Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/O6iosONSojH9Wy1JC0P0aHLOb-o.roa
File: O6iosONSojH9Wy1JC0P0aHLOb-o.roa (raw, json)
Hash identifier: oYyvyFmJ4Iht4Du6KUW7nzws9V9tNYh8J3qZcxTPcIA=
Subject key identifier: 3B:A8:A8:B0:E3:52:A2:31:FD:5B:2D:49:0B:43:F4:68:72:CE:6F:EA
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 4C7D8E
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/O6iosONSojH9Wy1JC0P0aHLOb-o.roa
Signing time: Fri 03 Jun 2022 17:29:20 +0000
ROA not before: Fri 03 Jun 2022 17:29:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 192.166.225.0/24 maxlen: 24
192.166.224.0/24 maxlen: 24
192.166.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5012878 (0x4c7d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Jun 3 17:29:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ba8a8b0e352a231fd5b2d490b43f46872ce6fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:79:72:ee:71:bf:8c:87:ed:aa:6f:3e:8d:
a1:5a:eb:66:d2:d9:1f:d7:44:2a:b2:53:e8:d1:a2:
3a:e0:21:1f:fe:0d:90:6a:35:10:37:85:48:8f:d9:
4d:3b:47:1d:e0:38:cb:7d:4c:91:9f:b8:64:07:8c:
ec:ed:70:d0:c6:a8:94:9d:2c:18:58:1a:c3:10:74:
00:f1:77:2f:8e:d3:61:17:fc:8c:20:26:7c:49:75:
fe:40:37:bf:3d:18:9e:64:e1:a5:eb:3f:db:83:20:
c7:eb:33:69:f9:03:16:81:e4:d5:ce:17:3c:3e:64:
d1:de:a8:92:a8:c2:e4:d2:36:b4:c3:2e:d4:37:0a:
61:1f:69:c0:07:74:e5:e5:70:6a:79:cd:35:ef:dd:
6f:88:54:d5:78:b3:90:8c:36:89:e3:79:56:83:81:
80:0a:0f:aa:61:70:83:53:10:86:fd:e5:f7:2a:e3:
ae:84:f4:01:55:f1:20:d1:36:2d:dd:d1:b5:b2:60:
ad:38:31:a0:fd:12:45:86:89:17:dc:5a:32:4b:5b:
e5:74:2f:1a:b5:22:fe:cc:8f:fa:4f:7a:f8:0f:b8:
56:70:b0:22:b8:2d:33:4e:d3:4b:ad:2c:88:14:fd:
5d:40:c4:dd:31:fc:5f:96:bd:ba:e2:02:43:3e:88:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:A8:B0:E3:52:A2:31:FD:5B:2D:49:0B:43:F4:68:72:CE:6F:EA
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/O6iosONSojH9Wy1JC0P0aHLOb-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.224.0-192.166.226.255
Signature Algorithm: sha256WithRSAEncryption
2b:f8:b1:73:b3:6f:e9:e5:e8:73:30:d8:f5:32:07:00:87:ed:
d8:2d:b5:78:96:d0:1c:84:dc:97:cf:48:b3:e7:05:cc:73:84:
69:4d:a0:07:eb:50:88:95:7b:5c:96:f9:cf:52:cf:b6:e1:cc:
18:3f:ea:c8:88:9f:ad:ee:24:9f:3a:e3:24:e3:e9:ba:07:3c:
cd:f7:39:ae:58:5e:23:17:af:9d:fe:5d:ee:dc:fd:ff:dd:9a:
d8:05:72:0e:85:86:ff:da:5d:f9:72:24:ff:4e:6f:77:44:3f:
ff:bd:fb:6b:63:b4:8f:27:32:e6:ab:b1:cb:37:f2:76:8d:08:
8a:a0:35:64:57:3d:e5:88:f5:d0:30:3e:b2:35:68:14:1c:37:
b7:54:f2:0a:5b:6f:cc:99:2d:7f:8a:8f:58:9c:53:42:21:43:
30:3d:db:cd:0c:8f:4e:cd:ca:e9:6e:c5:fd:6a:36:ec:d2:be:
cf:be:ae:2f:5b:56:85:ba:b1:30:7e:2d:4b:bc:22:1d:9c:3d:
14:28:7b:35:db:70:f6:79:45:8a:1e:d3:3f:b9:cc:05:bf:e5:
1e:a3:03:62:e3:e8:17:08:f9:25:fe:35:cc:e9:7b:02:74:ad:
4a:22:06:68:7f:1f:7a:86:81:90:e7:1e:8c:b9:07:96:ce:e7:
2a:9d:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net