Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/R23WkjFfPZbKtrU3-bJX2Jqtqfs.roa
File: R23WkjFfPZbKtrU3-bJX2Jqtqfs.roa (raw, json)
Hash identifier: 5ahGbjasEv111eMZPcXMoLPF7JuXoTDWUsFm7Ajeig8=
Subject key identifier: 47:6D:D6:92:31:5F:3D:96:CA:B6:B5:37:F9:B2:57:D8:9A:AD:A9:FB
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: E05D
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/R23WkjFfPZbKtrU3-bJX2Jqtqfs.roa
Signing time: Thu 17 Feb 2022 14:44:01 +0000
ROA not before: Thu 17 Feb 2022 14:44:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35393
IP address blocks: 185.88.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57437 (0xe05d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Feb 17 14:44:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=476dd692315f3d96cab6b537f9b257d89aada9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:25:45:a7:23:ce:80:2a:2d:5d:70:bf:50:
e1:9c:e4:8d:cf:0a:d1:d4:8f:8e:83:93:c5:65:aa:
97:a6:ac:b8:b4:5a:e6:e7:7e:e2:2f:53:0b:73:21:
88:a3:cf:b1:54:25:03:b9:09:f5:86:f4:99:5a:74:
97:6c:1b:7d:a8:fc:97:b6:20:63:ea:49:87:18:f8:
da:68:fb:91:bd:57:42:aa:3d:35:99:e9:b0:7d:e7:
54:54:eb:0b:1e:1f:ba:8e:bb:dc:2c:7b:3f:1f:f1:
3e:2b:b1:b3:7f:ed:d5:2c:d1:a1:5a:fc:87:95:b6:
e3:4b:f6:89:42:9a:a0:56:9c:80:50:c6:51:d3:b7:
9f:92:0d:57:4a:81:fd:38:a8:75:fa:2d:32:83:fc:
16:d6:5a:1e:d8:1f:53:6a:4a:b0:46:5f:e4:26:68:
ef:30:bb:b8:51:3e:6e:42:7e:2f:9a:42:de:05:a5:
ac:96:df:a6:85:dd:8a:d4:62:c9:72:0c:1a:13:70:
dd:7e:96:86:06:a4:a7:e3:d9:0b:bd:50:93:e5:b8:
24:db:0f:7e:47:78:38:3d:06:e0:e2:48:93:11:bd:
92:82:ef:8f:b9:14:81:94:52:a4:20:a1:0d:81:c5:
ee:bc:20:10:e2:5d:37:7c:53:85:90:9e:16:e0:cc:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6D:D6:92:31:5F:3D:96:CA:B6:B5:37:F9:B2:57:D8:9A:AD:A9:FB
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/R23WkjFfPZbKtrU3-bJX2Jqtqfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.68.0/22
Signature Algorithm: sha256WithRSAEncryption
66:cc:f2:ee:79:88:25:a8:b0:93:7d:29:f1:c3:88:66:04:20:
af:41:5b:6d:e0:a0:b5:83:16:eb:6d:de:64:ad:5a:bb:66:a1:
50:c1:38:90:72:35:17:48:73:1c:7a:ef:03:d7:11:84:d5:35:
88:0e:3a:7d:c5:25:72:15:0c:3b:41:3b:2b:57:1e:a5:c2:97:
e2:cc:e9:52:93:e3:a4:dd:28:2a:ef:24:40:51:5f:14:aa:a5:
1a:74:59:d9:84:c3:23:32:8d:e4:1e:5d:ca:ca:44:a0:9a:cf:
91:20:bf:04:9d:0f:fa:88:ea:f1:9c:07:24:ec:59:fb:73:a2:
a5:3c:6f:60:24:0e:50:33:7b:68:41:8a:ea:d9:a2:eb:ba:b8:
b5:74:3a:64:96:a9:8d:40:0b:c3:4f:12:7f:bb:74:3e:87:9e:
87:1d:5e:81:d7:7f:60:c0:b7:fb:3d:09:ea:a0:9c:b7:6a:53:
3d:1f:e7:4e:12:ff:1b:8c:26:b3:d3:59:a1:e6:94:0b:b6:d6:
32:93:b8:66:2f:a4:95:89:95:f3:44:7a:1e:d7:fa:d4:15:0c:
11:73:06:f6:c0:b9:85:89:11:a4:f5:69:f7:fe:66:09:a5:20:
0d:1c:93:1e:45:b2:4e:99:9b:61:e4:af:7a:96:75:c2:ca:f6:
9d:12:6b:ac
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAOBdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlmYjJlNWUwHhcNMjIwMjE3
MTQ0NDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0NzZkZDY5MjMxNWYz
ZDk2Y2FiNmI1MzdmOWIyNTdkODlhYWRhOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsQElRacjzoAqLV1wv1DhnOSNzwrR1I+Og5PFZaqXpqy4tFrm
537iL1MLcyGIo8+xVCUDuQn1hvSZWnSXbBt9qPyXtiBj6kmHGPjaaPuRvVdCqj01
memwfedUVOsLHh+6jrvcLHs/H/E+K7Gzf+3VLNGhWvyHlbbjS/aJQpqgVpyAUMZR
07efkg1XSoH9OKh1+i0yg/wW1loe2B9TakqwRl/kJmjvMLu4UT5uQn4vmkLeBaWs
lt+mhd2K1GLJcgwaE3DdfpaGBqSn49kLvVCT5bgk2w9+R3g4PQbg4kiTEb2Sgu+P
uRSBlFKkIKENgcXuvCAQ4l03fFOFkJ4W4Myl1wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEdt1pIxXz2Wyra1N/myV9iaran7MB8GA1UdIwQYMBaAFIh6XwSGsYokSPI1
iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5LzEv
UjIzV2tqRmZQWmJLdHJVMy1iSlgySnF0cWZzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8y
OGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJ
OGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVhEMA0GCSqGSIb3DQEBCwUAA4IB
AQBmzPLueYglqLCTfSnxw4hmBCCvQVtt4KC1gxbrbd5krVq7ZqFQwTiQcjUXSHMc
eu8D1xGE1TWIDjp9xSVyFQw7QTsrVx6lwpfizOlSk+Ok3Sgq7yRAUV8UqqUadFnZ
hMMjMo3kHl3KykSgms+RIL8EnQ/6iOrxnAck7Fn7c6KlPG9gJA5QM3toQYrq2aLr
uri1dDpklqmNQAvDTxJ/u3Q+h56HHV6B139gwLf7PQnqoJy3alM9H+dOEv8bjCaz
01mh5pQLttYyk7hmL6SViZXzRHoe1/rUFQwRcwb2wLmFiRGk9Wn3/mYJpSANHJMe
RbJOmZth5K96lnXCyvadEmus
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:37 2023 by rpki-client on console.sobornost.net