Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/7nobbnCv2DTpp_pcb9X2xVZwPII.roa
File: 7nobbnCv2DTpp_pcb9X2xVZwPII.roa (raw, json)
Hash identifier: YFd3hxdpmMqct09XkSJ3UuxdRFF31F26i8wWmHR+PtQ=
Subject key identifier: EE:7A:1B:6E:70:AF:D8:34:E9:A7:FA:5C:6F:D5:F6:C5:56:70:3C:82
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 0B35C703
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/7nobbnCv2DTpp_pcb9X2xVZwPII.roa
Signing time: Sat 01 Jan 2022 07:01:20 +0000
ROA not before: Sat 01 Jan 2022 07:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204309
IP address blocks: 185.253.203.0/24 maxlen: 24
185.253.202.0/24 maxlen: 24
185.253.200.0/22 maxlen: 22
185.253.201.0/24 maxlen: 24
185.253.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188073731 (0xb35c703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Jan 1 07:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee7a1b6e70afd834e9a7fa5c6fd5f6c556703c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:0f:ad:86:af:90:0a:ad:e2:e6:2a:4c:9c:
85:7d:70:3e:f3:45:dd:1e:44:e9:d1:09:e7:f5:7f:
21:88:cd:ba:54:50:2c:cf:69:e2:1c:ac:6b:b1:09:
4b:ee:09:82:bf:5e:9d:67:f3:fa:ad:05:db:53:dc:
f5:82:9e:2e:3c:e5:a6:1b:34:e6:04:8f:87:1b:96:
18:43:a8:f4:30:c2:5d:5f:e8:84:a8:52:00:ff:b5:
36:6e:66:60:cc:f2:f6:e4:82:a4:5b:96:78:99:93:
03:7d:4f:8e:c7:fa:fd:ee:b4:89:68:09:da:6e:90:
7d:c4:fd:7c:08:e8:b2:88:2b:74:01:2d:f3:16:b9:
b3:c9:dc:67:33:31:22:1d:b9:5a:5d:13:ad:05:ca:
e5:9a:e4:93:d5:c9:6d:47:77:38:c9:2a:e7:27:92:
9f:de:b6:09:95:09:5a:05:8c:ad:86:4e:62:dd:f6:
7f:48:45:a0:dd:75:82:8a:cf:b8:7d:8b:a4:58:2f:
d8:bd:47:16:be:41:4f:29:49:c9:04:32:f9:04:02:
66:e4:b7:f0:e8:af:f2:0a:95:db:d0:32:51:46:8d:
5d:89:0a:d6:cf:72:ed:c2:35:e4:df:89:e4:21:b2:
40:f8:fa:72:fa:e5:d2:30:c4:ab:2d:11:de:35:a0:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:1B:6E:70:AF:D8:34:E9:A7:FA:5C:6F:D5:F6:C5:56:70:3C:82
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/7nobbnCv2DTpp_pcb9X2xVZwPII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:4f:f6:60:34:74:0b:4d:ee:21:db:62:de:54:b4:53:53:fe:
6d:a3:aa:1e:8e:d5:c6:c9:c3:f0:3f:20:ad:ce:00:46:c6:cf:
d7:a0:81:a0:18:8c:25:a4:72:1a:4d:fe:52:32:12:2f:fa:73:
72:01:f3:b9:04:3c:be:33:df:b5:84:06:a9:31:ee:1e:14:cf:
6f:c1:ed:68:99:1b:1f:16:8d:6d:ce:09:d0:c5:15:1f:1f:a8:
77:c0:c9:dc:e3:36:c2:c0:9c:36:23:b5:f4:90:10:da:f2:7e:
94:53:3e:2c:1f:3f:8b:12:8a:5a:23:87:41:87:3d:66:01:b3:
07:3c:88:d9:65:7c:98:36:16:ee:54:87:cb:63:0d:08:32:81:
6f:c9:56:ae:89:ee:d4:1a:46:cf:93:39:8c:eb:99:bf:35:2c:
d0:38:99:b4:bc:b3:af:88:70:3c:1e:7c:a3:87:04:fe:54:f0:
83:13:9f:6e:17:d0:73:35:d6:df:b4:81:ff:9d:cd:3b:fa:a0:
bf:ca:e2:76:ac:16:cc:ad:62:4d:58:ea:b5:6d:8d:8e:55:ce:
6a:df:c2:1a:ad:63:3f:db:18:88:61:5f:65:c3:ce:73:75:59:
c7:d1:6e:a3:27:fe:d2:55:3e:44:ed:ec:63:ff:cb:80:cf:97:
53:1e:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net