Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/kNswiNLvBFyLZi8WGrHcGrWEMv8.roa
File: kNswiNLvBFyLZi8WGrHcGrWEMv8.roa (raw, json)
Hash identifier: wfPhdteqDQPuu2LubaiTStoqd6YCjwt0Q4QJ6MCCExM=
Subject key identifier: 90:DB:30:88:D2:EF:04:5C:8B:66:2F:16:1A:B1:DC:1A:B5:84:32:FF
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0AB032E4
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/kNswiNLvBFyLZi8WGrHcGrWEMv8.roa
Signing time: Sat 01 Jan 2022 12:00:24 +0000
ROA not before: Sat 01 Jan 2022 12:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51703
IP address blocks: 213.153.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179319524 (0xab032e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 12:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90db3088d2ef045c8b662f161ab1dc1ab58432ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:b5:24:26:a3:95:37:ad:98:c3:63:73:03:
78:96:2c:ee:0c:d3:7a:a1:4b:5c:3d:20:0c:e1:26:
ae:32:df:f4:78:b2:f3:61:6f:5f:f1:92:09:e1:a0:
b0:86:09:0a:96:27:b1:e4:c2:ed:66:29:98:e7:9b:
98:76:b4:59:19:b5:36:ee:35:a2:98:5d:3b:5d:44:
f7:84:f7:4a:13:14:3b:d9:47:ef:d4:5b:fc:43:92:
75:bc:e0:6a:6e:9b:f7:c0:54:ec:13:c7:12:81:ce:
f6:a5:87:87:bd:6f:a0:13:9a:28:23:77:db:a4:2e:
96:d0:d2:35:08:64:4f:a7:4d:b2:47:c5:fb:f8:a7:
53:2f:f9:6e:01:81:bd:f2:d9:d6:5c:91:93:68:f3:
1f:50:15:fb:95:15:00:50:9c:74:db:2c:7d:03:74:
bf:89:5b:2c:c9:45:25:7d:08:5e:5f:7f:2e:e6:60:
5a:51:90:6c:56:ed:62:05:0b:97:a0:6b:49:1f:fd:
06:34:d5:30:77:d7:ca:91:13:ac:48:da:86:53:c3:
96:6f:c4:52:2a:c1:2d:f2:59:21:68:52:ef:78:0e:
2b:ab:31:f7:e0:f4:88:ca:48:5f:a5:fd:23:ab:ee:
48:d1:8d:3f:ab:71:76:52:c3:eb:5c:30:a5:41:43:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:30:88:D2:EF:04:5C:8B:66:2F:16:1A:B1:DC:1A:B5:84:32:FF
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/kNswiNLvBFyLZi8WGrHcGrWEMv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.153.172.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0d:f4:88:86:97:75:1f:5e:a3:1e:6b:0e:6c:22:1a:ec:64:
9f:fe:a1:b4:0d:ea:59:57:d0:3b:68:a2:8b:0a:7b:74:ba:2f:
41:e1:29:4a:fb:17:f3:45:81:06:48:3d:0e:f0:39:86:8f:66:
e2:18:44:be:c3:b6:23:39:a6:eb:e7:0b:23:26:2f:01:0d:fe:
04:8c:e5:20:f9:d2:85:68:18:b5:2a:30:1d:94:5e:f4:14:2e:
b0:43:3f:4b:52:fb:27:4c:30:55:1d:17:77:96:24:02:3f:27:
ee:b8:94:7c:1b:68:6a:15:b4:ac:8d:fd:d8:b9:3e:c2:3c:f9:
b0:16:8a:f8:58:d2:a3:1e:27:d1:da:18:d6:2f:a9:d0:f8:2a:
15:f9:5d:9a:43:b2:31:91:81:97:c3:aa:fb:ff:60:1f:19:06:
48:24:30:7a:4d:65:d9:c5:0e:cd:ff:3b:00:94:9c:7b:c2:79:
69:ef:7b:02:83:49:e5:97:4b:ba:ba:ea:d4:bb:8c:07:8b:45:
53:ba:08:a3:b7:b2:06:02:69:52:20:53:62:10:03:12:38:03:
83:8c:39:4b:d8:c8:95:12:ed:64:19:30:c8:f0:46:2f:da:8d:
80:0b:b2:e7:29:76:df:76:19:1a:ca:68:3d:c4:c4:64:c5:42:
3d:31:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:57 2023 by rpki-client on console.sobornost.net