Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/bKAIfzj4l3slnb-M1yDlfK_vYP8.roa
File: bKAIfzj4l3slnb-M1yDlfK_vYP8.roa (raw, json)
Hash identifier: RaHCkDigSjzQHjqWfRD13kL2oWYE9xQapETvOVsa2yY=
Subject key identifier: 6C:A0:08:7F:38:F8:97:7B:25:9D:BF:8C:D7:20:E5:7C:AF:EF:60:FF
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 9E7A7A
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/bKAIfzj4l3slnb-M1yDlfK_vYP8.roa
Signing time: Sat 01 Jan 2022 01:53:00 +0000
ROA not before: Sat 01 Jan 2022 01:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50770
IP address blocks: 185.177.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10386042 (0x9e7a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Jan 1 01:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ca0087f38f8977b259dbf8cd720e57cafef60ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:f9:7f:1c:b4:3e:a0:2d:bb:ae:ac:ce:82:
90:2c:e9:0b:b9:da:a7:c4:e9:23:94:42:e7:07:4d:
36:e2:b7:df:52:1b:b2:16:38:d1:5a:75:4e:f5:51:
c7:ea:af:62:57:24:6e:b0:c5:32:b2:46:83:ae:61:
65:af:4e:1a:04:16:60:a4:e2:73:c6:34:1e:a5:02:
46:ae:40:5a:70:9f:9d:64:b9:52:5c:17:70:4e:3f:
89:72:6f:f9:5e:67:a1:73:01:0f:09:78:32:46:08:
8a:af:cf:b1:d4:71:77:fd:25:0c:91:7b:d5:15:0c:
87:ac:a6:74:2c:12:3c:41:e5:77:0f:24:43:e8:53:
78:fe:b6:ec:5d:b3:99:d1:bc:66:18:c7:5e:10:36:
10:aa:5e:11:68:06:43:40:6a:d0:40:7e:1c:d5:5d:
6e:ab:7f:c3:b3:2d:73:39:81:fc:b1:27:3c:0d:33:
f7:09:23:28:6d:1b:33:69:56:07:8a:bd:6d:28:36:
17:fa:ce:fe:9f:e2:35:dc:cf:83:c5:63:f4:22:8a:
43:93:6d:59:be:e2:d4:7d:d9:71:ef:9d:69:bb:26:
b3:b2:ee:a6:c4:1e:99:97:b4:87:b7:7e:d0:41:b3:
61:5b:d1:ef:12:d0:f5:71:25:2c:6a:14:d7:5d:6d:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:08:7F:38:F8:97:7B:25:9D:BF:8C:D7:20:E5:7C:AF:EF:60:FF
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/bKAIfzj4l3slnb-M1yDlfK_vYP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.211.0/24
Signature Algorithm: sha256WithRSAEncryption
13:23:95:ea:94:5a:7d:97:80:04:0f:9e:db:2d:a2:ea:7b:83:
c8:6f:a4:38:58:89:21:de:8c:92:46:50:4b:ed:32:ba:c9:03:
f7:58:d3:7c:ff:12:10:e1:9e:fe:16:36:b5:e5:f7:3c:f8:93:
d9:48:da:be:e7:19:41:b1:d6:6a:bd:2d:00:7d:52:9e:0e:89:
34:65:11:73:35:b3:ac:b2:de:f5:ca:28:92:85:cb:e0:15:43:
a2:a5:0d:f4:a0:cc:43:e7:ee:20:0c:d6:b0:2f:b1:f3:dd:3c:
fd:ea:98:61:41:7b:8f:6a:65:9e:da:b6:5e:67:4f:f0:85:38:
fb:00:63:6c:96:62:f6:31:62:11:79:77:e4:f2:c4:e7:c1:69:
4d:49:5a:74:54:3a:06:1e:3e:38:54:31:3c:6c:61:39:cd:b8:
a9:4b:03:01:10:3d:e1:ba:9b:fa:ce:bb:66:99:cd:50:dc:b2:
13:99:be:77:bf:b6:ba:39:11:9a:0d:92:12:73:f4:26:51:77:
38:73:49:b9:aa:5a:c8:31:52:2d:4a:dc:98:24:00:8b:a3:f8:
43:40:d6:22:c7:9c:63:a9:ca:7e:4b:7f:22:4a:f5:fe:98:f7:
41:a9:a9:12:58:12:a1:3d:8b:97:93:e4:05:fc:19:64:1b:53:
09:9a:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net