Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/qJ99sBjnMuAsbdz3WVfFzXDB5JQ.roa
File: qJ99sBjnMuAsbdz3WVfFzXDB5JQ.roa (raw, json)
Hash identifier: 9zm2DT6lSI0XqM3aMYr6zgBO7FhD0Z8whXMyaptWDqg=
Subject key identifier: A8:9F:7D:B0:18:E7:32:E0:2C:6D:DC:F7:59:57:C5:CD:70:C1:E4:94
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 1A2A4A98
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/qJ99sBjnMuAsbdz3WVfFzXDB5JQ.roa
Signing time: Thu 07 Apr 2022 10:40:33 +0000
ROA not before: Thu 07 Apr 2022 10:40:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8364
IP address blocks: 195.216.96.0/19 maxlen: 19
212.126.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438979224 (0x1a2a4a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Apr 7 10:40:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a89f7db018e732e02c6ddcf75957c5cd70c1e494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:14:66:e1:d7:4a:5f:5c:ee:b6:68:0a:4a:
1a:9a:92:da:06:1b:7c:31:76:c1:ae:c6:af:c8:f0:
5f:37:66:4b:3f:c1:94:37:40:3d:03:96:db:e1:be:
6e:68:6e:70:a4:a8:ab:66:6c:30:e0:72:d3:2f:2f:
83:78:a0:4b:73:69:df:75:ed:bf:fd:04:d5:37:52:
b5:4a:d5:48:a5:f6:7a:f9:57:ea:06:2c:81:9f:24:
38:e0:43:b7:7c:89:fd:45:c1:86:e0:3f:07:df:54:
d9:c8:1b:83:03:27:67:0f:f9:03:35:8d:bd:a3:9b:
52:6e:9b:48:d4:a1:f8:e3:9b:35:cc:1b:f1:18:32:
30:6e:9b:2e:8d:d9:b7:81:95:dd:49:5e:57:22:8c:
8c:2c:a0:22:d1:40:16:bd:4c:88:77:82:c9:05:a4:
71:e3:ce:52:30:78:a1:1a:e3:25:9f:78:89:53:25:
6f:09:0d:f4:e9:37:2d:ba:5d:f8:db:35:10:25:8a:
51:3a:47:84:ee:d3:a2:32:24:c6:e6:32:94:81:51:
bd:3e:aa:66:67:a0:58:a8:ee:aa:6a:7a:22:77:dd:
02:f3:cb:81:a7:7f:8d:19:cb:0f:fe:0c:dc:f6:09:
78:66:7e:ff:00:7c:61:82:de:a6:8a:1d:b3:33:6e:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:7D:B0:18:E7:32:E0:2C:6D:DC:F7:59:57:C5:CD:70:C1:E4:94
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/qJ99sBjnMuAsbdz3WVfFzXDB5JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.96.0/19
212.126.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:f0:ee:cb:a4:f6:33:f8:81:5a:1e:f8:c5:d5:c5:41:02:ed:
26:5e:c0:e6:cd:22:a5:bd:9e:6a:8c:4c:b4:5d:f4:1a:a9:d4:
71:20:b0:df:1e:c1:ae:fc:a5:6f:24:80:33:3d:fe:a4:c5:88:
f0:11:b4:c5:6f:e5:00:63:31:44:70:7b:cd:75:46:a8:20:9a:
8b:e3:70:1f:76:b1:67:9d:e7:e6:6c:c3:ca:52:80:bb:28:b7:
89:62:ec:18:dc:e5:62:39:b8:43:b2:6e:56:18:a0:c1:cb:af:
0f:3f:ff:6b:92:82:2c:6e:71:88:4c:5c:71:f1:e0:95:44:e4:
db:55:8f:9a:ab:0d:6c:8d:bb:ee:90:39:2f:f5:f9:90:cc:7c:
4c:07:bd:65:aa:51:31:34:50:af:05:bf:f1:d8:25:e0:54:5d:
70:03:31:89:fa:61:c7:20:f0:50:6c:8e:19:31:6d:32:06:d0:
f8:be:76:a3:e3:0f:dd:61:22:ec:82:4d:b3:92:79:bc:5a:a5:
c2:4f:5f:5e:4f:30:09:d7:48:f8:6a:24:1e:fd:7f:e4:66:14:
cc:17:2a:bb:3f:a6:d8:d9:3a:89:09:e7:38:70:2e:49:ef:e7:
d1:cb:f5:87:7a:b4:d6:77:52:15:17:30:98:7f:5a:da:31:37:
5a:da:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:22 2023 by rpki-client on console.sobornost.net