Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/86LVydUgAuN6Y952YYZ65_TAkPQ.roa
File: 86LVydUgAuN6Y952YYZ65_TAkPQ.roa (raw, json)
Hash identifier: 0NOQs3xLB2MgsQD+w4DkSBnulTceVz0CcBXawXPRneA=
Subject key identifier: F3:A2:D5:C9:D5:20:02:E3:7A:63:DE:76:61:86:7A:E7:F4:C0:90:F4
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 5EE9FA
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/86LVydUgAuN6Y952YYZ65_TAkPQ.roa
Signing time: Sat 01 Jan 2022 03:53:45 +0000
ROA not before: Sat 01 Jan 2022 03:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60855
IP address blocks: 195.42.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6220282 (0x5ee9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Jan 1 03:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3a2d5c9d52002e37a63de7661867ae7f4c090f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:7c:6a:34:96:84:4c:02:8c:b3:d8:73:c7:
da:ca:f1:99:5d:32:f8:34:66:7c:a1:57:7a:c2:bb:
31:9e:07:5f:e1:1f:3e:3d:24:b8:23:6a:82:5d:0f:
ae:ee:7a:5e:86:5b:2d:60:85:c0:f0:53:1c:24:a9:
ff:bd:3c:0d:cd:89:0c:95:ec:9d:ee:08:03:81:62:
81:1c:d0:cf:af:fd:c9:56:13:82:b0:61:e1:a5:2a:
ab:21:1b:57:5e:af:5e:48:8b:f5:93:4b:c8:fe:16:
55:8d:0f:0a:f9:06:a2:ec:aa:8f:d2:08:07:20:7a:
4b:4f:7c:2e:28:73:73:9e:40:0a:24:95:41:8b:a8:
be:90:c7:32:aa:b0:2d:06:21:e6:d1:79:a1:f0:98:
11:2e:cd:5f:50:4e:b6:de:d5:1a:b1:93:b8:7e:8c:
7e:7b:a4:84:86:eb:06:18:3e:28:65:22:8f:fc:39:
df:af:80:14:22:32:03:c1:0a:40:21:08:95:73:ef:
0f:93:36:a4:40:a4:31:2e:77:37:7f:40:55:fa:44:
24:02:fe:31:da:27:37:c6:98:91:c9:b6:4b:82:5c:
77:86:21:a4:2e:06:68:ba:39:fe:d1:a7:85:7c:e8:
a2:14:94:34:dc:da:78:6b:6c:5a:c9:c7:47:ab:93:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:D5:C9:D5:20:02:E3:7A:63:DE:76:61:86:7A:E7:F4:C0:90:F4
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/86LVydUgAuN6Y952YYZ65_TAkPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:78:3b:6a:87:e0:ca:04:29:ab:6e:9a:92:5e:7d:70:e7:ea:
2f:bf:88:b9:cc:04:0c:cf:5b:9c:bf:9f:67:3f:45:50:d8:82:
be:3e:ea:00:69:9e:14:0c:23:90:e3:01:7e:ba:fa:2e:fe:73:
44:51:45:bb:a0:ae:59:81:56:84:dc:28:71:7d:ca:4b:3f:2c:
7c:aa:d7:15:65:70:34:78:10:33:ca:59:e1:32:98:96:68:2d:
75:49:8c:49:a6:95:c8:1d:65:74:af:7f:b6:5c:0a:81:05:ec:
77:d9:34:bf:d0:4c:ad:27:a0:e1:fa:85:e7:03:25:67:bf:f5:
b7:91:03:25:f7:09:62:b4:b6:3a:df:9b:96:de:f7:d2:6f:b4:
75:81:02:38:ba:d8:70:04:e7:d3:e2:f3:5d:bf:a6:21:17:7a:
62:c8:67:0d:36:28:65:81:46:56:1d:b7:08:a5:2d:61:4d:10:
32:d9:aa:02:83:da:74:71:ab:dd:48:12:37:01:de:33:80:5c:
fb:cf:79:ae:26:53:31:d5:30:2f:e7:aa:2a:51:34:9f:06:6a:
2a:a0:1e:e7:ea:29:bf:4d:39:74:06:f9:a6:69:01:ad:70:c3:
ef:78:bf:53:96:00:3b:8a:b0:ed:5c:47:a4:24:28:01:89:b2:
2e:9c:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:37 2023 by rpki-client on console.sobornost.net