Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/xsefOPQ1uUMYiuE459f37ZQRWmE.roa
File: xsefOPQ1uUMYiuE459f37ZQRWmE.roa (raw, json)
Hash identifier: Po4QuELRFnIM9UOFer6Ym2hSsLP26eql01/o7+/GW8s=
Subject key identifier: C6:C7:9F:38:F4:35:B9:43:18:8A:E1:38:E7:D7:F7:ED:94:11:5A:61
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 1702AA6E
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/xsefOPQ1uUMYiuE459f37ZQRWmE.roa
Signing time: Sat 01 Jan 2022 08:55:19 +0000
ROA not before: Sat 01 Jan 2022 08:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198085
IP address blocks: 195.66.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386050670 (0x1702aa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Jan 1 08:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6c79f38f435b943188ae138e7d7f7ed94115a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:6e:11:4b:bc:a7:a8:bf:c5:ca:f3:eb:99:
cc:7f:15:49:8b:ea:80:31:d7:b1:ce:fa:cb:90:cd:
d1:24:76:a5:90:c9:11:ce:36:34:e4:c6:e2:9b:db:
3d:78:cf:b7:4b:b5:f9:f4:ad:bf:54:ad:5e:7f:31:
61:0f:e0:b6:3e:c1:26:55:a3:b5:f8:c4:7e:5a:2e:
cc:49:2c:a2:ed:a0:0a:4e:7a:39:32:a6:23:dc:82:
02:a6:61:44:cb:4b:5a:51:ce:ab:e5:52:6d:ae:20:
28:39:25:b2:8c:bf:0a:53:a3:70:1e:e1:fc:6e:8b:
60:1b:ce:70:fa:17:46:7f:3d:d3:ba:c5:22:90:4a:
d2:4a:c6:81:e4:d1:78:34:28:d3:a0:93:82:e9:d2:
65:3b:a0:51:3f:c7:c6:b0:f1:bb:63:00:32:54:78:
8c:18:69:f1:f1:77:fa:ce:b6:0c:33:37:47:62:56:
dc:d1:86:c8:61:70:68:59:7b:cd:10:09:73:ad:17:
78:d9:3c:a9:ed:0a:f9:00:30:4e:5c:b4:0d:92:fc:
6c:af:8b:a8:95:8b:40:d6:b8:70:d5:f1:50:ca:0b:
e5:77:5b:86:f2:c5:98:d9:33:09:ae:6f:83:71:7d:
6b:7d:e3:fb:e5:28:b3:bc:3b:88:b6:bd:c2:4d:0d:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:9F:38:F4:35:B9:43:18:8A:E1:38:E7:D7:F7:ED:94:11:5A:61
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/xsefOPQ1uUMYiuE459f37ZQRWmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.110.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2e:73:4c:7c:5c:2e:c6:61:b1:de:27:69:f6:b5:e9:5a:f5:
be:d2:c4:7c:79:ea:bb:00:da:66:4c:09:d4:6b:e1:7c:bb:d8:
bc:85:d9:80:28:31:5e:ec:ea:48:6c:40:c8:4d:bb:9d:99:d4:
fb:d4:77:0b:7e:ae:52:48:32:34:9f:1c:72:58:63:cd:75:3b:
19:05:d2:1d:c1:08:bf:c7:c3:db:b6:97:d5:08:4b:dd:bb:34:
05:07:96:56:be:3e:83:84:00:d7:2a:5d:c8:96:e7:0d:45:22:
86:89:29:4a:78:56:f6:43:e0:90:8d:dc:8c:e7:7f:96:00:4b:
ae:8c:11:ec:70:92:07:59:d5:6a:f5:59:ac:ad:ef:5a:5f:b1:
9a:cb:9e:0c:b0:03:55:39:5d:65:2a:f1:20:54:c5:38:8d:72:
30:18:02:e5:19:02:f1:35:24:73:b6:95:ef:1d:9c:47:c1:08:
0d:5b:21:cf:65:90:06:ef:c1:43:80:84:3c:92:77:53:4f:7f:
5f:2d:13:7d:7e:1a:2a:e2:27:33:8c:35:f7:ba:f0:bd:b8:a5:
bc:4b:b8:a0:12:1d:b2:64:0f:73:9d:87:7b:34:50:d2:c6:f0:
d5:8c:b0:9a:fe:3c:c5:14:11:58:7b:d8:dc:4f:ae:88:65:e4:
68:65:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net