Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/_9mfvHv7FW-4c8P-YQxJbSAkQXM.roa
File: _9mfvHv7FW-4c8P-YQxJbSAkQXM.roa (raw, json)
Hash identifier: +h/2/Psli1pP+p0QmdaEXjGzgW7xMGXT34CbWp8v5DM=
Subject key identifier: FF:D9:9F:BC:7B:FB:15:6F:B8:73:C3:FE:61:0C:49:6D:20:24:41:73
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 04349145
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/_9mfvHv7FW-4c8P-YQxJbSAkQXM.roa
Signing time: Sat 01 Jan 2022 11:03:19 +0000
ROA not before: Sat 01 Jan 2022 11:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.109.53.0/24 maxlen: 24
193.109.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70553925 (0x4349145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Jan 1 11:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd99fbc7bfb156fb873c3fe610c496d20244173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:8d:fe:19:31:75:c7:88:9f:2b:a4:18:05:
d3:91:87:70:7c:52:a5:b9:01:b8:d9:8b:95:a8:3f:
3d:f0:a8:e6:f0:65:7d:bc:d1:48:8b:e6:db:e3:c2:
e8:a1:54:b7:d6:99:7b:ec:40:ea:7a:9f:23:da:a3:
54:93:32:3e:04:db:4e:ec:5a:3b:ca:23:15:c9:7d:
2c:dd:01:ff:d7:a1:2e:45:ef:12:4d:e3:07:33:8e:
9d:c3:8e:4e:1e:ac:99:1f:2f:e5:7f:b1:3c:c7:97:
69:89:ed:58:87:7d:aa:dd:ae:c2:57:14:e2:d8:5c:
a5:17:07:15:5d:15:72:34:57:e8:c7:02:63:3a:68:
91:e5:98:1e:8e:00:9f:42:75:62:23:31:6c:13:94:
d6:77:fa:ae:d3:87:58:df:1c:18:55:ce:a6:fa:8b:
6e:3b:d1:7e:b5:65:b9:b3:d8:6e:1b:92:0d:6a:ef:
2a:0a:9a:aa:e2:fb:84:1a:e0:45:4e:cb:1c:70:03:
24:56:fb:3f:bd:55:70:9e:98:b7:6a:19:61:ae:32:
a1:5b:94:24:08:fd:4f:1f:27:3c:f3:cb:16:27:3e:
1d:53:3d:62:b3:33:95:2f:8a:3f:ad:5e:a4:c5:b4:
9a:90:76:e5:7d:74:7f:27:68:21:c5:a0:b7:10:b2:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:9F:BC:7B:FB:15:6F:B8:73:C3:FE:61:0C:49:6D:20:24:41:73
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/_9mfvHv7FW-4c8P-YQxJbSAkQXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.52.0/23
Signature Algorithm: sha256WithRSAEncryption
47:70:4f:7c:ff:bc:a9:33:94:1c:7f:84:ed:db:73:9c:14:5f:
cc:49:e2:f5:ea:6a:04:df:68:94:db:a8:27:2c:89:e0:ae:fc:
8b:ef:1e:2c:c7:e5:90:ba:17:15:75:2c:c3:02:d3:69:62:20:
ac:ee:93:71:18:bf:06:7b:a7:c1:2f:a3:0c:82:3a:67:12:07:
1d:8d:96:70:dc:a9:90:56:a9:c0:2c:8b:45:28:7a:f3:72:e3:
e3:12:0c:0f:3b:86:a6:30:57:0e:12:90:01:94:ac:0a:f6:96:
63:44:a1:30:72:e3:16:c9:d8:be:3d:11:1a:da:78:77:e3:ce:
0e:90:7f:4e:28:79:1b:45:5a:36:c4:d1:86:43:d8:72:0e:8d:
67:c0:7e:c5:e1:2b:1f:d0:ba:2e:09:bd:a2:21:13:c6:4e:07:
59:c9:2e:f8:0a:cb:2c:83:4f:62:9d:2b:9d:98:30:8a:0a:65:
10:5d:38:24:fe:72:d2:59:52:2c:71:fe:d1:eb:75:89:44:50:
d5:35:67:68:51:b4:53:2e:ec:4a:95:fe:91:f2:5e:94:d2:73:
0a:35:c5:72:bc:50:6a:fb:df:5c:0a:c2:d9:77:30:49:a1:c3:
41:d9:0a:62:c8:de:46:39:82:ec:54:d0:fc:49:0b:61:be:49:
78:62:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:23 2023 by rpki-client on console.sobornost.net