Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/KpCH6fZIG3ecAR7LQ3iEw74fHW8.roa
File: KpCH6fZIG3ecAR7LQ3iEw74fHW8.roa (raw, json)
Hash identifier: zI995nI6GRh7ro4hs6Jq/FR+TQulYbTuWZe9r3HHXs8=
Subject key identifier: 2A:90:87:E9:F6:48:1B:77:9C:01:1E:CB:43:78:84:C3:BE:1F:1D:6F
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 0B42C231
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/KpCH6fZIG3ecAR7LQ3iEw74fHW8.roa
Signing time: Sat 01 Jan 2022 12:04:11 +0000
ROA not before: Sat 01 Jan 2022 12:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26478
IP address blocks: 160.62.140.0/23 maxlen: 23
86.117.47.0/24 maxlen: 24
160.62.15.0/24 maxlen: 24
160.62.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188924465 (0xb42c231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 1 12:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a9087e9f6481b779c011ecb437884c3be1f1d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:54:c2:08:6f:39:36:4a:58:72:e2:a3:2c:
4a:c7:f7:0a:f1:d7:5d:96:8c:d4:01:3f:e4:4d:c7:
69:23:42:b9:ab:cf:c0:31:ad:f4:d6:be:ef:93:fa:
87:7f:d6:a4:bd:a5:77:bd:3a:36:61:52:49:95:d8:
5a:a7:55:20:94:35:e9:0e:9b:1e:43:83:42:f9:d9:
f7:8b:05:bf:05:c1:9e:8b:16:dc:8c:9f:2a:c0:22:
e4:80:10:fd:8b:78:95:28:f0:45:cc:22:c3:ce:a7:
d8:06:db:11:28:88:35:42:44:d8:ed:50:a3:f2:5a:
04:2b:04:00:4a:6a:0a:7f:36:e6:9d:82:6f:24:43:
b5:42:53:21:72:7a:31:9e:99:43:73:6a:fb:bc:ff:
f7:50:1b:10:42:d9:47:3c:ad:d6:24:a9:b1:a1:a3:
16:52:ad:e4:b6:74:a8:6d:5a:af:fa:bb:49:4a:a1:
aa:2f:7f:fc:07:2b:e4:80:74:1d:2f:48:0d:db:2f:
d2:bc:ce:30:59:aa:90:e6:1f:b2:e6:95:21:e5:94:
dc:5c:a5:96:6b:e4:6d:f8:31:55:6c:96:56:9d:30:
88:bc:07:6f:6e:8b:f1:61:e3:b1:c8:a4:80:c3:bd:
22:3a:5c:0d:0e:1b:9c:9b:b1:a8:eb:bc:12:52:f8:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:87:E9:F6:48:1B:77:9C:01:1E:CB:43:78:84:C3:BE:1F:1D:6F
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/KpCH6fZIG3ecAR7LQ3iEw74fHW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.117.47.0/24
160.62.14.0/23
160.62.140.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:32:3a:80:1a:10:a7:50:ab:29:a7:a8:e1:8c:ce:ed:ac:22:
cb:b8:47:e2:6d:22:40:fa:f3:b3:dc:b3:98:86:48:02:8c:1a:
aa:60:e1:ac:81:62:24:c1:66:2d:37:e3:5c:55:6c:82:74:36:
53:64:9e:b4:9f:1b:ef:af:ee:8b:f1:bc:e4:b3:c7:c0:9f:87:
66:11:88:b1:b6:d6:82:81:75:ea:f8:24:81:b0:ae:84:44:f5:
0b:33:93:58:3c:d1:c0:eb:14:20:66:9c:65:ec:8a:19:0d:ca:
57:8d:5a:f2:07:f1:34:5d:e3:02:50:43:80:65:44:3b:c7:a2:
23:2d:52:9f:08:1f:8c:c1:5d:84:50:8e:df:f4:86:7d:44:96:
e3:1a:f5:ce:c8:84:8d:cb:a5:a5:22:4c:0e:c7:e6:ae:ca:70:
05:a5:7c:c7:d1:6d:d5:19:ca:66:83:4a:04:1c:73:23:ae:25:
43:01:15:66:85:68:19:ed:4a:13:c7:fb:f1:4c:26:c4:0c:96:
2d:a3:35:96:af:e3:23:83:91:6e:81:ba:72:30:ab:6f:c8:1f:
fb:a3:14:08:e2:79:fc:54:ac:9c:82:f6:18:f8:93:2b:2e:9f:
18:18:bf:dc:7c:b4:9e:b0:41:35:0b:f6:7d:1d:3b:5f:42:96:
4d:fc:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net