Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JXx4qF7qd9IKTAIWiy4D1z1BguE.roa
File: JXx4qF7qd9IKTAIWiy4D1z1BguE.roa (raw, json)
Hash identifier: 4AKHyt+UdRzlSkvEIEoIU11qLA3XS28o6Wv1eewFESg=
Subject key identifier: 25:7C:78:A8:5E:EA:77:D2:0A:4C:02:16:8B:2E:03:D7:3D:41:82:E1
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 0A191789
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JXx4qF7qd9IKTAIWiy4D1z1BguE.roa
Signing time: Sat 01 Jan 2022 06:03:47 +0000
ROA not before: Sat 01 Jan 2022 06:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 185.220.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169416585 (0xa191789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Jan 1 06:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257c78a85eea77d20a4c02168b2e03d73d4182e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:c2:ce:55:b6:b8:dc:42:81:60:94:c8:52:
af:dd:e0:ad:88:da:7e:c4:78:34:47:52:01:08:aa:
a8:b7:72:18:07:63:6f:e8:44:f3:e9:8f:d8:ce:b1:
37:01:e5:f1:c9:06:aa:b9:f7:12:80:d4:17:c5:64:
7d:69:89:8c:92:ae:61:68:70:c6:9d:39:fd:0b:0e:
32:f8:59:49:30:65:97:fc:8b:19:0f:d3:96:e3:e5:
b0:b6:71:cc:27:69:15:ae:02:e6:38:e9:35:45:f0:
97:de:58:78:5d:72:cc:2e:20:bc:d9:7a:0e:e2:8e:
4f:1b:e1:4c:4a:cc:1b:e2:b3:04:db:1d:60:0a:b6:
6d:ee:81:9d:0c:65:99:e7:d1:a2:e7:73:57:6f:76:
d0:e0:70:02:4e:03:15:98:d5:54:a9:a6:f6:e1:81:
14:e1:c6:b5:b9:9d:8b:4e:69:43:f1:1a:80:8d:31:
92:33:91:a3:6c:5f:0e:40:ac:5c:84:fb:46:b4:c2:
3d:6e:05:64:eb:b7:ac:ca:38:da:d2:f7:2d:1e:69:
82:82:cc:59:7e:bd:36:18:09:fa:bd:a4:18:25:fa:
78:d7:53:dd:af:19:2f:c6:c1:45:8d:df:a1:1f:fd:
00:b5:01:60:4b:f5:7a:8d:22:ce:fd:9e:dc:2b:af:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:78:A8:5E:EA:77:D2:0A:4C:02:16:8B:2E:03:D7:3D:41:82:E1
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JXx4qF7qd9IKTAIWiy4D1z1BguE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.58.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:e7:73:c3:a5:40:13:01:20:90:4d:d3:ee:7c:8a:22:e6:a3:
3f:d4:8a:af:4c:a4:0f:a9:05:22:2d:14:5c:7e:34:45:90:6c:
59:ef:44:04:cb:81:01:e1:3c:37:6e:71:33:ef:dc:92:df:c1:
51:44:46:e2:c1:42:0e:22:24:57:9d:ea:41:ee:0c:fb:9f:0f:
40:ae:4e:4b:8a:41:aa:c6:f6:9f:6d:89:6d:57:56:d6:15:56:
76:0a:70:0a:3f:03:59:2c:9a:17:a1:4c:24:c2:6a:be:44:1d:
16:90:f6:8b:cf:d0:9c:4b:0c:b8:36:af:fe:80:5a:0a:76:72:
c2:72:3e:a4:1b:4b:b5:f1:a7:35:4c:74:4a:09:5b:09:d7:68:
8d:d4:61:62:65:3d:67:3f:7b:6e:3d:69:fe:34:c8:5b:6d:2a:
43:9a:d4:67:ea:a8:78:01:46:d8:a9:43:bd:ea:4f:b7:8f:82:
b0:90:1a:57:86:ca:1d:5e:a4:59:4b:40:a6:fa:63:3c:a0:78:
a8:3d:6d:af:0f:09:91:a2:ae:a7:a6:86:44:d6:db:95:bf:85:
62:f8:0d:1d:19:0b:45:8f:1e:da:1e:b1:76:8b:0e:f0:99:90:
13:25:88:fb:ec:89:f1:76:9b:e4:4e:d9:d8:63:1f:f8:af:de:
0f:5d:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net