Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/ONy_SiciKmCXhOf-q5Pv6qZK1mc.roa
File: ONy_SiciKmCXhOf-q5Pv6qZK1mc.roa (raw, json)
Hash identifier: g7IxQLFD58qCA4Hoiyyd96AUcGRzpXYwqzkluxak7N4=
Subject key identifier: 38:DC:BF:4A:27:22:2A:60:97:84:E7:FE:AB:93:EF:EA:A6:4A:D6:67
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 40CA3C24
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/ONy_SiciKmCXhOf-q5Pv6qZK1mc.roa
Signing time: Sat 01 Jan 2022 08:00:29 +0000
ROA not before: Sat 01 Jan 2022 08:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16086
IP address blocks: 192.102.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086995492 (0x40ca3c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 1 08:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38dcbf4a27222a609784e7feab93efeaa64ad667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:6a:01:39:29:a2:20:2e:1b:0e:96:22:c1:
1d:43:e6:60:bc:30:41:71:8d:27:ab:a2:bb:5b:41:
6c:57:e8:81:40:bb:23:e3:6b:a6:88:f7:7d:09:3e:
42:06:ca:e5:82:1e:07:73:f3:af:95:37:b8:e9:3b:
47:b9:34:03:e1:5b:a2:9b:de:3e:46:10:4d:1c:73:
fb:24:f2:4f:e8:4c:d0:8c:8f:c7:cd:53:ac:ac:df:
3e:e8:8d:9a:2a:7a:f8:4a:b2:1e:a8:49:3e:c5:b6:
6d:9f:6d:5a:2a:8b:41:84:33:f3:eb:93:b5:12:ab:
35:f9:d9:26:fc:e9:43:77:da:cb:91:38:5d:00:54:
12:47:03:30:ed:83:e1:92:e2:f5:4a:03:cf:aa:dd:
94:bd:14:63:4f:db:77:b3:e0:03:f8:56:67:1b:27:
d9:c7:b6:52:df:f5:70:eb:34:b1:5d:24:44:31:95:
9b:17:99:fc:1e:92:5f:d0:c1:30:78:15:b8:fb:43:
54:56:74:a0:ee:75:29:58:67:83:44:be:d7:a2:fa:
e0:ad:69:8f:ac:06:e7:43:49:39:cb:40:f4:1a:44:
06:fc:e7:b3:66:1a:21:1d:0e:a0:2c:9d:27:dd:47:
3f:72:63:17:07:65:90:ce:4c:26:f1:cf:eb:0b:94:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:BF:4A:27:22:2A:60:97:84:E7:FE:AB:93:EF:EA:A6:4A:D6:67
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/ONy_SiciKmCXhOf-q5Pv6qZK1mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.102.52.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c6:6f:6f:fb:32:ec:b6:f8:08:6b:83:dd:85:43:0b:8e:8c:
a6:e0:17:ea:47:61:98:07:70:eb:24:9c:81:2c:4f:3b:fe:59:
86:20:6f:b6:28:67:1d:a6:8f:b5:2e:fe:58:5e:90:1f:b8:05:
a0:66:bf:0e:6c:e2:66:0c:6e:28:ae:1c:87:1a:f4:26:85:12:
5c:b9:5a:43:a7:fb:52:fe:4e:eb:da:d0:19:32:26:35:ea:0f:
89:f3:eb:23:c3:57:70:72:64:81:9f:06:35:f7:4a:16:79:3e:
17:e6:a1:c6:91:df:31:32:9f:22:41:43:ea:3b:5f:f8:8d:b5:
c1:7f:58:6f:7a:2d:f8:3d:fd:e1:ae:51:74:9b:90:f7:c9:d7:
77:36:65:a7:1b:ab:9c:95:06:8d:a0:63:d2:d3:c1:e4:f6:a8:
e5:2a:cc:cf:fa:c9:a4:59:b3:48:89:22:78:05:ff:28:77:be:
31:67:64:e9:f3:61:3e:2f:85:a3:25:1e:48:6e:b6:d0:c6:6f:
e9:06:95:4b:6d:b2:60:a7:97:47:85:39:8e:dc:51:51:dd:e0:
ff:6d:64:2e:3f:89:55:7e:01:07:d4:15:7d:78:c9:77:0f:fe:
de:b0:82:98:a1:9c:7e:39:b2:02:c5:7d:3a:bc:5f:88:00:52:
1b:e7:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:50 2023 by rpki-client on console.sobornost.net