Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/3m0y0kfnfZTd8NK2P0FRnow2YtU.roa
File: 3m0y0kfnfZTd8NK2P0FRnow2YtU.roa (raw, json)
Hash identifier: 7JY8NlVc3o6Bma4HqqxDfbiLJ/a75OTJeoSqxegKTgM=
Subject key identifier: DE:6D:32:D2:47:E7:7D:94:DD:F0:D2:B6:3F:41:51:9E:8C:36:62:D5
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 01763F
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/3m0y0kfnfZTd8NK2P0FRnow2YtU.roa
Signing time: Mon 30 May 2022 09:57:13 +0000
ROA not before: Mon 30 May 2022 09:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207766
IP address blocks: 213.240.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95807 (0x1763f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: May 30 09:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de6d32d247e77d94ddf0d2b63f41519e8c3662d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:15:b6:52:ae:a3:2d:7e:7a:e3:28:f6:f5:
2d:33:24:3b:5d:ca:05:8b:41:96:3c:62:54:5b:3f:
cf:63:22:e3:55:14:54:0f:ec:b7:6a:8e:3d:e9:1c:
9f:65:7e:ff:0f:9f:1d:8d:6c:34:07:9b:11:26:79:
54:19:e9:9b:87:48:b6:93:b4:47:28:5a:a2:26:14:
3a:af:cd:24:58:8c:f8:28:37:cb:86:21:f0:e1:5b:
aa:1d:61:a4:3d:0f:05:08:ce:88:57:07:9f:5d:98:
9e:dd:18:ee:6b:0f:b4:3e:88:3a:de:a6:ab:f2:8e:
69:8c:6e:0e:0b:19:86:29:66:b5:6d:c2:57:dc:2d:
d1:44:1d:46:ca:1c:57:ac:2f:32:db:18:a2:eb:a1:
45:a0:97:fd:ab:2d:ef:8a:9a:cc:1c:0b:eb:58:fd:
84:bf:3e:04:d5:c7:24:f7:23:2e:e0:b0:0a:36:7c:
ab:c6:0d:cd:ca:11:f4:a1:c8:23:39:4a:e2:24:8f:
01:fe:0e:75:d7:25:e7:cf:8d:4d:e7:08:97:8e:24:
9f:2c:a2:cb:69:f0:6b:8d:26:47:f2:a7:0e:12:b5:
8c:96:0b:8f:85:12:06:60:29:df:f7:f5:ec:22:1e:
d3:0a:92:7d:cf:4d:e7:60:a5:c6:b0:02:31:77:6a:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6D:32:D2:47:E7:7D:94:DD:F0:D2:B6:3F:41:51:9E:8C:36:62:D5
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/3m0y0kfnfZTd8NK2P0FRnow2YtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.240.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:10:c6:9a:58:72:ca:51:b8:50:ab:29:8c:bc:18:15:b6:c3:
ac:2d:cc:01:9b:9b:6f:49:92:41:04:e3:a8:d4:5b:89:d1:5b:
17:a9:b4:af:fc:3b:45:ac:42:2a:57:3f:80:c9:41:16:c8:6f:
86:5a:1f:3f:bd:3e:79:f2:8f:c9:c4:61:be:84:d4:52:63:1d:
94:80:52:1b:00:21:6d:3d:61:49:d4:f8:4f:f9:5c:2c:41:8f:
66:85:c7:19:11:3f:14:90:4e:a8:db:2e:46:96:37:6f:be:ac:
70:4d:5d:2b:ba:33:cf:57:28:58:bd:dd:b6:18:a2:23:23:90:
06:21:c2:72:71:3f:b9:36:ef:d3:4e:58:02:68:6d:ec:83:79:
01:8c:09:e0:17:56:9b:52:ed:a0:03:22:84:5d:bc:48:13:95:
7c:c3:ec:a5:4e:0f:b6:6c:89:08:e7:71:d9:30:f1:22:80:cd:
a1:2c:ab:05:82:70:42:af:8a:25:ec:12:89:c3:5f:04:22:6e:
69:0c:1b:a6:41:69:54:5a:45:81:5f:b1:b1:25:c3:f4:fd:20:
e4:3a:31:80:14:e9:e0:9e:b2:6f:48:19:70:8f:1a:69:17:5f:
f1:52:72:65:c2:27:ac:2d:90:1a:d7:7d:44:d6:b6:37:a6:47:
ce:dc:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net