Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/t-kLadQg3xmeyQSy7S9HQFKr28Q.roa
File: t-kLadQg3xmeyQSy7S9HQFKr28Q.roa (raw, json)
Hash identifier: bZjwd4r45//pe49ZrmbFF1dicX7Ol3KRDYeDXhW4qCs=
Subject key identifier: B7:E9:0B:69:D4:20:DF:19:9E:C9:04:B2:ED:2F:47:40:52:AB:DB:C4
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 78004B
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/t-kLadQg3xmeyQSy7S9HQFKr28Q.roa
Signing time: Sat 01 Jan 2022 00:50:59 +0000
ROA not before: Sat 01 Jan 2022 00:50:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204566
IP address blocks: 185.243.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7864395 (0x78004b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Jan 1 00:50:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7e90b69d420df199ec904b2ed2f474052abdbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:ba:fb:45:74:bc:45:d5:c5:05:10:ba:ad:
1f:77:60:55:63:98:84:10:e2:d1:9c:40:ae:c3:2d:
3a:68:38:fd:24:7f:3d:02:39:f2:39:eb:b0:12:59:
0a:08:12:97:17:2a:61:7e:d1:aa:52:a7:93:7c:4f:
a0:4c:9b:7c:71:27:5d:df:ed:d0:b0:3b:0f:10:41:
58:29:1e:6d:ca:b0:64:36:6d:2d:5d:09:6f:9d:cf:
73:33:e5:97:93:b2:f9:53:0f:42:ee:8e:43:c4:0a:
d4:d8:42:26:c1:93:a5:11:53:f5:2a:22:3b:16:47:
90:00:e8:c5:03:93:56:46:35:c0:bb:f0:a6:29:c8:
d5:b9:d9:7b:e7:63:dc:e0:13:bf:eb:b3:61:a4:80:
cb:2f:76:40:bd:6d:57:65:d8:cf:bd:d4:bb:fc:a9:
90:bd:74:d9:84:8f:cd:21:ff:74:09:f3:e2:8e:4c:
b9:d1:aa:26:12:55:94:da:a3:56:2c:c5:cb:57:7b:
ac:bf:3a:96:4f:cc:eb:14:8c:f1:61:2d:8c:c2:2e:
6f:c0:13:c9:2d:8f:08:d1:16:d4:65:9f:c1:35:f2:
22:06:5c:f3:b8:ff:93:05:1b:9b:d3:45:c4:f0:2f:
4e:a1:4d:fb:eb:0e:ec:71:cd:e8:53:b3:7e:a5:bd:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:0B:69:D4:20:DF:19:9E:C9:04:B2:ED:2F:47:40:52:AB:DB:C4
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/t-kLadQg3xmeyQSy7S9HQFKr28Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.208.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:5f:ce:52:08:8e:8e:58:2c:51:89:39:53:e0:87:21:a3:d1:
5b:ed:72:71:92:2f:e2:2b:6f:fe:3d:0f:63:fd:4f:95:3e:89:
ac:25:5a:0d:91:60:0b:5d:76:a9:08:74:4c:a8:39:87:fa:5e:
c7:78:51:ba:90:b7:dd:b6:66:8f:fb:b8:45:75:b8:43:dd:6a:
37:13:24:45:52:6f:1d:9b:06:7b:9d:66:6e:45:e1:1f:c5:a2:
12:5b:4c:9d:79:1b:57:e8:5e:8b:60:66:83:6f:22:0b:d9:8a:
6f:6a:1b:9c:3a:67:bd:8d:f0:36:10:0d:b5:b8:30:d6:6a:23:
10:41:79:80:04:20:4a:e1:58:b0:3c:2e:f3:c5:81:bf:eb:0b:
ae:b3:b3:00:74:02:72:ad:9d:5d:63:e0:bb:4e:7e:9d:34:3d:
86:c9:91:20:d6:95:28:b6:60:72:4e:a4:4e:0a:5f:71:53:9b:
f8:a2:40:08:ee:65:50:71:2a:8b:f1:e7:0d:5b:30:3d:46:4f:
8c:c4:19:dc:38:cd:6d:ca:0e:1b:c5:e6:57:35:87:05:d4:f3:
f6:aa:b2:eb:ea:3e:36:2b:35:d7:8f:e8:94:95:32:2c:e4:23:
e7:ec:09:8e:94:38:23:fd:7f:a5:09:c8:1d:74:2c:f4:eb:3e:
77:5f:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:00 2023 by rpki-client on console.sobornost.net