Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/iak9K9o5mq3kq1D5aztFkfpu9Z4.roa
File: iak9K9o5mq3kq1D5aztFkfpu9Z4.roa (raw, json)
Hash identifier: I20Dc3eAU/rExwswmxetVsGtA0tseCoYlKL9BsmA88k=
Subject key identifier: 89:A9:3D:2B:DA:39:9A:AD:E4:AB:50:F9:6B:3B:45:91:FA:6E:F5:9E
Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Certificate serial: 023077D7
Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/iak9K9o5mq3kq1D5aztFkfpu9Z4.roa
Signing time: Sat 01 Jan 2022 14:05:10 +0000
ROA not before: Sat 01 Jan 2022 14:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209045
IP address blocks: 147.189.192.0/20 maxlen: 22
194.61.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36730839 (0x23077d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Validity
Not Before: Jan 1 14:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89a93d2bda399aade4ab50f96b3b4591fa6ef59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:7a:52:5a:7e:f3:c1:de:43:e0:ef:86:8a:
79:41:5f:e8:6a:a4:54:a5:6d:25:b9:b4:af:32:34:
83:fb:f8:36:82:f2:7d:6d:15:55:07:b7:2c:d5:9d:
cc:31:60:ba:01:79:b2:91:00:10:65:e0:ad:d2:86:
2f:80:ec:96:44:e2:f5:15:a9:a6:52:eb:a5:71:42:
4c:d6:5e:31:51:44:93:e5:b9:13:8b:61:42:0d:9a:
16:63:55:aa:df:52:4c:8a:63:27:f0:84:e6:3f:85:
df:6b:b9:d4:7e:6d:87:ab:56:aa:e6:4e:57:61:7c:
56:3a:b3:39:11:62:07:a7:c6:9a:f3:f9:25:8f:f1:
2c:03:be:30:fa:7a:8b:a6:31:96:94:c5:d4:aa:e6:
4b:05:71:43:8a:ae:04:82:3d:6d:3f:93:6d:19:a6:
9f:a3:fe:d3:6d:fd:29:88:28:00:51:6c:c6:c0:67:
de:e4:7e:e0:6e:0c:d6:20:ac:2f:e6:7a:f4:43:bc:
f7:73:91:65:f9:04:e5:63:7a:87:78:fe:d6:23:69:
8d:f7:de:08:fe:8a:0e:d5:9e:44:e8:1e:44:4d:f7:
17:58:86:63:0c:49:0a:c8:5a:ec:bc:5f:fb:9c:2c:
5d:44:ec:26:80:65:93:0b:b5:78:2f:60:79:67:65:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:3D:2B:DA:39:9A:AD:E4:AB:50:F9:6B:3B:45:91:FA:6E:F5:9E
X509v3 Authority Key Identifier:
keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/iak9K9o5mq3kq1D5aztFkfpu9Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.192.0/20
194.61.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:f2:cf:79:7b:1d:f3:39:f8:3d:0e:b2:dc:b0:cd:01:d1:a9:
ee:af:72:9c:78:00:d2:a2:35:df:56:d2:e6:3d:81:ac:71:d2:
a2:89:8e:62:84:c5:89:51:c9:44:89:a5:e9:a9:3e:4c:68:7f:
53:98:5d:70:8d:4c:c7:32:7e:e4:26:65:15:62:55:6c:4d:dc:
94:9c:e9:57:d6:25:95:4b:e8:55:61:fe:2b:a8:07:17:a1:12:
9a:c2:e3:51:b2:1f:8d:dd:22:a1:50:a4:9c:44:3c:cc:b2:dc:
0e:59:c7:3c:49:4e:13:54:b0:f8:7c:04:9b:f7:0e:8c:a3:50:
8c:13:0f:8a:1d:ab:c2:02:97:ff:63:bc:8f:ca:b0:2e:49:3f:
84:aa:fe:2c:5c:8f:81:42:73:16:e1:04:1f:31:0a:25:e6:99:
28:30:bb:5a:7a:69:5a:44:60:22:b9:7e:f6:43:8b:b6:e1:03:
2a:1e:d4:70:39:04:11:b2:be:d2:39:ea:4f:f2:1a:5b:86:96:
89:a8:93:81:06:87:3e:8b:bc:13:a0:38:16:76:93:bc:10:f8:
33:b6:ac:fe:99:16:16:83:dc:45:31:92:af:08:99:c4:63:36:
8f:46:49:b2:c9:03:82:ce:2e:1b:c6:54:60:50:48:ab:97:d5:
82:03:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:26 2023 by rpki-client on console.sobornost.net