Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/iCskZNBTRG8EBxVgiLp7YZwCihg.roa
File: iCskZNBTRG8EBxVgiLp7YZwCihg.roa (raw, json)
Hash identifier: +RIMEMWKbw+iZNvM1MgmDrTVObPaM4ZupsibV3/Lh3o=
Subject key identifier: 88:2B:24:64:D0:53:44:6F:04:07:15:60:88:BA:7B:61:9C:02:8A:18
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 01942A5E
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/iCskZNBTRG8EBxVgiLp7YZwCihg.roa
Signing time: Sat 01 Jan 2022 01:52:41 +0000
ROA not before: Sat 01 Jan 2022 01:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211340
IP address blocks: 185.182.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26487390 (0x1942a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Jan 1 01:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=882b2464d053446f0407156088ba7b619c028a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:58:24:54:89:6b:67:93:4d:40:dd:7e:21:
67:39:8a:a7:7f:d4:da:31:ac:67:b7:7f:0d:64:79:
9b:15:60:4a:fe:f8:fb:e4:11:93:43:ba:30:b5:9b:
82:08:5b:e6:93:18:4b:44:17:07:5a:5a:00:63:4a:
fb:da:f2:cd:d6:7c:83:0f:c6:a5:e0:1a:02:f7:9d:
51:04:12:d5:b4:d6:cd:ef:2b:a0:03:91:b2:85:78:
b5:1d:7c:03:e0:e0:97:f3:c8:7c:df:f2:2d:a5:0b:
ce:75:75:d2:a8:2c:3c:18:f0:29:13:67:11:c4:73:
61:78:81:32:18:51:b9:ae:1a:1c:eb:bb:7c:5e:11:
af:45:74:8c:7d:9a:5b:84:fa:8b:6f:ec:04:3a:23:
dd:4c:fb:f8:d6:d9:d3:52:7a:f0:b1:5a:8f:0f:a4:
3f:8b:38:64:0b:72:d8:b5:d4:be:27:ac:14:dc:d8:
c0:a8:47:1e:d5:4e:ac:a8:26:32:07:3b:74:86:d9:
37:cb:5b:59:66:d6:83:e2:5d:0e:7e:2b:9f:78:61:
79:50:c0:a2:fa:89:73:c5:25:4a:4d:6a:34:94:7c:
bc:76:ad:76:32:be:c3:93:61:85:bf:e3:65:18:64:
c2:f9:22:68:48:ba:d2:a9:74:af:14:07:2c:7d:9c:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:24:64:D0:53:44:6F:04:07:15:60:88:BA:7B:61:9C:02:8A:18
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/iCskZNBTRG8EBxVgiLp7YZwCihg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d4:7b:ce:a1:28:5d:1b:fd:6e:97:92:87:c0:6f:dc:38:e3:
28:0f:c1:eb:09:76:1b:35:3d:80:8c:33:a9:a1:8f:39:23:39:
5e:a4:ac:62:67:60:4d:f2:c5:ce:ca:f4:bc:70:f1:54:44:86:
09:57:c6:01:27:ae:be:1d:6e:89:48:1a:0e:f5:a2:5b:e0:21:
20:17:fb:14:c1:5e:e3:f1:0b:a1:55:08:b3:4a:92:71:ec:c6:
6d:bd:78:8b:1b:aa:dc:23:9a:2a:a1:69:ac:0b:96:be:72:98:
1f:0f:cc:a1:3f:c8:02:d7:a8:0b:04:fc:bf:37:02:e1:5d:bf:
f7:54:80:7d:cc:c3:56:f2:8a:a4:07:18:8b:f3:ba:29:84:9a:
a7:7f:0e:6e:a9:0b:d3:95:98:59:d4:fb:ff:e8:39:0c:0c:3c:
23:ad:58:15:ca:0c:22:d2:51:12:a1:7e:35:09:bf:ee:15:45:
7b:03:08:da:aa:df:48:6c:d9:74:e0:8f:5b:76:18:07:0a:d3:
34:ad:16:b8:fe:f6:97:c3:c6:21:ab:ac:22:fc:2a:ac:1d:88:
64:19:4a:33:98:ed:2b:65:1c:0a:35:f9:3c:dd:2b:13:c8:c1:
49:41:d2:10:6a:27:d1:da:54:9f:9e:78:7c:77:4a:cc:3f:90:
59:fe:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:49 2023 by rpki-client on console.sobornost.net