Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/T00VuI5S9iM6dVZmlkojUgzCfeI.roa
File: T00VuI5S9iM6dVZmlkojUgzCfeI.roa (raw, json)
Hash identifier: uw/pT+UkGB2tzhqea92oAk1bZJ4McDPWi624ch7f5F8=
Subject key identifier: 4F:4D:15:B8:8E:52:F6:23:3A:75:56:66:96:4A:23:52:0C:C2:7D:E2
Certificate issuer: /CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
Certificate serial: 02A14AF5
Authority key identifier: 99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/T00VuI5S9iM6dVZmlkojUgzCfeI.roa
Signing time: Sat 01 Jan 2022 11:54:25 +0000
ROA not before: Sat 01 Jan 2022 11:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56851
IP address blocks: 62.192.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44124917 (0x2a14af5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
Validity
Not Before: Jan 1 11:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f4d15b88e52f6233a755666964a23520cc27de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fa:67:1a:8d:0f:f7:35:0e:98:4d:76:90:87:
3c:8a:34:2a:57:cd:ab:f8:8c:86:14:b6:b8:92:e0:
57:ac:17:3a:a1:14:5d:da:b9:38:08:72:af:96:d0:
0a:ec:2f:ba:a7:4f:e8:17:08:c8:3b:4f:a8:bf:80:
4f:90:b0:88:ff:44:4e:e4:4a:40:e9:b2:11:d9:5d:
12:d1:45:ad:69:cb:c5:c3:30:0c:49:77:29:2e:26:
47:75:46:0e:94:45:40:ba:a0:72:87:67:89:6d:f4:
88:df:44:32:63:ef:d9:fd:59:ab:d3:89:d7:4c:0b:
8a:2d:96:c3:1a:d7:e3:51:3a:b8:d7:09:a5:2d:de:
04:c1:7d:d7:73:d8:92:4f:1e:d1:42:58:54:2d:dc:
3e:15:8f:ab:18:e9:54:16:9c:60:d9:aa:71:a0:f5:
1b:ac:72:23:72:cb:ae:48:7a:e3:55:95:a6:1d:f5:
50:ab:74:62:e8:f5:97:a1:dc:43:01:a4:f0:e7:e6:
f3:4e:92:cb:af:26:a2:bc:e3:b0:c1:fb:82:7e:fd:
d3:6b:0b:33:67:0d:e3:ba:d7:81:43:7d:a3:11:7a:
c5:e3:33:fb:9e:6c:84:5f:38:6f:ee:0a:db:16:36:
73:e1:50:88:63:38:74:c8:d0:7c:d7:82:4c:9e:9e:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4D:15:B8:8E:52:F6:23:3A:75:56:66:96:4A:23:52:0C:C2:7D:E2
X509v3 Authority Key Identifier:
keyid:99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/T00VuI5S9iM6dVZmlkojUgzCfeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.154.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7e:da:c8:7c:2e:31:aa:d1:38:61:7e:82:3c:51:1c:d7:fe:
fa:b6:8a:5e:f9:d8:bd:5e:13:f5:1e:30:ba:90:ca:27:ab:0f:
de:c4:30:a6:50:e9:88:2b:60:df:6c:9e:7f:f7:68:82:4e:d9:
fc:94:4a:de:2a:ec:eb:3c:ef:24:ad:1f:00:40:a4:3c:07:a9:
b1:85:f6:ad:66:1a:9b:b5:e9:49:7e:ae:60:28:c0:0c:e3:ba:
3e:ea:13:72:2d:be:bc:cf:b8:fb:43:21:f2:5a:dd:87:18:40:
5d:98:b7:2f:3a:8c:74:52:41:e0:2e:5f:de:ef:56:e3:a3:d8:
ba:d8:a8:46:c8:7e:cf:9c:2e:e8:90:22:f5:79:9d:62:f3:4d:
77:f2:21:44:48:b7:e9:8c:73:4c:4e:53:88:8d:1e:f9:83:7a:
25:be:38:87:f2:5f:30:0e:de:b6:fb:c6:67:d1:27:48:9f:34:
70:8b:2e:69:bc:6f:9a:0a:74:f9:59:50:9a:8c:3c:c0:33:ee:
6a:4a:1c:72:31:19:06:c2:ce:35:84:36:0a:96:13:41:3f:fa:
b1:ed:42:83:aa:a5:1a:db:44:4f:15:7d:8f:ba:49:c5:7d:20:
c5:8b:c3:5a:f9:08:70:6e:da:4d:15:0b:7f:c5:0b:50:36:ba:
6f:2f:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net