Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/U6C1GJtn9WXhD71CmuUUD6xC4Kg.roa
File: U6C1GJtn9WXhD71CmuUUD6xC4Kg.roa (raw, json)
Hash identifier: 5/GnKV5hSwATOdjW+qIFFxgCWIY2f9aHXtckQgICgqM=
Subject key identifier: 53:A0:B5:18:9B:67:F5:65:E1:0F:BD:42:9A:E5:14:0F:AC:42:E0:A8
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 08A3F612
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/U6C1GJtn9WXhD71CmuUUD6xC4Kg.roa
Signing time: Sat 01 Jan 2022 02:54:48 +0000
ROA not before: Sat 01 Jan 2022 02:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199667
IP address blocks: 185.110.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144963090 (0x8a3f612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Jan 1 02:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53a0b5189b67f565e10fbd429ae5140fac42e0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:51:f9:cb:54:37:b9:93:93:6b:47:35:14:
5e:2a:3a:3c:21:45:7c:c0:8b:d3:a9:59:c7:7b:0b:
60:8f:47:f8:64:4e:1b:bc:c4:46:5c:7a:c2:52:ec:
76:a2:ef:ae:c4:13:08:8a:4d:45:d1:e5:07:0d:c9:
ff:bd:06:da:62:60:3d:bc:53:28:9a:5e:86:df:34:
fc:32:1d:7c:9b:84:eb:01:ea:8a:a2:61:41:f2:5d:
39:b1:c8:5c:66:45:4c:4e:d2:19:ec:83:df:f6:16:
20:08:85:59:ee:d9:6a:44:a0:ad:39:32:f2:c1:db:
d9:6c:9c:43:f3:02:a0:b5:d1:31:b0:d1:64:a3:f0:
03:12:36:e3:cd:47:0b:c0:75:b6:75:f3:b1:79:58:
b3:1b:41:31:8f:94:25:2b:b3:39:78:89:bd:9a:b1:
ab:ae:2e:4c:b9:2c:a5:f4:40:ef:e5:7b:45:70:be:
cf:7d:2c:28:4f:0f:5b:02:ea:36:82:d3:b3:43:1a:
f1:b0:b5:fc:c5:53:43:89:f3:86:be:97:41:a2:fa:
e9:a4:91:f5:ec:c4:c6:ec:30:2c:ad:7b:52:f0:df:
06:c5:ca:35:df:8c:5f:66:da:38:ec:4b:82:9a:7c:
3c:b1:30:99:71:64:38:bf:30:32:54:a4:fa:09:7a:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:B5:18:9B:67:F5:65:E1:0F:BD:42:9A:E5:14:0F:AC:42:E0:A8
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/U6C1GJtn9WXhD71CmuUUD6xC4Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:df:98:c9:7f:4a:c8:f0:d8:bd:ff:e1:b1:2f:71:32:ba:18:
08:e6:b0:85:ce:7c:f9:ee:56:ab:51:da:3f:80:71:12:b4:f1:
43:ef:4b:6a:a7:5c:6c:e1:1d:71:52:5b:a3:48:5a:16:4a:00:
3d:50:0f:cd:ba:86:2b:e8:a2:f0:bd:ff:69:fe:83:b8:d2:52:
da:84:29:1e:f9:43:3c:ea:93:8d:35:08:bd:fb:34:c5:a1:a9:
9d:c9:8e:82:35:95:33:80:10:20:49:df:dc:13:3f:62:90:50:
4a:26:bc:9f:f2:4b:ed:53:70:bd:b4:30:ed:e5:fe:8c:38:be:
aa:d7:bb:03:7d:ff:64:15:cc:a7:b7:01:e5:c4:b9:ae:e9:f9:
ec:78:f3:d2:18:7a:7f:5a:53:45:4b:4c:d2:cc:4f:4e:c7:26:
84:0d:e0:9f:e4:57:58:46:48:97:21:ac:86:13:55:6c:4d:ec:
49:b7:f8:76:fe:30:11:16:e2:01:53:dd:90:46:bf:7b:f6:7e:
5a:9d:b3:23:bd:06:93:90:7b:4c:89:46:f5:19:06:c8:a8:f2:
8c:5b:67:dc:b2:73:a1:90:7c:5b:ca:1f:ae:54:13:a2:9c:63:
a5:c2:27:c9:a0:7a:71:bb:36:9b:f4:ad:54:f9:ed:e0:62:e1:
60:c4:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net