Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/4ckNGMBMfr4O7U2KZcAk9tskoNw.roa
File: 4ckNGMBMfr4O7U2KZcAk9tskoNw.roa (raw, json)
Hash identifier: uJpoIJBp8z4HFrOXdAnGhVnFCNf6SZwf7IqTjsaw+7g=
Subject key identifier: E1:C9:0D:18:C0:4C:7E:BE:0E:ED:4D:8A:65:C0:24:F6:DB:24:A0:DC
Certificate issuer: /CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Certificate serial: C19531
Authority key identifier: 75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/4ckNGMBMfr4O7U2KZcAk9tskoNw.roa
Signing time: Sat 01 Jan 2022 00:56:12 +0000
ROA not before: Sat 01 Jan 2022 00:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 213.109.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12686641 (0xc19531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Validity
Not Before: Jan 1 00:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1c90d18c04c7ebe0eed4d8a65c024f6db24a0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:71:3f:46:07:77:a5:a0:cc:9e:5e:69:8b:
27:41:25:f0:88:79:35:15:29:87:80:dd:ec:dd:bd:
49:d2:f7:ed:8b:ad:d3:2b:5d:a0:69:c7:a8:ed:f8:
dd:71:47:75:d9:46:a3:f3:ec:60:55:d3:e3:3b:23:
5a:f4:a6:06:38:5c:06:e1:e8:00:10:27:ea:d4:7c:
db:8d:7d:76:1d:2b:e7:cf:07:be:aa:81:6e:30:e0:
03:1c:37:c9:bc:7e:19:22:36:40:d0:5d:ab:34:16:
f2:e9:73:fe:7b:4f:6e:74:2c:8e:04:5f:3d:5a:d0:
5d:00:82:53:99:9f:98:77:9c:0c:68:60:6f:73:77:
2f:c0:c9:69:97:35:fc:9d:65:a6:25:51:36:e8:cc:
19:02:bd:cf:d0:68:ad:87:c3:b0:54:ed:92:c3:4f:
3c:d1:3a:4f:d9:02:5c:5b:02:5e:99:ea:1e:07:10:
90:29:d9:ee:ff:b3:31:c4:5f:05:b6:b5:52:f5:5a:
8e:72:b7:af:83:63:78:7f:c2:da:8d:c4:69:8c:b3:
10:db:b2:22:b5:33:3d:5d:fb:d9:b6:c0:ae:98:c9:
33:84:2d:ab:c0:23:44:37:7c:a1:2d:ce:58:ba:80:
60:4a:38:ac:00:5c:37:a2:f7:88:00:99:84:84:62:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C9:0D:18:C0:4C:7E:BE:0E:ED:4D:8A:65:C0:24:F6:DB:24:A0:DC
X509v3 Authority Key Identifier:
keyid:75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/4ckNGMBMfr4O7U2KZcAk9tskoNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/deiysou6PcToYdXL9bwcyYyJ5XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4c:ac:a1:0d:b3:9e:84:e2:aa:81:72:a9:b9:dc:b5:3e:71:
c8:b9:26:a8:43:bd:25:14:aa:1f:be:6f:79:4a:fe:f9:7c:84:
c1:9b:af:65:f7:9e:24:45:51:34:0a:01:e1:c2:e9:1c:26:7b:
c3:68:de:b9:36:c9:9d:e9:ef:e9:9b:6d:d9:f2:c4:f8:56:1d:
d8:35:a0:87:d6:e2:00:a7:16:bc:8f:ac:44:2f:99:2a:a9:74:
ee:2a:43:f5:27:9d:48:bf:46:87:c2:fb:d8:4b:e4:3f:cb:95:
45:57:fa:7d:fd:94:ba:c4:25:2b:2d:f9:a3:60:63:9a:e1:ab:
6b:08:f5:3a:fd:fa:11:fb:6e:4d:63:dc:11:46:7b:17:cf:c7:
83:6f:3f:35:cf:44:90:91:ab:98:f0:14:8a:f3:7e:e8:a1:c0:
0d:2d:4c:0f:23:bf:fe:17:4d:6b:27:91:fa:f9:6d:1e:a5:06:
6c:0b:55:e4:ae:d3:ac:45:ca:65:63:b7:69:1c:38:de:96:86:
19:d1:02:b5:82:26:3e:4d:75:6d:23:84:e9:17:65:6f:56:da:
35:7f:39:e0:7d:ca:13:a8:05:d8:ce:9c:ed:8f:0e:66:b7:13:
0b:ce:58:f5:d5:3f:c0:3c:6a:db:9f:55:82:27:8c:ee:e5:03:
17:4a:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net