Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/SO6i7uNnm9PVtDjalmu5xayKMFY.roa
File: SO6i7uNnm9PVtDjalmu5xayKMFY.roa (raw, json)
Hash identifier: st/sah/eqDR8P73i9if++Hjyj4ai6+7lZxpknqIOHfI=
Subject key identifier: 48:EE:A2:EE:E3:67:9B:D3:D5:B4:38:DA:96:6B:B9:C5:AC:8A:30:56
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 137DCD22
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/SO6i7uNnm9PVtDjalmu5xayKMFY.roa
Signing time: Sat 01 Jan 2022 15:03:49 +0000
ROA not before: Sat 01 Jan 2022 15:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197380
IP address blocks: 185.127.112.0/24 maxlen: 24
185.127.115.0/24 maxlen: 24
185.127.113.0/24 maxlen: 24
185.127.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327011618 (0x137dcd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Jan 1 15:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48eea2eee3679bd3d5b438da966bb9c5ac8a3056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:97:9c:cf:d5:7c:ec:8a:9b:ff:0a:f7:56:
c9:01:77:75:35:90:fc:75:f1:84:8b:1b:f1:4f:59:
89:d8:ae:bc:5d:7b:30:3b:6f:d9:fb:95:d6:2b:c8:
90:3a:7c:ec:39:fd:7c:b7:dc:ae:bb:9e:53:26:97:
75:28:d5:0f:b0:e3:b1:b0:d2:18:0a:92:77:b4:df:
0c:40:70:d8:8e:63:2e:1a:31:c9:27:aa:45:c0:e9:
df:4d:79:d8:75:26:b4:9a:4a:cc:3a:31:67:d7:77:
50:4a:2c:d1:1f:1e:b4:6c:81:6b:4d:8d:5b:b2:41:
3f:42:71:88:40:ad:26:a8:82:17:03:a0:9f:46:13:
2f:90:48:bb:c4:2f:4c:d5:d1:f2:50:8f:06:90:0b:
1b:3d:a0:14:1e:42:73:e8:8f:f8:b8:4f:43:06:d7:
52:85:2a:84:5c:7f:11:f4:96:4a:24:ea:69:c9:a1:
6b:a0:0f:b8:ac:3b:88:09:ce:fd:1d:f0:20:cb:e5:
7b:25:b0:67:2e:35:1f:0b:e5:01:ac:81:1c:3c:1f:
bc:fd:7f:d5:76:e3:f8:7b:77:ae:1b:2e:87:1b:80:
7c:37:37:d8:e1:87:3f:6a:1e:99:d8:4a:21:54:ec:
1e:f1:2a:77:b0:69:b2:1a:ee:e6:bf:e8:3f:74:83:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EE:A2:EE:E3:67:9B:D3:D5:B4:38:DA:96:6B:B9:C5:AC:8A:30:56
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/SO6i7uNnm9PVtDjalmu5xayKMFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.112.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:9c:66:98:64:8a:e4:56:aa:58:af:ed:0b:9c:6d:e8:17:74:
c0:6d:f1:85:4e:b8:ac:fc:b7:c2:94:36:c9:d2:6d:0a:9f:d3:
8d:e7:2d:7f:1c:a2:97:97:93:90:13:5c:9d:1e:a9:f1:f5:c0:
3c:eb:5a:a8:e3:83:98:ce:e0:0a:95:64:f7:99:0f:97:6a:e5:
b9:c2:cf:7a:07:94:cb:bf:65:27:2d:1f:b0:4f:49:5f:44:a6:
21:6e:ef:9a:1a:b5:b6:cb:78:e5:29:13:38:15:62:e8:61:9d:
3b:5a:af:a7:0c:b9:e8:b3:c0:4f:14:20:bc:99:dc:22:05:67:
11:5b:33:50:7d:1f:ec:4b:2f:44:5a:7d:f8:a0:ea:b8:7b:98:
27:d6:e8:f0:3a:c3:d8:47:3c:13:8f:0f:25:0e:b1:92:5c:c9:
b2:4c:90:e4:6a:95:5a:29:0d:ee:e0:62:38:13:87:a2:9b:a3:
e5:0f:f8:3d:e6:ca:a3:d9:74:34:94:c8:9e:0a:63:73:3f:64:
2b:d0:b3:f5:21:80:d3:a4:0c:92:27:39:60:66:ee:7d:38:7b:
81:1f:c5:c0:5e:7a:b4:16:2f:bf:1c:3c:2e:ad:c4:34:84:66:
56:f9:9e:37:85:65:4d:19:34:4d:0e:24:e3:9e:47:34:31:54:
02:da:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:11 2023 by rpki-client on console.sobornost.net