Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/p3ItrNSC17b0PmeyfGnwFZZiphI.roa
File: p3ItrNSC17b0PmeyfGnwFZZiphI.roa (raw, json)
Hash identifier: fdp/zl6s3GxmYZTdI92ULlA/p1BEsxC5Zni50hsfwTo=
Subject key identifier: A7:72:2D:AC:D4:82:D7:B6:F4:3E:67:B2:7C:69:F0:15:96:62:A6:12
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 018288134BA7BBBCC445B49A428BFE57FDFD
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/p3ItrNSC17b0PmeyfGnwFZZiphI.roa
Signing time: Wed 10 Aug 2022 14:05:42 +0000
ROA not before: Wed 10 Aug 2022 14:05:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42929
IP address blocks: 185.142.136.0/22 maxlen: 22
45.156.244.0/22 maxlen: 22
2.56.80.0/22 maxlen: 22
193.36.182.0/24 maxlen: 24
193.104.36.0/24 maxlen: 24
193.33.222.0/23 maxlen: 23
2a07:2d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:13:4b:a7:bb:bc:c4:45:b4:9a:42:8b:fe:57:fd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Aug 10 14:05:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7722dacd482d7b6f43e67b27c69f0159662a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:ec:8e:1a:a0:78:d7:0c:b3:46:7b:ee:a7:
26:18:38:c2:cd:e0:71:5f:b4:5d:8e:67:bf:1a:34:
18:c4:23:c3:5a:6d:30:3d:16:5d:69:e4:f8:37:9f:
b6:63:78:63:56:76:72:25:85:75:4e:6f:b9:22:8f:
c6:7c:21:ef:4b:16:32:9f:99:58:b4:78:f4:b8:59:
16:cb:56:b4:e6:63:25:fe:97:ac:b3:2a:c3:ed:c5:
6f:fd:91:d7:26:d3:c5:e8:b5:9d:54:e8:02:11:1d:
69:71:38:00:fe:0f:d5:82:9f:7c:9c:92:38:52:07:
9b:56:ff:f8:67:20:d2:c7:16:23:1c:8c:9c:46:cb:
d7:cf:14:20:50:c6:7e:da:04:00:f2:46:3c:ca:d9:
9b:de:a6:34:8e:0f:39:e5:16:b2:ee:22:62:79:21:
4f:e0:c5:7d:a4:1e:32:0d:e9:e9:70:f4:65:e8:31:
4f:4c:34:84:63:fd:d0:a2:38:bd:34:cd:ad:20:f6:
91:87:7b:53:6c:d7:2c:66:ec:98:4b:78:f1:0c:34:
e3:f9:89:e6:67:a2:20:00:c1:aa:69:6b:3f:66:d0:
90:69:7e:e9:df:e0:c7:19:d3:13:88:c1:34:36:5c:
73:82:46:5f:fe:47:64:97:c9:a6:f4:18:cf:8b:b1:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:2D:AC:D4:82:D7:B6:F4:3E:67:B2:7C:69:F0:15:96:62:A6:12
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/p3ItrNSC17b0PmeyfGnwFZZiphI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.80.0/22
45.156.244.0/22
185.142.136.0/22
193.33.222.0/23
193.36.182.0/24
193.104.36.0/24
IPv6:
2a07:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
28:04:4f:06:04:c4:29:89:82:53:30:6e:3f:54:fa:07:a3:26:
e3:da:d0:32:be:e9:47:f6:31:6c:b8:70:c8:5c:9d:0d:ac:27:
96:21:f9:b0:ac:69:bf:29:e9:a5:4d:1e:80:12:01:9f:07:b4:
58:a5:32:3d:eb:0e:96:63:15:68:e8:56:6a:e7:ca:79:41:f6:
31:79:02:5e:64:38:cd:9a:64:30:92:c2:39:0f:ed:bd:1e:b5:
49:ad:76:9a:e0:72:84:50:9b:f6:80:12:63:ff:f6:3d:3b:49:
6a:99:06:d8:21:08:03:d0:5f:7e:06:d4:56:09:bb:d6:e4:f1:
44:5b:cb:67:b9:d7:61:3d:cc:43:c0:6c:37:b9:e0:e1:8b:68:
10:93:9c:5b:b0:4d:d7:f1:a3:b2:d5:a1:e5:ca:36:e8:6c:4d:
36:45:39:11:c1:53:a5:0e:1d:29:48:06:a5:ff:01:96:12:c6:
01:fa:f1:f5:24:77:31:70:47:e3:10:7f:f8:3f:13:7e:3e:95:
d7:e0:45:0a:1c:eb:1f:d7:73:bd:8c:9f:66:a7:a4:ab:ce:db:
e1:76:06:4f:43:60:77:3d:04:47:1a:4a:71:11:7e:24:8f:20:
45:d5:5d:82:39:02:e7:27:ca:0a:e5:04:ac:d1:d9:85:f8:aa:
fc:6d:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:58 2023 by rpki-client on console.sobornost.net