Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/EW9g5JfuTb85-C06ZWFmknya7U8.roa
File: EW9g5JfuTb85-C06ZWFmknya7U8.roa (raw, json)
Hash identifier: xLw0XZcqgfuLoGZkFuBftlY/aMB5QECetia2Epi8Ebc=
Subject key identifier: 11:6F:60:E4:97:EE:4D:BF:39:F8:2D:3A:65:61:66:92:7C:9A:ED:4F
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 01824A7BCB39641A0983824CE8DBCC1D91B2
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/EW9g5JfuTb85-C06ZWFmknya7U8.roa
Signing time: Fri 29 Jul 2022 15:03:23 +0000
ROA not before: Fri 29 Jul 2022 15:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59942
IP address blocks: 195.245.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:7b:cb:39:64:1a:09:83:82:4c:e8:db:cc:1d:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Jul 29 15:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=116f60e497ee4dbf39f82d3a656166927c9aed4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:46:0a:5a:92:d0:ae:b3:70:01:8c:f7:14:
79:3d:b5:2c:ac:18:04:b3:c5:53:2e:bf:57:34:07:
4d:24:88:4c:a6:84:c5:89:fc:27:f2:38:6d:d9:56:
41:36:ec:26:20:a1:65:f9:89:79:e8:44:df:ba:92:
ad:8e:9b:a9:e7:1d:b4:ea:cb:7c:d3:e1:74:0a:e5:
64:fe:9d:07:c6:3e:2f:e7:85:33:8b:c6:48:db:98:
28:dc:9d:f7:10:e1:f5:17:0a:21:27:73:49:e5:24:
a3:cc:2f:03:29:30:c4:f8:0c:ac:8f:33:37:12:5d:
b1:6b:af:cf:ff:ac:e0:53:14:8a:07:26:bd:1f:ae:
8c:eb:c0:0c:fb:ec:d5:76:f4:4f:81:98:9b:ba:e1:
74:9d:93:7e:3c:44:e1:1c:71:8c:56:c9:f0:e6:8d:
45:81:50:04:1e:d1:17:8a:66:4c:c7:22:e7:b6:28:
aa:a9:df:47:3a:50:fc:ab:a7:51:cd:da:56:53:a6:
53:55:96:f2:d4:09:dd:7f:ee:69:8c:b2:20:03:c4:
84:5e:16:0d:de:a3:05:61:2d:8a:71:5c:58:0b:4a:
0e:b7:78:d4:cf:a5:82:c7:e4:02:4d:e1:74:eb:7a:
f5:3f:28:26:42:68:76:49:25:60:47:5c:9a:c6:25:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:60:E4:97:EE:4D:BF:39:F8:2D:3A:65:61:66:92:7C:9A:ED:4F
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/EW9g5JfuTb85-C06ZWFmknya7U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:14:fa:9c:e8:c1:66:7c:ef:10:74:58:dd:9a:0a:1e:7b:a3:
18:06:f1:ae:93:39:6f:b7:93:f4:03:5c:11:05:a9:0e:ab:fb:
49:3a:f7:a5:0c:2e:eb:15:40:b4:4c:3e:47:72:a9:56:16:a3:
35:fd:6e:fc:41:89:03:37:83:d2:c6:b9:c0:59:d6:bc:1b:61:
be:00:c9:04:3c:d7:47:db:89:72:8d:b3:ca:26:47:a8:a6:00:
04:a8:a9:44:dc:25:3d:db:cd:48:07:5f:7b:68:0d:47:e0:9e:
e0:4f:ab:5a:8d:8c:a6:d3:a3:40:ae:a6:f3:4c:ad:79:13:fa:
10:bf:0c:9d:24:75:17:60:a1:55:f9:0d:1a:d2:43:27:18:09:
0b:10:02:64:10:9f:d5:2d:f8:e6:54:07:1a:5f:a6:17:26:8a:
23:6c:13:fa:23:e8:f7:20:a3:43:ac:e4:8a:e1:2b:2a:9d:c0:
e8:f8:67:64:92:35:8a:01:ed:07:58:c4:04:2d:93:03:69:ea:
31:20:e9:cd:02:5b:1c:82:44:ff:00:ad:d7:e4:c8:bf:ba:2a:
05:68:86:36:b0:33:32:76:c3:10:4d:8e:29:4f:7a:8c:3c:1c:
a4:de:4d:4b:7f:d7:7b:56:34:a8:56:98:80:ba:4d:bc:43:7f:
bb:b5:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net