Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/pYNFzJko5SmB3uVeHazGCIL2SnQ.roa
File: pYNFzJko5SmB3uVeHazGCIL2SnQ.roa (raw, json)
Hash identifier: rZeeFVthy+SPFZd2pIiQjZfo0OiUiv5JC8PkoaA1eZc=
Subject key identifier: A5:83:45:CC:99:28:E5:29:81:DE:E5:5E:1D:AC:C6:08:82:F6:4A:74
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 032D0E9D
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/pYNFzJko5SmB3uVeHazGCIL2SnQ.roa
Signing time: Sat 01 Jan 2022 10:01:26 +0000
ROA not before: Sat 01 Jan 2022 10:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212083
IP address blocks: 193.247.144.0/24 maxlen: 24
147.189.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53284509 (0x32d0e9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jan 1 10:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a58345cc9928e52981dee55e1dacc60882f64a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:ff:7c:bc:32:4d:52:15:9b:a9:50:bf:b7:
5a:63:91:04:c9:a3:b8:bc:12:0e:37:38:0e:6c:09:
c7:8d:20:7d:8c:c7:f6:70:b2:7b:04:97:d4:12:ef:
73:1d:f1:b3:40:d0:5c:0d:c9:a5:53:ea:11:06:fb:
0e:a0:02:7d:ef:40:f3:43:06:17:11:3d:c9:58:61:
1e:12:aa:f4:a6:f6:e2:05:e1:fb:92:14:31:3f:6a:
7f:f1:7b:30:64:2f:5b:66:0a:ec:de:e4:02:95:a0:
27:43:81:f1:4c:4f:fa:cf:20:26:e3:c5:44:e0:3b:
e5:9d:74:21:96:99:bb:8c:db:ad:93:a8:d0:32:f5:
2f:a6:14:56:b5:95:4d:68:2a:ca:97:12:a3:7f:a9:
25:d0:5e:e7:da:45:d8:9f:da:b2:b9:7e:66:70:c0:
c1:f3:14:ff:b3:d8:50:67:1d:e8:2d:8a:7a:f5:45:
e3:93:9a:17:d5:7e:1f:bd:97:ac:97:5d:a0:a6:71:
cf:b7:4c:e6:92:c7:76:ff:0a:3e:a1:f5:c1:d6:87:
49:18:f8:66:d5:e6:dc:be:d7:0b:3d:15:4b:2f:e2:
91:2e:ad:1b:cf:90:20:95:61:9a:5a:e1:76:7e:43:
0b:57:42:47:c5:1f:73:a1:a4:c4:0b:68:96:27:2f:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:83:45:CC:99:28:E5:29:81:DE:E5:5E:1D:AC:C6:08:82:F6:4A:74
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/pYNFzJko5SmB3uVeHazGCIL2SnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.161.0/24
193.247.144.0/24
Signature Algorithm: sha256WithRSAEncryption
81:99:16:2e:64:33:55:b0:12:8b:d5:8e:df:5c:17:ed:54:89:
10:a5:33:81:33:c2:8d:fe:7b:68:79:c0:3d:67:7e:7b:11:0a:
0b:4e:47:5d:b6:6a:b0:97:67:10:68:19:6b:e4:62:c1:91:ef:
cb:1d:50:7d:c3:ad:2b:75:c2:23:ff:2c:2e:28:60:2d:ca:44:
01:b8:21:a9:cc:8a:d5:bc:c0:71:19:93:f5:ef:a0:51:7a:d9:
ee:09:80:9d:82:94:90:17:55:cd:bf:83:e7:a9:80:38:c3:b5:
1c:55:9e:2b:c3:63:bc:00:eb:3e:3c:dc:12:65:33:87:bd:fc:
4d:e6:52:3e:60:df:a0:96:47:c8:a5:b8:04:33:8c:8e:c5:42:
d0:d8:bf:85:cf:fc:4d:7c:85:f8:39:ff:45:3f:ba:0a:49:57:
e5:e8:26:2d:28:c4:2f:9d:e6:bd:3d:46:a5:81:82:5f:2d:3a:
bc:36:87:8f:59:a0:aa:b3:49:f2:32:c9:98:e8:f4:08:a1:53:
54:26:5d:f7:55:1b:f4:39:ed:1c:d9:84:88:e2:40:e0:ac:b6:
18:a6:f0:4d:c5:c5:8a:1b:43:a2:c9:55:73:d9:d4:e4:3d:ec:
a3:cd:5b:50:fc:28:5d:a7:d6:53:ff:02:ae:2c:24:e9:cd:1e:
da:c0:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net