Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/XALtLMjxCf3DLZCI4zVyKraatdM.roa
File: XALtLMjxCf3DLZCI4zVyKraatdM.roa (raw, json)
Hash identifier: XePaBqaZ8eUnc3xL52tkfrL2Sd5T1dwFb1IGtLduDj8=
Subject key identifier: 5C:02:ED:2C:C8:F1:09:FD:C3:2D:90:88:E3:35:72:2A:B6:9A:B5:D3
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 042FBD2B
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/XALtLMjxCf3DLZCI4zVyKraatdM.roa
Signing time: Thu 21 Apr 2022 20:00:35 +0000
ROA not before: Thu 21 Apr 2022 20:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212083
IP address blocks: 147.189.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70237483 (0x42fbd2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Apr 21 20:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c02ed2cc8f109fdc32d9088e335722ab69ab5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:be:67:1a:35:a5:b9:2d:18:16:ee:86:fa:
b8:8d:23:8f:8c:fa:8e:80:4f:2d:6b:6a:3e:52:73:
9d:93:24:c3:03:7a:63:ba:cf:12:27:e2:52:5b:b3:
f1:69:6f:68:31:31:f8:3c:03:d1:60:9a:ff:9f:80:
dc:c5:4b:fd:b1:85:92:ca:c7:69:84:1f:6c:26:23:
c8:ce:3a:c8:44:89:a3:85:e2:ba:2d:e3:8e:e2:e9:
b8:24:8a:33:58:f0:36:f7:22:4f:84:b1:d8:1b:da:
6d:37:5e:40:e3:98:ac:b1:d3:22:4b:f3:44:9f:f9:
1c:96:48:6d:fa:0b:e6:ef:9a:d7:c0:08:43:83:3d:
41:53:cf:57:a9:dc:fd:20:f5:7d:a7:f0:e0:a4:ad:
4c:e6:03:92:93:cc:5b:75:9d:bb:3e:77:29:0b:c9:
83:dd:4d:6c:66:a6:80:27:2d:c2:c1:bb:a5:06:1b:
0c:63:b4:c1:48:65:d9:ee:aa:ea:ef:8b:da:71:bb:
cc:21:36:20:57:4b:77:60:9b:8d:8e:92:64:68:41:
45:4c:4d:a5:18:74:99:37:9a:33:4e:a5:3f:70:d9:
ac:32:3d:7b:1c:64:f9:91:62:66:e6:7b:d9:a0:e2:
d2:7a:08:e7:a1:4b:97:f3:d4:27:1f:82:80:07:7e:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:ED:2C:C8:F1:09:FD:C3:2D:90:88:E3:35:72:2A:B6:9A:B5:D3
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/XALtLMjxCf3DLZCI4zVyKraatdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b3:23:aa:0f:0d:2c:83:ff:f4:6e:17:b6:7c:50:ab:59:34:
9f:db:be:a7:6a:be:b8:ea:d2:08:16:de:23:77:e0:ea:f1:d4:
c9:81:40:60:c9:10:c4:26:58:24:ed:92:51:41:0b:8f:67:9b:
c0:ba:a9:53:27:23:e9:e3:48:b6:d4:35:76:83:08:2e:d1:c7:
4a:ed:d4:a2:a6:ad:90:e6:ca:9d:90:59:39:47:23:3a:4a:35:
bd:c0:4b:18:e2:e4:6a:98:38:ef:e2:d8:76:22:10:79:a5:c1:
d6:15:38:67:1f:bd:c6:21:77:1c:41:e4:9e:34:05:69:5d:ad:
d2:cb:10:8a:b5:3a:aa:8a:a5:b8:2a:d3:c6:54:d8:c2:5b:42:
88:ab:d8:b4:ff:e3:ca:9c:30:79:b0:43:c6:4b:34:b5:f2:ea:
28:ce:4f:a1:bb:d8:1a:bf:fc:0b:d7:23:48:78:73:1b:d3:64:
1c:5e:a7:a6:bc:06:72:40:db:2a:22:ba:ce:30:e1:59:15:f3:
4d:d9:c7:02:47:72:e1:64:ee:37:69:63:6a:43:e4:1a:bc:9a:
eb:65:f1:6d:6c:c0:fc:67:21:33:8d:07:b9:aa:7f:c6:f5:2d:
38:f1:7f:4d:01:6b:ab:30:65:10:5d:bb:7d:7a:ee:1e:07:b4:
7d:7c:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net