Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/S0_m461et5-nBCuAbR-QySd1Tio.roa
File: S0_m461et5-nBCuAbR-QySd1Tio.roa (raw, json)
Hash identifier: Vy6hjr6PIqHGAzhsGvQ3hKyR7ca++M0KsF1UiibGIvI=
Subject key identifier: 4B:4F:E6:E3:AD:5E:B7:9F:A7:04:2B:80:6D:1F:90:C9:27:75:4E:2A
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 01831263DC83337C33340512180920F2C431
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/S0_m461et5-nBCuAbR-QySd1Tio.roa
Signing time: Tue 06 Sep 2022 10:41:17 +0000
ROA not before: Tue 06 Sep 2022 10:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204922
IP address blocks: 185.235.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:63:dc:83:33:7c:33:34:05:12:18:09:20:f2:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Sep 6 10:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b4fe6e3ad5eb79fa7042b806d1f90c927754e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:0e:82:0c:de:df:08:2b:77:f6:76:21:c8:
8a:8c:14:8d:b5:42:ca:59:69:f4:a9:43:f6:8e:9a:
73:06:dd:41:b2:bc:c8:74:1d:69:d8:7d:f3:66:9c:
8c:69:75:12:29:0b:67:ef:cf:74:af:23:13:f7:cb:
a7:01:4a:c3:7c:8a:04:54:f1:19:d1:9d:96:f9:65:
75:02:30:8e:d3:19:9a:de:36:94:da:74:dd:77:b8:
74:2b:68:0f:38:50:72:43:e0:c3:ec:81:57:4c:4e:
8c:fc:f8:95:0b:5a:6a:96:ff:d0:9c:fd:2a:ab:e5:
f3:09:d6:17:17:63:5e:e5:ef:0a:86:da:98:40:55:
4b:32:90:47:47:0a:a3:ce:00:2c:d4:d4:54:7b:ec:
d8:d0:50:55:0b:35:ad:d8:4b:22:17:2c:c8:bb:03:
27:d4:e7:01:8c:1c:fa:bc:4b:17:0a:b3:39:a1:45:
63:3d:1f:66:07:c6:ed:2d:63:5f:44:f4:8b:eb:bd:
80:fa:2c:7d:7b:26:05:c0:3a:5a:f5:d2:55:ae:5e:
d5:e3:93:22:06:97:e2:4f:de:43:4b:a5:ac:3e:ad:
1a:aa:87:8d:40:bd:e0:9c:f6:a0:c2:84:41:29:5a:
54:42:d2:15:33:f5:c5:16:79:18:68:2b:87:0a:81:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:E6:E3:AD:5E:B7:9F:A7:04:2B:80:6D:1F:90:C9:27:75:4E:2A
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/S0_m461et5-nBCuAbR-QySd1Tio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.208.0/22
Signature Algorithm: sha256WithRSAEncryption
72:74:c3:4e:c7:40:6d:74:bd:10:3e:78:a6:27:50:78:bc:91:
d5:4d:41:95:1c:9a:b2:25:b3:46:f7:5a:50:16:c4:41:6a:46:
16:b9:5b:57:00:41:ca:cd:13:22:a9:d9:7b:da:92:7f:97:9f:
0a:22:95:b6:e1:0f:b1:9a:e9:2b:30:5e:eb:d9:e1:3a:d8:d4:
bd:c6:d9:21:ed:54:d7:c1:66:b9:57:26:31:fd:57:9e:67:fa:
94:83:69:3d:f4:28:29:60:af:4e:84:06:a0:72:84:25:61:9e:
b2:5e:5c:03:71:46:f0:ae:24:12:4b:73:81:12:49:39:6b:89:
97:03:b1:ef:5d:b2:b5:54:f9:9b:4d:42:f3:dc:c3:49:45:fa:
55:f3:6f:45:a0:23:f4:79:0a:53:e9:f8:09:f2:1e:46:8a:ea:
28:17:30:19:d2:bf:2b:0b:51:81:74:83:60:22:74:9a:4e:86:
72:45:8d:25:c6:b5:03:91:b4:4a:e3:43:b3:9e:6c:f1:85:e8:
f5:40:42:f2:bb:3d:4f:91:07:df:e9:34:f1:54:e6:d7:e6:c1:
a8:30:df:f5:89:42:8b:ff:7b:19:43:e2:e0:e7:62:14:dd:d9:
e9:7d:c9:7f:a9:77:71:38:b3:87:7e:dd:e0:df:b7:d5:d2:b6:
ad:77:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:00 2023 by rpki-client on console.sobornost.net