Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/evAd6y-tS_tHns-fiD5fncRFrJo.roa
File: evAd6y-tS_tHns-fiD5fncRFrJo.roa (raw, json)
Hash identifier: QWHcQgxmD6mQP9oX3dBF//4lzPdfnI81D0UIfkX8lXw=
Subject key identifier: 7A:F0:1D:EB:2F:AD:4B:FB:47:9E:CF:9F:88:3E:5F:9D:C4:45:AC:9A
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 0539BAAB
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/evAd6y-tS_tHns-fiD5fncRFrJo.roa
Signing time: Sat 01 Jan 2022 13:01:43 +0000
ROA not before: Sat 01 Jan 2022 13:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 193.53.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87669419 (0x539baab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jan 1 13:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7af01deb2fad4bfb479ecf9f883e5f9dc445ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:e0:86:96:a5:7c:fb:10:8e:d6:13:aa:74:
ad:14:c9:c2:57:f6:49:66:8a:0a:bb:52:a9:04:73:
11:40:90:7d:12:9a:8b:6d:b2:d4:92:08:6c:64:66:
bc:73:84:c2:18:d6:65:4e:49:1e:97:df:60:0d:be:
51:05:42:69:78:9b:32:af:63:47:0d:c7:72:0e:e6:
2d:62:58:81:de:11:cb:89:9a:cf:db:01:48:b3:c1:
b8:08:4d:37:cd:e6:1f:34:fd:b4:a7:77:44:2f:a6:
7e:30:ad:b6:1d:97:07:8a:ac:22:09:a7:d8:d2:be:
d7:c0:39:15:29:7a:09:4b:b4:05:91:c2:17:63:a1:
18:6e:32:21:cb:70:05:68:c4:2d:bc:90:52:28:45:
4a:d2:b5:e1:f6:da:83:fb:08:06:3c:f1:a3:ba:3e:
90:b9:48:c7:59:8d:bc:cf:8e:cf:ce:c0:3c:5b:53:
54:4b:65:68:d0:3a:cd:b3:5b:35:99:97:12:e3:2f:
9b:d3:88:f0:49:b7:f8:ed:8d:03:42:c6:b1:89:42:
fb:c1:36:dd:02:2f:64:3b:74:68:f6:df:4b:77:79:
ed:b9:e0:77:24:1e:f6:c2:1a:0f:e6:0e:49:d0:96:
49:09:35:b9:ab:d6:5b:a5:2c:7e:13:8e:29:57:43:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:1D:EB:2F:AD:4B:FB:47:9E:CF:9F:88:3E:5F:9D:C4:45:AC:9A
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/evAd6y-tS_tHns-fiD5fncRFrJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.249.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c5:71:26:4a:64:8c:cf:07:00:94:8e:99:7b:f3:6a:a0:a4:
f4:45:f8:c4:6d:2b:c7:35:9e:dd:98:4b:e1:9b:27:5d:02:9f:
53:6a:04:d9:70:86:77:34:40:73:fa:bc:de:1e:04:34:7b:d9:
1d:b4:44:41:c3:fc:ee:3f:47:08:10:5d:53:d8:f2:3e:e3:b3:
1b:df:fd:07:d3:6f:cb:47:5c:04:b2:c7:b7:1d:86:e0:bd:b0:
d7:e6:d4:5e:69:7d:53:19:d2:00:27:85:ca:0a:35:b8:b7:75:
f5:ce:9d:96:40:f3:12:db:1a:b6:1f:ce:a4:8f:99:48:23:ba:
72:15:17:0d:f3:26:f0:ce:77:a3:1d:70:45:83:da:5f:27:32:
ed:32:da:e8:29:a5:c9:e9:e6:77:17:95:51:27:e3:f1:da:23:
e1:0a:ac:57:c9:74:ad:1c:b5:62:c6:9b:8b:44:b8:1c:69:15:
4d:d5:a9:30:5f:c6:c2:1d:d4:15:0d:10:13:07:0c:6c:02:5d:
26:18:9d:0b:f9:97:23:ba:e3:50:46:a7:e0:8e:7c:58:4c:cb:
ed:57:f5:fe:c6:44:f4:c0:5f:49:dd:e4:e8:c5:66:24:ca:15:
c5:c1:f7:76:88:37:af:89:f6:ff:74:1a:8d:31:d1:80:29:33:
8a:14:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:37 2023 by rpki-client on console.sobornost.net