Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/uWtdtX6IEceD34GC4slVZLpxiwI.roa
File: uWtdtX6IEceD34GC4slVZLpxiwI.roa (raw, json)
Hash identifier: uI8wTDXURdpsCiQMephzVRQ8UyYui5YRRp9jL9BsOWk=
Subject key identifier: B9:6B:5D:B5:7E:88:11:C7:83:DF:81:82:E2:C9:55:64:BA:71:8B:02
Certificate issuer: /CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Certificate serial: 0181ED8D253840647ABA2F214A275CBEA74D
Authority key identifier: 3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/uWtdtX6IEceD34GC4slVZLpxiwI.roa
Signing time: Mon 11 Jul 2022 13:57:39 +0000
ROA not before: Mon 11 Jul 2022 13:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 195.211.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:8d:25:38:40:64:7a:ba:2f:21:4a:27:5c:be:a7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Validity
Not Before: Jul 11 13:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b96b5db57e8811c783df8182e2c95564ba718b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:b5:de:f4:b7:78:a3:9b:71:9b:c6:10:32:
01:7b:20:9b:2f:a8:0a:08:ef:bd:be:29:2a:14:bb:
4c:bf:d5:02:15:49:57:66:b1:d1:8e:8f:e1:eb:3b:
4b:ca:bc:f6:8a:6a:66:ca:0e:bd:3e:f1:cb:d5:1f:
12:66:3d:b2:d7:73:68:6c:ac:aa:51:85:fe:0b:70:
e4:9e:de:81:f8:d0:0e:1c:03:30:c2:86:3a:cc:81:
68:3e:cd:5c:ce:70:b5:a6:ec:b5:ab:ff:d9:da:e4:
fe:2d:ab:b9:62:6e:91:2c:7e:6b:eb:56:f3:f4:27:
a2:ca:1f:01:79:4f:e9:f5:2a:86:e3:46:78:a9:94:
29:cc:db:9b:b8:53:bd:db:28:ce:90:28:65:e9:e8:
82:cd:44:a8:19:5e:88:49:38:22:ce:f2:7c:7f:76:
1e:d4:8e:d8:90:d8:7e:d9:25:b3:5e:d8:59:28:84:
fa:bb:66:b9:de:8a:68:52:d7:27:bd:a3:4b:1b:20:
74:14:af:83:45:97:22:de:61:d4:a7:9e:57:ce:5d:
ad:0b:ae:fa:cc:2f:9c:73:00:e3:bc:aa:4c:d2:83:
8e:d8:7c:44:11:f0:5d:6b:ab:94:a2:c7:63:ee:31:
42:b4:a6:87:6d:7f:9e:bb:c2:db:83:6d:6d:83:56:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:5D:B5:7E:88:11:C7:83:DF:81:82:E2:C9:55:64:BA:71:8B:02
X509v3 Authority Key Identifier:
keyid:3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/uWtdtX6IEceD34GC4slVZLpxiwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
41:35:f0:67:bc:db:20:3b:04:40:82:8e:49:81:f3:73:b2:54:
8c:83:a2:c0:72:10:31:ff:ae:0f:14:70:cd:f5:56:b7:3e:23:
bf:da:fd:13:a9:c3:6b:1e:b1:bf:64:a5:e2:73:29:47:1e:fb:
80:5c:a0:03:aa:29:a6:6b:36:c6:e2:3e:36:60:ed:22:e5:6a:
44:d7:6a:1e:6c:e6:3f:30:81:78:a6:7f:88:dd:26:a3:bf:98:
70:b6:9a:36:30:f2:c6:11:70:40:f5:43:3a:a3:fe:b9:70:25:
83:0a:05:34:84:bb:60:dd:29:16:54:53:6d:a3:2d:c7:12:0f:
83:d9:d9:b5:7b:88:e8:52:0e:9e:09:b6:59:f4:bf:73:7f:45:
b4:01:84:a2:e1:e7:39:ae:27:0c:3d:bd:24:96:64:68:19:9f:
d0:e1:6a:bb:cd:4e:25:af:e2:2e:c0:b2:47:20:af:f7:cb:30:
ef:df:8f:bc:20:12:a3:59:26:4f:f2:7f:2e:34:70:1f:97:47:
99:ce:df:a3:05:a0:c6:2d:bf:63:62:85:67:95:06:0c:64:dd:
81:47:23:4e:34:50:71:97:f0:75:e3:be:c6:45:67:70:95:5d:
67:fb:58:f9:5a:f9:dd:07:6a:a3:ec:7e:27:e3:a5:a0:31:ea:
79:d4:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net