Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/i5bqFGLzKx0ngbFrmwEAE0U1UoM.roa
File: i5bqFGLzKx0ngbFrmwEAE0U1UoM.roa (raw, json)
Hash identifier: PJ/HfmVtZ+6KkiPF3KlmnuzNaDSw888RC5r5LH4EV1o=
Subject key identifier: 8B:96:EA:14:62:F3:2B:1D:27:81:B1:6B:9B:01:00:13:45:35:52:83
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 099CB3A4
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/i5bqFGLzKx0ngbFrmwEAE0U1UoM.roa
Signing time: Sat 01 Jan 2022 16:05:24 +0000
ROA not before: Sat 01 Jan 2022 16:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51540
IP address blocks: 194.110.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161264548 (0x99cb3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jan 1 16:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b96ea1462f32b1d2781b16b9b01001345355283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:c3:91:09:bc:49:5f:3d:f0:50:52:77:3a:
7f:19:f0:25:32:ec:09:1e:f3:63:de:22:5f:cb:87:
98:52:85:41:42:df:e7:f5:94:a4:ae:b1:9b:a5:49:
69:4e:fd:cf:ab:59:a4:3e:77:da:62:12:4e:ba:70:
a9:54:aa:cd:d8:26:c8:32:24:f9:43:cc:9a:33:6e:
a0:d9:25:d6:9f:9b:6d:b4:b6:99:af:d7:1e:4c:9c:
23:41:bd:eb:ad:da:9e:83:72:5f:99:99:ac:48:f5:
65:73:19:29:37:f3:68:50:7d:bf:7c:77:8f:c5:ba:
4e:47:af:4e:0e:3f:a8:f0:21:0f:ec:98:d2:4c:f5:
53:bf:3e:be:e2:3d:6c:17:25:24:ba:8e:5c:5b:80:
e6:43:e7:c8:42:ac:47:10:79:b2:c5:af:2b:b3:17:
3d:5a:9e:49:00:c9:f5:48:d1:b2:0c:7b:c5:b6:8c:
47:47:98:47:34:89:c5:11:4d:13:9d:8e:f5:71:d0:
d3:27:04:ca:46:72:c1:a8:48:07:94:b7:51:0b:4d:
b8:fe:5f:5a:67:74:f2:70:3b:48:90:db:9b:67:17:
19:26:75:81:d7:c1:94:6d:c8:4a:c8:f4:11:2e:4a:
26:bc:80:db:8f:9e:0b:b9:20:a6:4b:a5:a1:9a:ff:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:EA:14:62:F3:2B:1D:27:81:B1:6B:9B:01:00:13:45:35:52:83
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/i5bqFGLzKx0ngbFrmwEAE0U1UoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.169.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7d:e4:40:40:29:5b:7a:10:30:b8:7c:88:cd:74:88:0f:75:
84:4d:6f:cb:89:14:f6:89:b5:ca:46:a8:c4:4d:20:fe:b2:f0:
8e:5a:f4:45:85:4a:c6:fc:0f:f4:01:76:23:e6:11:f0:7f:fb:
09:55:ad:44:b4:b7:32:cd:82:14:a9:49:10:f6:ec:d4:3f:6f:
12:87:b9:9f:b1:00:35:76:21:c1:e7:d5:c1:01:5f:dc:6d:de:
02:32:a7:6e:bb:50:6f:da:df:1b:c6:ae:a4:fa:fa:fc:8b:cd:
a7:5c:0c:0b:55:65:ed:62:9f:8b:d3:93:33:e1:c3:eb:d6:8d:
64:eb:09:61:ba:13:9b:16:1e:1c:5e:59:2d:00:cc:e1:3d:13:
ef:f5:b9:ee:01:2f:fc:fa:52:08:63:c5:1b:61:f0:7c:52:15:
ee:f1:6e:a3:00:b3:7c:02:82:2d:89:39:d5:69:c2:8a:d5:2d:
77:68:90:88:8f:83:59:fc:64:e0:14:d4:6a:ea:5f:00:d8:67:
54:52:a5:c5:b5:9d:29:a7:e3:30:e1:d1:9e:68:d3:90:0b:1c:
b5:8c:86:87:ab:c9:7e:5f:1d:3e:09:9e:83:4d:5d:ce:15:a4:
19:6b:37:6a:9e:a4:02:11:2e:a5:bc:48:4a:13:cf:6f:43:3e:
07:f4:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net