Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/1i8lGmJ5i6UT_Z4SKHCERyzZNVw.roa
File: 1i8lGmJ5i6UT_Z4SKHCERyzZNVw.roa (raw, json)
Hash identifier: hWKRS/+25S0BVQ5nzxmtlBQDiT2ohphIRKRBcrwELHg=
Subject key identifier: D6:2F:25:1A:62:79:8B:A5:13:FD:9E:12:28:70:84:47:2C:D9:35:5C
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 0C8FBFF9
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/1i8lGmJ5i6UT_Z4SKHCERyzZNVw.roa
Signing time: Sat 01 Jan 2022 12:54:28 +0000
ROA not before: Sat 01 Jan 2022 12:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207151
IP address blocks: 185.165.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210747385 (0xc8fbff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Jan 1 12:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d62f251a62798ba513fd9e12287084472cd9355c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:21:5c:8e:75:e3:28:8a:76:0c:30:ca:01:
70:e8:6b:cf:6d:6b:91:38:e7:df:f0:39:c7:8a:87:
89:fb:e9:14:17:47:6c:77:57:d6:a0:54:e7:43:1a:
1a:7f:b9:56:0a:42:c8:1f:eb:52:42:87:48:85:ab:
89:7d:52:29:76:32:9f:07:ed:04:d6:86:55:af:d3:
aa:83:d1:0a:2c:a3:ad:e8:e5:12:a5:33:40:28:50:
3d:5f:94:e3:92:da:2a:29:8f:fe:97:d2:c2:46:8c:
37:96:e0:2f:24:d8:8c:e1:77:c0:c8:3e:f9:4c:de:
ef:11:93:4a:cb:1d:cc:0a:4a:30:71:e3:70:ab:49:
33:66:32:70:cb:fb:cb:d7:de:b5:21:89:0e:5b:53:
b8:d8:d4:70:eb:42:95:7a:c2:84:26:e1:7a:60:75:
a5:b4:f9:b0:d3:3d:7c:20:01:84:e9:5f:59:32:7f:
23:10:72:bf:d3:29:dc:30:f4:4c:06:be:cb:4f:d6:
c5:13:76:b6:8d:68:79:47:55:18:d5:09:56:6b:25:
05:08:1e:1d:91:94:11:55:d3:bd:58:44:f6:f8:b3:
7d:d9:e2:29:ef:e5:2f:d5:e7:7f:90:4c:b0:90:a8:
fa:bb:75:fd:c5:76:a1:c7:82:fd:26:e2:2f:fa:c1:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2F:25:1A:62:79:8B:A5:13:FD:9E:12:28:70:84:47:2C:D9:35:5C
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/1i8lGmJ5i6UT_Z4SKHCERyzZNVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.64.0/22
Signature Algorithm: sha256WithRSAEncryption
51:79:b3:60:1f:7a:35:49:d0:d9:88:cf:00:cc:43:46:a6:f5:
04:a2:06:8e:4a:f6:64:6a:e7:16:3f:0e:8a:ae:25:4a:4f:5f:
15:0c:12:71:1d:0d:1b:bf:a1:48:1c:ae:0b:2c:11:a3:1d:ee:
2c:f9:c0:e5:ac:1f:29:9b:75:5d:a0:28:84:48:34:ba:00:1e:
7e:62:eb:c6:a6:33:52:76:e1:08:fd:76:72:9b:31:80:5e:bf:
a3:8f:6c:56:e2:1b:8e:32:ce:20:dd:06:dd:47:e1:a6:c1:8e:
92:fd:b8:b0:2c:8b:5a:d0:97:83:22:b4:d0:e2:1e:d6:02:d8:
0e:a5:fa:30:5d:38:b5:e7:83:ba:5c:d3:c5:65:66:57:c4:6a:
50:4c:09:87:78:f0:9c:dd:b3:65:19:0e:90:e1:fc:9f:91:37:
f5:02:79:9b:b7:a0:bd:b4:42:ee:fe:b3:24:a6:56:bd:a5:63:
4d:16:93:7f:a2:33:21:7e:26:b4:87:a0:28:52:58:e6:08:7a:
a9:4b:ed:9c:65:2e:d8:8d:8e:08:67:c1:8b:d6:4d:43:95:db:
0a:58:ef:1a:4e:1b:f0:40:bd:d3:94:11:62:25:19:c1:a6:86:
ad:71:37:9c:1a:90:46:fa:6b:0b:52:8f:16:8a:74:8b:41:27:
d0:f6:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:26 2023 by rpki-client on console.sobornost.net