Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/W07qLLkKbQRbRum7tHC2ETnxCow.roa
File: W07qLLkKbQRbRum7tHC2ETnxCow.roa (raw, json)
Hash identifier: BTgQea+ah2vsRMYF837im1dhQdSFz6KI2zqGkb15Vvw=
Subject key identifier: 5B:4E:EA:2C:B9:0A:6D:04:5B:46:E9:BB:B4:70:B6:11:39:F1:0A:8C
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 0DA08FAE
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/W07qLLkKbQRbRum7tHC2ETnxCow.roa
Signing time: Sat 01 Jan 2022 03:57:41 +0000
ROA not before: Sat 01 Jan 2022 03:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44400
IP address blocks: 194.33.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228626350 (0xda08fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Jan 1 03:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b4eea2cb90a6d045b46e9bbb470b61139f10a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:fc:f9:d2:62:b0:56:be:cd:ae:c0:ad:8f:
e3:92:13:f9:53:14:17:8a:9f:83:b6:e1:22:df:87:
98:69:a4:ac:bb:67:d2:c6:16:43:15:af:6a:5e:6b:
2b:76:04:42:b2:b1:0a:38:ea:88:8e:a1:02:fe:61:
95:13:b9:7f:7e:07:cc:39:44:cb:77:e8:ca:25:6e:
f2:aa:0d:70:d3:3b:58:3b:cb:98:3c:b6:ea:54:56:
0c:5f:4a:ac:11:66:64:91:f4:4e:f7:96:20:ef:35:
4e:30:15:c1:06:13:52:ac:cb:70:68:c8:a6:cf:fc:
02:d0:15:f1:19:ed:e3:36:5e:9d:94:5f:b9:c8:64:
09:9b:73:f4:ee:b8:bc:2b:88:1d:de:bd:f1:67:a6:
11:08:59:bc:a0:f0:f5:c2:5d:f8:0e:aa:e2:3d:b1:
0e:ab:57:04:b9:75:b5:fe:9a:d0:84:72:9b:24:e7:
ea:35:c2:fd:00:6a:f5:c9:a6:4d:b7:44:58:5f:d1:
1c:3a:23:61:7a:79:35:0e:1f:e8:80:33:09:62:85:
0f:fd:b6:16:ee:8a:6f:22:29:4c:13:cb:95:b1:7d:
a3:95:b7:8d:15:76:09:1b:22:ab:7f:9b:f5:3a:e5:
54:e2:af:49:ef:33:d8:b3:8b:af:66:dc:0d:fd:45:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:EA:2C:B9:0A:6D:04:5B:46:E9:BB:B4:70:B6:11:39:F1:0A:8C
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/W07qLLkKbQRbRum7tHC2ETnxCow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:07:53:c1:e0:c2:b1:31:53:4b:b7:7d:1e:e0:a7:16:3a:bb:
c5:07:c4:75:06:5a:73:1b:da:52:b0:75:29:b9:c1:91:b3:fc:
df:20:d4:f6:b9:5f:c0:bb:e8:22:ed:81:81:fd:40:7b:49:f9:
5d:35:d4:68:60:91:f3:41:65:b9:b0:49:2d:e3:eb:63:14:94:
0c:69:90:77:95:e6:9a:29:e4:7c:f8:79:5f:98:d2:76:93:14:
8b:8e:fb:14:89:24:b9:3e:90:59:04:5c:81:51:51:37:b2:3a:
90:1b:e2:9b:2b:66:02:59:71:31:d9:47:cd:22:63:65:b1:48:
8a:2e:2c:21:30:9a:9c:43:40:12:40:94:2c:d8:f7:3c:0e:70:
dc:3b:d7:bf:73:be:ed:11:4e:4a:63:2d:e1:f7:1b:00:6d:ed:
a5:9f:bc:ed:70:d9:36:26:d7:55:8b:16:35:11:2e:de:ea:51:
2a:35:b8:ef:fa:6f:66:f1:66:35:04:ce:f4:03:1f:bd:fd:b7:
93:12:0d:f9:12:40:93:05:33:16:df:f6:03:a9:fb:ae:d5:8c:
50:4d:a4:30:e2:9f:ea:6f:73:32:5c:2d:8e:af:cd:dc:18:7a:
59:2f:ed:7f:d9:c5:de:2d:2f:51:bf:c7:90:39:b0:de:0b:71:
83:7a:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net