Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/gAnOgZwOE8tkUVOY4CxKEdNJMbI.roa
File: gAnOgZwOE8tkUVOY4CxKEdNJMbI.roa (raw, json)
Hash identifier: Ms1U21AMqDlr1YOP9/bZC0p6+3qqw1D8DITCWxKnI/I=
Subject key identifier: 80:09:CE:81:9C:0E:13:CB:64:51:53:98:E0:2C:4A:11:D3:49:31:B2
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 01CB66
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/gAnOgZwOE8tkUVOY4CxKEdNJMbI.roa
Signing time: Fri 22 Apr 2022 21:14:18 +0000
ROA not before: Fri 22 Apr 2022 21:14:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49935
IP address blocks: 195.62.90.0/23 maxlen: 27
185.135.191.0/24 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117606 (0x1cb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Apr 22 21:14:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8009ce819c0e13cb64515398e02c4a11d34931b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:25:a5:16:0a:72:23:e4:05:87:1b:73:1b:
e1:5f:f7:68:93:42:97:ef:01:c2:6c:0c:dc:b2:cc:
68:3b:e5:7d:77:f9:27:5b:23:1f:ca:08:13:8a:a4:
f7:da:54:82:3e:0d:24:81:c9:e7:62:94:84:3e:53:
b9:bd:ad:fd:47:45:5a:a9:3e:40:30:ca:d3:31:d1:
71:08:22:fd:33:8e:f9:02:3f:fa:91:a9:2c:57:09:
29:64:3f:0a:f4:16:26:e4:8b:58:18:5e:b6:f5:c2:
7d:e4:ff:a5:9e:54:9b:e5:01:fc:16:c3:0c:b8:a7:
9e:6e:50:3f:67:c7:40:63:49:c9:a5:e7:73:d0:61:
4e:b7:38:4a:29:9c:8e:b6:20:02:6c:30:e4:e8:fd:
90:ef:9c:d1:a2:b0:9e:e5:b9:4f:80:ec:47:62:18:
de:d6:9d:a3:2e:ae:1e:b8:a0:ae:73:32:c8:8a:be:
8a:2b:b2:f4:b8:7d:11:3c:ea:6c:67:0a:fa:a7:ea:
f8:96:4e:ba:58:63:c6:ef:45:0b:60:c5:9c:fe:3d:
5d:74:66:40:2b:2b:c9:7b:fd:c9:d7:86:36:1e:95:
19:f7:fb:ae:66:d9:c5:74:51:1c:30:2c:69:5f:d8:
32:db:fe:97:a2:71:98:f0:2f:2a:a4:b1:7f:b3:da:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:CE:81:9C:0E:13:CB:64:51:53:98:E0:2C:4A:11:D3:49:31:B2
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/gAnOgZwOE8tkUVOY4CxKEdNJMbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.191.0/24
195.62.90.0/23
Signature Algorithm: sha256WithRSAEncryption
59:c6:88:b8:ee:27:58:38:20:10:67:44:b6:28:c9:7e:01:2e:
f3:2c:78:8c:a0:73:6f:49:b2:cf:07:05:13:6d:da:b0:3c:79:
78:9c:1f:cc:a5:62:c0:a2:f0:cc:ea:2a:86:34:bb:e3:32:1c:
3f:7d:6e:4f:3f:7e:d2:41:1f:c1:46:60:62:4c:67:b3:e9:25:
18:6c:13:01:8f:64:2c:0c:1f:2d:cb:f2:af:60:4a:62:ac:12:
05:6f:90:5e:d6:81:6f:a2:8c:fa:ca:2c:59:17:3d:8c:4c:6b:
60:ee:5b:88:16:db:6b:04:dc:3a:e4:6e:95:c7:a3:03:2a:04:
6e:6b:dc:6c:91:46:02:b7:67:6e:26:18:13:2b:7e:a0:d9:ab:
21:37:82:81:14:9f:72:c0:fb:ec:72:c7:f5:11:2b:b2:ea:13:
ad:49:57:db:55:4c:61:5c:1b:26:e5:d5:13:e5:27:31:f0:14:
77:43:17:e4:b0:32:fb:cc:63:1d:36:11:51:cb:c9:99:03:2f:
aa:22:cd:d7:cc:f2:99:20:1f:fb:5e:8b:86:96:3d:61:6c:20:
58:1b:ee:75:40:97:47:7e:9c:63:68:4c:24:71:89:dd:5c:ce:
85:f0:76:2c:6c:6f:e4:33:f2:dd:9a:63:48:23:41:2a:2c:e5:
89:42:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net