Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/iZYjJg9bKCSIAWjVGxuvGxPY_k4.roa
File: iZYjJg9bKCSIAWjVGxuvGxPY_k4.roa (raw, json)
Hash identifier: Bn22RBsZKhytLpYcJ3Dy9xShtqoNYdJPIP+RByALdcg=
Subject key identifier: 89:96:23:26:0F:5B:28:24:88:01:68:D5:1B:1B:AF:1B:13:D8:FE:4E
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 01821AB8ECFACEA88682128DB18E685FBD5F
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/iZYjJg9bKCSIAWjVGxuvGxPY_k4.roa
Signing time: Wed 20 Jul 2022 08:28:23 +0000
ROA not before: Wed 20 Jul 2022 08:28:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3225
IP address blocks: 185.75.56.0/24 maxlen: 24
185.75.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:b8:ec:fa:ce:a8:86:82:12:8d:b1:8e:68:5f:bd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Jul 20 08:28:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=899623260f5b2824880168d51b1baf1b13d8fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:e3:2a:18:1c:c7:77:a6:30:02:f2:30:b7:
58:b2:86:69:b4:e8:59:2e:3d:28:20:7d:de:2a:c0:
45:73:09:76:0e:a8:13:10:d8:e9:b9:d9:6c:9d:2c:
ea:c0:95:1b:7d:3e:44:3b:17:fb:83:6d:93:a1:8c:
69:85:1c:7b:82:e4:ff:30:dd:10:0c:b6:da:3b:7e:
35:61:e8:03:93:51:ec:8f:b4:b2:66:1e:b2:9b:21:
96:fc:68:08:ef:15:20:2e:00:8e:3a:45:39:fb:69:
b9:e8:c6:52:a0:89:ac:43:53:28:d7:79:b7:6e:58:
b4:49:f8:67:3f:3c:71:09:34:ba:84:12:fb:93:46:
de:fc:2e:9f:95:e6:3c:91:33:76:9b:34:19:63:0b:
ca:43:13:5a:f6:c5:3e:af:e9:43:fd:9a:41:1e:8a:
16:f9:4f:42:c7:f0:e4:19:ba:c5:fb:a4:64:08:eb:
96:44:85:15:d1:93:f6:96:1b:2d:f7:eb:80:07:86:
36:27:76:f5:8c:81:aa:99:b6:4d:72:0c:86:e7:4d:
d7:3b:71:1c:b2:7f:46:a1:4d:42:db:ca:b4:d9:29:
81:bd:8a:af:93:ac:8c:45:2a:49:c3:3c:7d:06:3a:
6a:54:12:b0:d5:14:76:f3:60:f4:f1:3f:30:84:c6:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:23:26:0F:5B:28:24:88:01:68:D5:1B:1B:AF:1B:13:D8:FE:4E
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/iZYjJg9bKCSIAWjVGxuvGxPY_k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.56.0/24
185.75.59.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0c:ce:83:a6:c1:2e:c2:b7:4f:63:48:29:db:ce:0f:68:ca:
32:20:62:b9:70:42:8a:e8:17:9f:16:c9:c1:c2:7e:a1:0b:28:
a9:93:3c:bf:fb:e8:59:25:ef:05:81:f3:8a:67:1f:cf:40:57:
d0:06:c5:38:ec:2f:ff:6c:97:a5:d5:d0:23:1b:6a:e6:f8:3d:
59:78:66:dd:5b:8a:b0:f8:e9:17:d5:8f:1b:bd:6d:5d:f8:9c:
3e:1d:d0:ab:92:d4:c2:db:be:44:77:87:8a:81:21:ef:e2:97:
e1:29:c5:8a:1d:6a:c7:31:0b:47:7e:66:e5:62:b9:d7:da:ed:
54:cd:26:b5:72:09:b7:db:e8:02:8b:0c:34:31:ee:11:8a:e6:
20:9d:9d:33:c8:3b:eb:0f:50:54:e5:1f:55:cc:10:cd:98:53:
00:15:e8:0d:f2:7c:5a:50:13:03:06:fc:02:e2:56:5a:6f:e6:
ef:9e:72:ac:60:f5:8d:08:39:4a:cd:dc:ee:87:29:85:de:d5:
38:01:d2:84:a5:c7:95:d7:88:b7:82:08:6e:ca:9f:46:d8:6e:
6f:5f:76:7d:e4:e3:53:ad:db:aa:66:68:40:a2:98:b4:e0:13:
90:94:c0:b7:d5:48:bc:a5:f3:ff:9a:d6:72:d6:a0:8b:49:28:
84:eb:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net