:0d:fd:b0:6c:e6:35:63:40:92:54:4c:c7:4e:99:0f:ae:
e4:de:0a:aa:5c:f3:23:2a:c4:b3:2a:b5:f8:3d:11:bb:cf:53:
d8:c3:5d:d1:ee:33:f8:5e:17:62:62:0b:c9:85:bb:f2:d3:35:
e0:5a:9f:13:b2:1b:6a:46:5c:55:cc:7a:ad:e5:c1:ab:8b:b9:
bc:04:65:24:cd:c4:cf:9b:02:7f:ce:fe:e1:4e:82:09:fb:49:
b1:ed:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net