Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/lfU19YwpMYWs75n9j45kISPxjf0.roa
File: lfU19YwpMYWs75n9j45kISPxjf0.roa (raw, json)
Hash identifier: BW39N42CsFrSSBgj953RIDTjQ3p9CPk9pcwJ7Co1qDQ=
Subject key identifier: 95:F5:35:F5:8C:29:31:85:AC:EF:99:FD:8F:8E:64:21:23:F1:8D:FD
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 04CA3EFB
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/lfU19YwpMYWs75n9j45kISPxjf0.roa
Signing time: Sat 01 Jan 2022 10:02:09 +0000
ROA not before: Sat 01 Jan 2022 10:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.144.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80363259 (0x4ca3efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jan 1 10:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95f535f58c293185acef99fd8f8e642123f18dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:9d:6c:9e:56:b9:30:2c:df:7e:6f:cb:0f:
13:fe:1d:9e:7d:4e:f9:11:c8:e2:f4:ad:17:a7:04:
2b:43:a0:3b:7e:35:f7:0d:24:ed:a1:0b:3a:7d:81:
26:dd:77:21:ab:11:e1:61:fd:01:22:21:88:2e:a9:
54:2d:b4:e7:5e:94:6c:5c:db:7c:e0:0d:b9:d1:ef:
39:40:fc:97:ab:06:8f:86:db:6e:8b:25:0e:89:c3:
96:06:30:de:a8:80:ab:74:c0:76:f8:e0:ac:04:77:
12:5b:42:f0:59:cb:65:9d:76:64:df:7b:19:92:90:
f8:7c:9b:72:96:61:35:c5:2b:fc:a9:5c:57:d9:2b:
c2:3f:8d:c5:4f:46:1f:fb:d6:57:13:fe:93:02:02:
f1:c2:5e:3d:4c:b7:f6:03:13:e9:ee:24:77:f5:d9:
2c:e0:f3:25:be:d8:51:1e:7e:25:6c:7c:c7:37:83:
fd:fd:ca:00:ec:d8:66:c0:b4:83:8c:12:69:04:43:
3e:1d:6a:ff:ec:aa:98:99:5d:58:2b:96:ca:ac:d6:
69:9f:71:89:fa:06:b2:bb:fa:2c:19:fa:94:5a:76:
eb:63:e2:8f:7a:c5:2a:47:55:cc:74:c0:99:3e:96:
8c:e4:34:50:e4:97:55:7d:d1:76:00:cc:0d:ae:db:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:35:F5:8C:29:31:85:AC:EF:99:FD:8F:8E:64:21:23:F1:8D:FD
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/lfU19YwpMYWs75n9j45kISPxjf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.223.0/24
Signature Algorithm: sha256WithRSAEncryption
88:60:a1:78:a7:d9:bf:28:a4:07:49:ec:f7:b6:5c:91:96:e4:
8d:f5:f7:11:3e:a9:6f:17:9c:0a:fb:0b:7f:db:9e:39:b5:6b:
12:1e:b6:3f:cd:50:dd:48:33:5b:e0:25:3e:b6:fd:42:98:0d:
b9:65:87:71:bd:b1:59:82:e7:aa:97:5c:d1:8d:44:37:a0:c1:
b3:7e:b8:f7:3a:85:a5:fb:e3:73:33:ea:a3:40:61:ad:f5:6c:
32:6e:a3:86:8a:d8:b1:d0:f8:82:18:20:1b:d0:33:a7:d7:26:
03:e5:01:23:9d:05:ce:1a:6f:4d:62:c7:e8:14:04:02:6d:82:
c4:00:ec:6c:24:56:8b:76:93:dd:d6:53:16:4a:b6:74:6c:97:
c7:d6:80:cf:92:8d:0a:7a:53:c5:ff:3f:66:2a:e1:b5:9c:40:
cc:bb:dd:bf:9d:10:78:79:26:f1:0e:fe:c0:4d:f1:ab:23:ee:
ef:d6:6c:2d:63:af:e8:fc:f8:9c:fe:ac:7e:21:4f:7a:91:59:
fb:3d:66:4f:6a:e2:16:7d:fd:c5:c1:b3:f7:e7:e6:15:f9:52:
4e:b0:ae:1e:4a:ef:25:3e:3f:e7:fe:b5:d4:fd:96:49:ad:c2:
ac:fd:c7:43:47:79:90:ff:4b:31:4b:5d:c9:b3:bf:49:61:27:
aa:ba:a3:a2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBMo++zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MWY1ODkxYTI2Y2ZhNDM2YTIzZTdlMWZmOTc2NjQ4YmVlNzllZjc3MB4XDTIyMDEw
MTEwMDIwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTVmNTM1ZjU4YzI5
MzE4NWFjZWY5OWZkOGY4ZTY0MjEyM2YxOGRmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALFsnWyeVrkwLN9+b8sPE/4dnn1O+RHI4vStF6cEK0OgO341
9w0k7aELOn2BJt13IasR4WH9ASIhiC6pVC20516UbFzbfOANudHvOUD8l6sGj4bb
boslDonDlgYw3qiAq3TAdvjgrAR3EltC8FnLZZ12ZN97GZKQ+HybcpZhNcUr/Klc
V9krwj+NxU9GH/vWVxP+kwIC8cJePUy39gMT6e4kd/XZLODzJb7YUR5+JWx8xzeD
/f3KAOzYZsC0g4wSaQRDPh1q/+yqmJldWCuWyqzWaZ9xifoGsrv6LBn6lFp262Pi
j3rFKkdVzHTAmT6WjOQ0UOSXVX3RdgDMDa7bCrsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSV9TX1jCkxhazvmf2PjmQhI/GN/TAfBgNVHSMEGDAWgBSR9YkaJs+kNqI+
fh/5dmSL7nnvdzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tmV0pHaWJQcERhaVBuNGYtWFpraS01NTczYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjMvN2YxYjc0LWM4ZDctNGEwZC04YTM5LWRhYTczOTBiNWJhNy8x
L2xmVTE5WXdwTVlXczc1bjlqNDVrSVNQeGpmMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMv
N2YxYjc0LWM4ZDctNGEwZC04YTM5LWRhYTczOTBiNWJhNy8xL2tmV0pHaWJQcERh
aVBuNGYtWFpraS01NTczYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmQ3zANBgkqhkiG9w0BAQsFAAOC
AQEAiGCheKfZvyikB0ns97ZckZbkjfX3ET6pbxecCvsLf9ueObVrEh62P81Q3Ugz
W+AlPrb9QpgNuWWHcb2xWYLnqpdc0Y1EN6DBs3649zqFpfvjczPqo0BhrfVsMm6j
horYsdD4ghggG9Azp9cmA+UBI50FzhpvTWLH6BQEAm2CxADsbCRWi3aT3dZTFkq2
dGyXx9aAz5KNCnpTxf8/ZirhtZxAzLvdv50QeHkm8Q7+wE3xqyPu79ZsLWOv6Pz4
nP6sfiFPepFZ+z1mT2riFn39xcGz9+fmFflSTrCuHkrvJT4/5/611P2WSa3CrP3H
Q0d5kP9LMUtdybO/SWEnqrqjog==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net