Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/xyvpCm5Dh57fNZOgY0RPqG3pkuk.roa
File: xyvpCm5Dh57fNZOgY0RPqG3pkuk.roa (raw, json)
Hash identifier: pqcq/d2PYta92wQwH9aEFDV88fOtY3vBXHkyhvkdjqI=
Subject key identifier: C7:2B:E9:0A:6E:43:87:9E:DF:35:93:A0:63:44:4F:A8:6D:E9:92:E9
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01852A6C1A6F34EB7FE92CA48472625D2292
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/xyvpCm5Dh57fNZOgY0RPqG3pkuk.roa
Signing time: Mon 19 Dec 2022 12:46:45 +0000
ROA not before: Mon 19 Dec 2022 12:46:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203252
IP address blocks: 185.224.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:6c:1a:6f:34:eb:7f:e9:2c:a4:84:72:62:5d:22:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Dec 19 12:46:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c72be90a6e43879edf3593a063444fa86de992e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:73:22:f7:4f:67:68:d8:21:50:06:69:f9:
21:ad:88:39:09:e4:96:b5:14:e4:e0:4f:21:88:95:
b3:01:a8:2d:80:7f:35:3b:e9:93:11:1b:7b:63:61:
08:81:4b:f9:3a:da:ff:cb:e8:fc:4c:77:90:fb:59:
e3:07:78:94:84:c4:d0:6f:5e:af:b5:ad:b4:0f:92:
57:26:e5:22:0c:30:65:4b:24:51:fa:28:23:39:e8:
86:69:db:7d:e5:57:dd:4f:bc:ca:55:78:5c:dd:80:
32:90:d9:42:70:9a:15:af:32:be:c9:a2:a9:3f:9f:
83:3a:a6:47:16:41:40:a4:7b:8f:0e:31:95:8e:43:
d0:86:dd:a1:1f:bc:e4:10:13:36:34:2f:cb:6b:81:
23:f0:d5:4b:df:05:55:4d:17:8d:dc:ae:62:47:88:
cc:8f:ec:43:18:b7:4d:a0:fa:ab:4b:d1:0a:76:9b:
ce:27:de:0e:e4:24:68:9a:f8:5b:70:30:65:61:5c:
cc:85:12:c3:a1:a2:db:9b:fd:57:d1:88:51:fe:88:
c6:53:bf:a1:04:8b:e1:d5:98:ea:9b:db:1e:45:9e:
e5:8c:8d:e2:cf:87:6a:a7:e5:2d:09:0d:44:7b:e6:
26:18:9d:80:cb:12:7b:ef:3b:e2:93:40:08:b5:78:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:E9:0A:6E:43:87:9E:DF:35:93:A0:63:44:4F:A8:6D:E9:92:E9
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/xyvpCm5Dh57fNZOgY0RPqG3pkuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.212.0/24
Signature Algorithm: sha256WithRSAEncryption
09:24:a7:43:8a:2c:85:02:23:24:56:87:6a:63:48:5f:fa:b2:
fb:32:1d:9f:08:d4:ac:59:92:7b:a6:53:e7:5b:55:98:50:15:
40:46:73:37:30:96:4e:15:b8:a5:ca:6c:dc:55:eb:e4:0c:e9:
47:0b:85:18:44:b1:3d:90:83:fb:19:1c:ec:3d:ca:62:44:76:
dd:9f:cb:c2:bf:23:23:85:71:86:98:3d:c3:c6:54:9f:e3:04:
58:71:cb:1d:d7:0a:d3:5e:f1:d4:2e:82:0b:50:16:94:cd:b2:
60:82:88:5b:c8:ce:89:2f:aa:12:2f:00:bf:69:68:df:06:29:
8c:ca:64:9b:55:ac:bb:30:a0:be:96:f9:8c:bc:df:0a:35:dd:
20:3a:54:8a:92:37:e1:22:c3:5b:15:70:ce:6e:ff:65:06:1f:
43:54:63:f3:57:48:07:06:b3:29:ea:d5:43:20:89:dc:a1:c4:
cc:a2:36:6f:16:c2:2a:82:d7:c0:fe:39:a3:66:cd:97:f9:66:
2e:fa:e9:44:e6:94:98:5d:41:34:6c:7a:a5:6a:91:c7:c1:2d:
d2:89:77:64:e7:67:3f:81:38:a9:92:9b:f5:6e:48:fa:fd:79:
b8:cb:49:a4:03:5b:4e:bc:94:c1:ac:21:14:0f:da:3a:c4:70:
d0:b5:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:19 2023 by rpki-client on console.sobornost.net