Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/o9QXhD-tjmiUdZ60od1EI9KFRXc.roa
File: o9QXhD-tjmiUdZ60od1EI9KFRXc.roa (raw, json)
Hash identifier: uYe3OtpLO6xcehNpv24EbAMaqu+hIqBXZOCFJVmm4lw=
Subject key identifier: A3:D4:17:84:3F:AD:8E:68:94:75:9E:B4:A1:DD:44:23:D2:85:45:77
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 1398A52D
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/o9QXhD-tjmiUdZ60od1EI9KFRXc.roa
Signing time: Fri 29 Apr 2022 10:22:51 +0000
ROA not before: Fri 29 Apr 2022 10:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 185.30.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328770861 (0x1398a52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Apr 29 10:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3d417843fad8e6894759eb4a1dd4423d2854577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:ee:52:3a:e2:e1:b0:63:91:10:07:f8:32:
81:55:89:af:c1:a4:cf:a3:57:69:68:3d:57:72:25:
e4:8c:a1:87:0f:fa:be:ff:59:1c:7e:e2:8e:8d:a1:
9e:99:24:50:d1:a7:f2:c4:f8:1e:ed:40:92:78:8f:
c3:bb:87:fa:1c:c0:ca:e4:d1:af:2b:33:61:86:b1:
31:76:59:86:16:44:07:b8:3b:56:59:ad:63:1e:a8:
0f:71:35:24:2f:84:58:e1:6e:bc:2f:84:74:e1:b2:
52:39:7f:79:aa:1f:0d:35:c2:9e:30:63:be:ed:73:
51:41:4e:0d:22:bb:96:d3:71:f4:3f:c5:0d:f3:b0:
91:c4:80:93:8f:23:53:d4:91:36:7f:24:09:54:42:
9f:0f:73:ef:c3:db:79:36:c4:35:7b:c2:9b:f8:11:
cf:a4:fc:77:a9:25:fa:36:b0:7b:16:15:a1:64:eb:
40:34:72:b8:66:7d:c2:e4:3c:0c:e1:62:24:7e:a7:
1c:b3:e9:44:5c:7a:c8:99:1c:3d:b5:eb:f9:19:dc:
a7:7d:44:87:c8:98:85:94:50:c6:07:c7:36:12:36:
04:72:97:19:c6:d9:22:1e:0f:c2:3b:6e:5a:ab:5a:
a3:78:e2:04:26:b0:fa:36:1b:4f:53:d8:8d:80:d9:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D4:17:84:3F:AD:8E:68:94:75:9E:B4:A1:DD:44:23:D2:85:45:77
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/o9QXhD-tjmiUdZ60od1EI9KFRXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.22.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a9:c8:80:ec:6d:a7:ea:bb:01:da:d7:70:48:57:08:30:26:
de:70:90:2f:57:91:75:7b:23:3f:34:be:0e:66:da:c5:03:ed:
15:50:e5:2d:99:c5:7a:f4:4a:6a:1d:18:7e:a1:fc:4e:97:92:
8d:f1:39:39:42:1d:e3:e6:c3:dd:9a:64:52:c0:a1:46:03:e2:
1b:93:42:a7:cd:3a:2b:eb:83:4e:44:c4:c8:3b:bd:9e:3f:a0:
5f:96:dc:ae:c9:ba:0c:e3:6a:2f:1f:8d:95:c9:2f:c6:59:e7:
78:3f:93:1c:aa:42:4b:b4:c1:23:14:ef:91:0e:a9:a4:73:ef:
16:79:9c:f1:19:71:10:c2:b2:29:ce:ce:88:0a:9c:12:ca:07:
5e:fc:57:cb:aa:92:88:88:30:9b:c2:cb:13:36:2c:99:59:aa:
c3:8d:21:31:3d:21:94:b3:13:38:0b:72:62:c6:d9:dc:02:e4:
0c:d7:d6:3c:fb:a3:58:3d:54:2a:9b:13:41:dd:13:46:70:32:
3d:48:69:6f:23:95:33:c7:ea:bf:87:da:a6:12:a2:44:b0:38:
1e:3a:81:e2:b9:54:cd:c6:fb:90:a1:d5:0b:1f:06:02:18:b9:
b8:e7:c6:ef:29:25:3b:63:cf:ea:3b:12:9c:4b:c9:a7:d9:aa:
84:14:a6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net