Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/HggELu8ihXmbQeempxzbEHdhwxU.roa
File: HggELu8ihXmbQeempxzbEHdhwxU.roa (raw, json)
Hash identifier: 0Emx7zscb8cdvfJPw2xxwJvCLqZ6XwErJK9hP8iM7No=
Subject key identifier: 1E:08:04:2E:EF:22:85:79:9B:41:E7:A6:A7:1C:DB:10:77:61:C3:15
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D1C20A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/HggELu8ihXmbQeempxzbEHdhwxU.roa
Signing time: Sat 01 Jan 2022 16:01:46 +0000
ROA not before: Sat 01 Jan 2022 16:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31141
IP address blocks: 194.6.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355923978 (0x50d1c20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e08042eef2285799b41e7a6a71cdb107761c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:c1:24:1a:a4:b4:c6:51:f6:10:3f:72:c6:
55:40:b8:43:fe:f4:b1:c8:10:8d:1e:74:db:7d:75:
f3:72:82:00:56:48:30:09:92:10:57:02:ff:1f:2a:
ab:02:7d:25:75:ee:66:29:62:10:c8:a7:ee:f3:31:
de:11:53:df:be:05:b2:56:f9:1d:c2:59:bd:fe:5f:
18:3d:55:4c:16:2a:06:cd:3f:85:91:c8:5c:2e:7a:
e1:94:3a:4d:eb:5c:da:9d:2c:d0:c3:e4:e0:04:4a:
20:80:f4:44:76:d0:92:64:d7:91:0d:d7:cc:9a:18:
72:5b:8b:cd:32:a0:4c:90:71:8c:0f:c4:ac:67:a6:
c9:69:19:38:24:84:2e:1b:38:50:81:b7:02:2e:22:
de:d7:ef:38:86:e0:4a:02:3a:94:c4:36:e0:c2:b0:
fe:f6:95:9c:eb:d0:42:69:a4:e9:9c:99:18:0f:b6:
59:b8:67:3d:a0:ba:50:a5:15:6b:38:60:c0:83:f0:
fb:f6:8a:1b:b6:ca:bc:2c:0a:14:ec:37:47:0b:ea:
8a:9e:f8:01:f5:ad:1c:11:57:a9:d7:5c:7d:12:c2:
55:a7:ee:a9:6a:9f:e4:16:54:05:1c:79:4c:47:72:
a4:0f:95:c7:1c:56:67:02:b6:be:97:67:d3:7e:62:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:08:04:2E:EF:22:85:79:9B:41:E7:A6:A7:1C:DB:10:77:61:C3:15
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/HggELu8ihXmbQeempxzbEHdhwxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:97:ba:69:98:0a:4f:9e:62:80:96:74:0b:81:90:19:4d:9c:
91:46:f5:cf:0a:06:e9:ab:4c:1b:b2:15:1e:38:c4:72:51:0a:
00:a3:1c:79:17:f1:d4:5d:92:08:47:23:e5:a4:ac:e0:ca:f5:
15:78:9d:72:f1:ae:f4:8c:fc:8f:db:ed:7d:66:d7:fa:ae:af:
cf:b3:de:39:1c:7d:0c:46:6d:cd:3f:2a:ea:1c:19:cc:7a:44:
84:bf:a4:67:6c:6f:db:fb:a5:6d:92:75:82:f3:bb:71:b4:f5:
ac:5a:30:fb:60:be:17:f6:38:a6:8d:f2:27:c7:9a:2f:6f:70:
04:4b:99:23:51:3b:a8:4f:f0:47:42:56:72:cb:07:73:bf:44:
de:31:33:69:6f:ac:c7:1e:9a:ae:97:79:1d:07:d3:13:ab:8a:
43:80:90:a8:4d:33:3a:f1:fb:2c:a3:cd:c2:46:85:77:14:1a:
65:2f:cb:4f:0b:36:c0:b0:95:1c:ab:7e:2d:dd:4b:10:0e:e0:
e3:3c:8e:42:c0:a2:e1:51:0d:f0:17:61:d4:62:21:ef:17:12:
4e:ac:65:cc:f7:d4:f9:50:7b:c6:1f:40:c3:a4:95:12:43:ac:
dd:85:29:80:f4:0d:dc:a6:c7:6d:d9:f5:e9:e1:7f:6d:fc:51:
10:6f:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net