Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/TOHJI_2vT-M9w_Z9m7jLcDOej68.roa
File: TOHJI_2vT-M9w_Z9m7jLcDOej68.roa (raw, json)
Hash identifier: Ybr6WVP2wyod4JeYC61aneK3/xrRLY23GoKhzbVutkc=
Subject key identifier: 4C:E1:C9:23:FD:AF:4F:E3:3D:C3:F6:7D:9B:B8:CB:70:33:9E:8F:AF
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 018506B7DD3A8ABCFD943A499DAA6D2913FE
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/TOHJI_2vT-M9w_Z9m7jLcDOej68.roa
Signing time: Mon 12 Dec 2022 14:23:10 +0000
ROA not before: Mon 12 Dec 2022 14:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7138
IP address blocks: 185.14.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:b7:dd:3a:8a:bc:fd:94:3a:49:9d:aa:6d:29:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Dec 12 14:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce1c923fdaf4fe33dc3f67d9bb8cb70339e8faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:54:3e:0d:0c:1b:5c:9f:ab:5f:b6:b5:df:
89:e9:94:e8:fa:51:62:b7:30:30:fa:75:ee:d8:e9:
bb:04:30:b0:c3:ad:bb:b8:9c:32:36:2e:74:d9:8b:
9d:a6:5c:81:c7:e1:48:aa:67:8a:3f:6d:ea:b6:b0:
38:ba:5f:7e:43:a4:1b:e4:1e:cc:20:e2:c1:6b:03:
55:89:c9:3a:84:27:91:87:fa:e9:61:fe:65:a4:e0:
6e:c7:14:82:1c:20:94:9a:a8:15:ce:a8:ae:12:e4:
b3:d9:59:04:3a:57:6e:78:13:bd:2f:b9:33:9e:84:
ef:05:98:77:92:04:e7:20:a1:49:8d:0e:6b:73:ec:
6c:32:14:10:77:de:aa:08:21:ea:fd:23:72:fe:bf:
2c:ac:d3:08:47:e0:c8:f3:8b:ca:fc:2c:0f:e2:de:
96:4f:b3:88:bd:b6:6c:ca:2e:42:ed:7f:77:0c:b2:
4d:61:72:f3:d4:d5:f4:74:7d:6a:a6:44:36:2c:e6:
32:e5:07:f8:5d:e1:95:f4:97:b1:62:78:9b:6b:f3:
ac:8b:06:da:f4:30:af:53:16:58:15:5c:9e:c7:dd:
98:32:48:a1:91:96:35:59:52:ee:b0:5c:31:cd:3d:
b6:6b:4f:a9:0a:71:91:75:f3:64:a4:d3:4a:9b:e1:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:C9:23:FD:AF:4F:E3:3D:C3:F6:7D:9B:B8:CB:70:33:9E:8F:AF
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/TOHJI_2vT-M9w_Z9m7jLcDOej68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.85.0/24
Signature Algorithm: sha256WithRSAEncryption
39:71:c8:f1:81:7f:20:f8:e8:6f:05:31:01:5c:28:11:34:cc:
33:90:29:f1:66:92:dc:dd:ef:14:55:63:1e:a6:c2:db:66:31:
d9:69:6f:c6:c5:a3:22:6e:07:36:a9:f2:34:ea:72:ba:8f:62:
b8:b9:3f:29:3a:a9:94:b8:c9:51:56:72:bd:9f:db:ab:35:39:
ab:4b:90:96:30:29:ba:ae:74:f0:02:11:45:4f:b6:05:30:4f:
d4:c7:96:fb:76:41:3d:8a:6d:0f:7c:b9:d3:a8:cf:d5:47:c4:
c4:cc:55:3b:8b:69:bb:bc:d5:dd:2b:b4:52:35:fd:96:ca:60:
a5:c0:72:72:a4:a4:da:a6:62:b5:82:fb:77:bd:d7:be:a3:52:
a7:0b:84:fa:ef:b0:06:7b:af:11:81:c1:06:94:54:45:2e:c3:
15:4b:72:53:66:3d:b6:10:46:a2:18:bb:fb:da:f0:6c:7f:9c:
a9:76:e4:fc:92:72:cb:e6:30:0a:35:2f:f0:82:22:cc:59:ea:
81:a7:78:8a:c1:20:de:f0:97:b6:f8:e6:83:6e:b8:43:97:a6:
95:d9:04:66:45:95:8b:49:02:9f:f2:dc:78:68:60:30:93:78:
ac:88:9c:68:3a:ef:8d:4d:63:34:4f:12:0e:a0:40:d9:89:20:
95:48:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:52 2023 by rpki-client on console.sobornost.net