Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/tDO-iH3kv_n3SsG33WI7dWLpfRA.roa
File: tDO-iH3kv_n3SsG33WI7dWLpfRA.roa (raw, json)
Hash identifier: dOzF7l1S4b//5bEwblkMWXMT2LqClKG3HYukeUmRtV8=
Subject key identifier: B4:33:BE:88:7D:E4:BF:F9:F7:4A:C1:B7:DD:62:3B:75:62:E9:7D:10
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 04526512
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/tDO-iH3kv_n3SsG33WI7dWLpfRA.roa
Signing time: Tue 05 Apr 2022 16:33:18 +0000
ROA not before: Tue 05 Apr 2022 16:33:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48481
IP address blocks: 217.64.152.0/22 maxlen: 22
217.64.152.0/23 maxlen: 23
217.64.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72508690 (0x4526512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Apr 5 16:33:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b433be887de4bff9f74ac1b7dd623b7562e97d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:31:0d:0d:03:c7:d6:13:45:1c:d0:c8:d9:
28:ec:46:3e:0e:ae:44:6a:ac:42:64:02:73:21:64:
53:58:f1:7f:df:31:c2:12:90:8b:0e:4d:55:aa:36:
cc:d9:0e:72:7c:48:88:6e:53:5c:f8:32:50:bd:e6:
75:09:93:f6:57:7c:96:e7:72:b2:45:b5:8b:b3:29:
2c:46:e3:1b:07:2b:c7:e1:22:32:79:16:3d:99:78:
6a:a0:03:17:1b:db:8c:7a:87:d0:c9:60:89:a4:69:
9c:bc:26:9a:7d:03:7b:e9:ba:39:c6:0f:a4:e4:01:
13:91:d8:06:8c:e8:06:db:c8:65:84:a9:2e:68:6d:
07:45:83:a8:7a:10:c4:9d:fa:f6:cd:b3:a6:b8:ab:
6c:6f:87:54:9b:07:3b:ba:5e:10:90:1f:da:44:a9:
6c:82:99:c0:0c:34:7f:27:18:6e:5c:d9:12:f2:9f:
f1:2f:99:4f:fa:89:23:5d:17:e1:25:6d:6b:06:b3:
06:15:61:dc:5d:64:eb:25:7c:c4:79:c7:28:3e:eb:
35:18:86:f2:a8:8f:dc:2b:3a:47:d1:d8:ef:6c:d0:
70:fe:d5:0d:26:a6:80:16:63:c5:3a:08:e2:be:cb:
08:85:f6:98:74:93:38:0b:2d:37:a4:0d:67:ac:83:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:33:BE:88:7D:E4:BF:F9:F7:4A:C1:B7:DD:62:3B:75:62:E9:7D:10
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/tDO-iH3kv_n3SsG33WI7dWLpfRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.152.0/22
Signature Algorithm: sha256WithRSAEncryption
71:f4:ef:31:34:ff:5e:e9:a0:98:6d:45:73:ff:9b:89:54:6b:
b5:a9:f2:2e:12:2c:50:13:32:ca:69:39:06:60:1b:3e:2f:b6:
25:d7:9d:43:35:5d:f8:25:5a:c0:ac:15:e1:08:6a:53:60:74:
69:de:44:bb:b6:61:cd:79:26:96:d0:23:0e:3d:d4:02:54:85:
91:99:94:60:78:cf:bd:b1:5b:ff:cf:2b:9f:f6:38:21:db:3a:
ba:96:94:92:55:bb:43:51:d6:7d:22:a9:68:c7:df:92:7e:4a:
4d:39:ff:96:e4:85:1a:29:f7:5d:69:9f:e5:87:af:9c:2c:6e:
ab:dc:a8:7f:7d:d6:12:fb:fb:44:45:49:8a:93:a0:01:30:da:
51:2a:42:fd:d1:37:3b:12:bb:87:ce:0e:e8:3a:05:41:1e:47:
f2:29:f4:9f:47:5a:f4:7d:7b:c9:61:02:b3:83:c1:3b:9d:da:
3d:4d:8e:53:26:ae:11:25:8e:ad:a2:83:af:e2:f3:b7:7d:96:
2a:6f:4d:87:48:55:66:e5:21:fa:ac:e0:48:64:a3:a1:73:63:
69:5a:9a:b5:59:c4:f7:de:e7:af:61:b9:16:57:2f:6d:d8:4f:
1b:d4:8c:3c:ca:70:38:b7:f7:b3:e9:2c:a5:f7:59:e1:1d:c3:
c8:cd:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:29 2023 by rpki-client on console.sobornost.net