Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/sPBpl_2xYpuMXKlopXyCo39PuKQ.roa
File: sPBpl_2xYpuMXKlopXyCo39PuKQ.roa (raw, json)
Hash identifier: PTxmew8LnXXto+qigYqz0H3929FSOwfy6kOH7P0kBM0=
Subject key identifier: B0:F0:69:97:FD:B1:62:9B:8C:5C:A9:68:A5:7C:82:A3:7F:4F:B8:A4
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 04CDBEAD
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/sPBpl_2xYpuMXKlopXyCo39PuKQ.roa
Signing time: Sat 01 Jan 2022 01:59:47 +0000
ROA not before: Sat 01 Jan 2022 01:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205083
IP address blocks: 185.231.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80592557 (0x4cdbead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 01:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0f06997fdb1629b8c5ca968a57c82a37f4fb8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:d4:b1:19:25:e6:72:23:b1:94:ae:7c:9b:
2b:ff:93:88:08:3e:67:f5:12:46:77:09:f8:09:52:
af:ec:79:81:ec:d7:76:61:33:45:77:6f:5c:85:de:
53:7b:69:87:66:cf:da:f1:b6:fb:54:67:71:1d:a9:
c5:3e:e1:39:22:49:d9:99:7d:74:2c:cc:54:c5:34:
9a:19:a2:5b:41:de:82:62:13:c1:27:8b:e1:f3:7f:
2e:fb:2f:9f:f2:1c:d8:e6:a4:60:f9:f1:e6:5d:58:
68:da:5b:fc:24:f5:ab:dc:92:39:fb:e5:c0:22:9d:
55:f5:c9:ed:50:e7:53:bd:7b:7a:4f:03:9a:ed:8c:
1e:c5:81:e9:34:1b:1f:c5:20:34:94:9e:9e:38:52:
f6:bc:ae:1f:c6:21:6e:bf:e6:d3:d3:f2:04:c1:24:
10:7c:2d:c5:4c:19:0c:dc:63:f6:38:db:78:3c:d4:
bc:1a:07:45:60:39:6e:a7:82:c8:0e:b1:01:31:ca:
67:8a:1e:22:f8:70:47:03:a3:31:47:af:c0:42:e5:
8d:ae:b2:8c:b6:02:02:e5:e5:9d:8c:2a:43:63:f8:
02:fc:d2:ca:ca:59:95:ba:46:dd:d8:e9:fa:02:1b:
55:f4:85:f6:01:79:83:bf:27:92:be:d8:d1:5b:b7:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:69:97:FD:B1:62:9B:8C:5C:A9:68:A5:7C:82:A3:7F:4F:B8:A4
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/sPBpl_2xYpuMXKlopXyCo39PuKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:81:b8:b4:03:76:21:ad:2c:e0:3b:6f:42:69:9f:99:45:3a:
91:e7:30:ec:e0:e4:a0:c3:20:4a:4f:54:7f:b0:ee:4a:d1:cb:
ac:a0:26:03:78:15:4d:57:92:a0:50:50:4b:9e:34:61:3f:53:
f8:63:69:21:a8:2b:a7:21:f5:20:4a:fd:f7:b1:c5:cc:60:80:
ca:b8:ce:68:09:c3:31:b8:e8:32:12:f8:ba:69:31:ee:f4:cd:
d8:1c:0f:91:ca:03:61:f0:a3:e1:ca:37:0a:04:b9:cc:14:6e:
1d:15:a3:55:fa:22:49:a9:47:57:a0:21:02:3a:33:e5:23:aa:
d3:60:fe:b2:54:cd:65:c3:bc:7a:d8:70:f4:5f:81:c2:a3:87:
71:34:d0:4a:4f:9e:60:69:36:4f:98:2a:0d:50:69:e8:81:d9:
1f:0e:a6:78:ac:f8:15:a0:70:19:52:e6:77:e5:aa:1c:e4:7b:
6e:a9:68:8d:63:be:af:79:77:48:a5:c8:3f:ec:ed:3c:d3:8f:
75:3a:85:ab:16:61:c6:0d:32:66:15:6f:7e:c5:0d:3e:05:a1:
4e:28:a2:cc:93:83:9a:6f:c8:06:c4:72:ed:53:14:79:17:58:
0a:00:dc:4e:b9:0a:e3:54:dc:2f:e7:6e:e6:59:36:90:6b:8d:
61:1e:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net