Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/1-bGfkT6DrXl9poUEIEn1d-i2_sA.roa
File: 1-bGfkT6DrXl9poUEIEn1d-i2_sA.roa (raw, json)
Hash identifier: nGJhpg6vAmZe+wA6U1H3HWY5KneU07aLvxy7C80HS7M=
Subject key identifier: F9:B1:9F:91:3E:83:AD:79:7D:A6:85:04:20:49:F5:77:E8:B6:FE:C0
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 130AC97A
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/1-bGfkT6DrXl9poUEIEn1d-i2_sA.roa
Signing time: Sat 01 Jan 2022 03:51:35 +0000
ROA not before: Sat 01 Jan 2022 03:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5400
IP address blocks: 185.68.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319474042 (0x130ac97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jan 1 03:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9b19f913e83ad797da685042049f577e8b6fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:25:55:50:c0:f2:c9:9a:90:49:c2:ac:2e:
bf:0f:10:35:1a:e6:23:1a:bf:5a:70:86:38:c8:d5:
1c:c5:b9:bf:48:16:79:c1:3a:c1:5b:5a:08:56:24:
22:13:2b:b6:d5:67:6a:da:ee:19:36:0e:59:62:8f:
81:fd:ef:b4:ec:48:ec:9f:1a:62:3d:60:fa:d1:a0:
32:71:7f:c8:92:ea:87:58:25:71:b5:db:dd:e3:27:
ba:30:3a:6e:0b:d7:d4:79:b6:27:9d:2e:c8:a7:90:
63:39:c0:b2:62:e8:60:12:7f:9f:77:d0:4a:94:c7:
57:00:ac:73:79:78:83:21:0c:40:47:b0:b3:3c:2b:
bf:2f:fe:dd:6f:c7:9f:58:5f:15:0e:37:4f:05:91:
50:57:f8:5c:51:c3:3e:bd:e1:e2:02:a5:6a:c7:f1:
58:fa:c8:5d:5a:dc:77:6f:d9:24:3b:d8:4d:13:04:
76:56:39:d0:ae:c0:9f:60:ad:66:cc:2c:32:69:5c:
bc:0e:d9:89:8a:4e:7d:b4:9b:7f:a4:b3:21:06:31:
85:10:80:26:4f:66:0b:ec:91:26:a2:2e:0d:39:89:
b0:b0:96:f7:3a:6b:5d:db:d5:81:70:db:60:6e:21:
91:56:a3:8a:3d:37:a1:b2:ad:9e:bd:9e:df:8b:08:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:9F:91:3E:83:AD:79:7D:A6:85:04:20:49:F5:77:E8:B6:FE:C0
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/1-bGfkT6DrXl9poUEIEn1d-i2_sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:04:b3:64:ac:d2:43:ec:69:bb:73:76:d8:8a:1a:61:99:78:
c8:35:64:d0:32:e7:ed:a1:06:3c:62:92:5a:44:b8:29:b9:88:
06:b3:fa:1a:60:d4:b5:ee:e3:40:8d:af:f6:21:c7:0f:b0:5d:
6c:af:fb:90:43:47:bd:8a:1c:bc:38:a2:29:9e:5d:22:92:b2:
aa:56:2b:84:31:4f:c4:55:b4:49:e8:eb:89:4c:6b:cb:01:79:
80:d5:6f:9b:62:8c:33:6f:f1:68:c7:58:1f:22:17:51:63:64:
84:ca:12:f7:91:59:f0:ae:39:d3:7c:12:d8:08:ae:aa:bf:3d:
66:05:f0:c8:ab:3f:88:fa:c8:e5:e0:a6:a5:14:27:c1:54:01:
e6:bb:e7:42:8f:58:3e:e1:51:72:9a:33:48:ed:31:06:10:4b:
39:95:61:07:f4:7a:5f:85:04:03:e6:be:df:f1:94:bf:45:f9:
a9:6e:83:7d:49:39:a1:25:6a:fd:49:6c:89:ba:20:51:5e:bd:
ac:03:77:81:50:ad:87:b3:09:7c:13:95:ec:71:e3:7d:a0:c5:
d7:7e:0d:9f:d8:c3:9e:37:26:e0:fa:24:ef:d5:70:b9:4e:6c:
8c:6d:3b:b5:db:9c:be:76:00:3c:e3:62:46:7c:26:26:70:24:
cd:7f:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:19 2023 by rpki-client on console.sobornost.net