Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/o9OD-ZanOsbbSkVjbTFywdHbuo8.roa
File: o9OD-ZanOsbbSkVjbTFywdHbuo8.roa (raw, json)
Hash identifier: hevuTzlhxogMWpo61zip5S9Fi9sdsD276K+qXDmaArs=
Subject key identifier: A3:D3:83:F9:96:A7:3A:C6:DB:4A:45:63:6D:31:72:C1:D1:DB:BA:8F
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 091C5B26
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/o9OD-ZanOsbbSkVjbTFywdHbuo8.roa
Signing time: Sat 01 Jan 2022 12:04:08 +0000
ROA not before: Sat 01 Jan 2022 12:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 155.185.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152853286 (0x91c5b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jan 1 12:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3d383f996a73ac6db4a45636d3172c1d1dbba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:ee:5e:21:08:04:48:34:1f:93:39:05:e1:
ca:de:d4:75:e1:ce:2e:d6:d2:6b:e5:e2:c0:a8:d8:
46:c3:19:90:8d:01:37:40:c9:d7:3d:ad:7a:24:82:
4c:4c:21:03:2d:42:7a:c4:9d:a0:fc:b6:c2:f4:e4:
fd:50:c6:13:82:d0:cd:0d:4c:0b:d2:24:d7:72:92:
12:12:50:11:2b:e9:5b:e0:48:47:e9:c5:64:c6:a1:
8d:ea:f1:24:0d:a4:6f:80:c0:47:13:df:28:fa:90:
43:cb:83:b5:4b:bc:96:dd:16:10:47:81:90:35:b8:
33:d7:ec:9d:4c:fa:02:41:b0:01:5d:c3:d2:db:84:
ec:08:b7:7e:cf:a3:0b:c6:e9:81:23:50:b7:22:67:
1d:dc:b4:fe:b1:43:93:52:9c:f0:dd:d6:32:a8:27:
6a:52:03:1b:ba:58:1b:78:4e:31:e5:5b:2e:20:7a:
7b:5b:eb:5e:7b:ae:f9:37:08:c7:22:0c:08:5e:2b:
9c:6e:d7:f8:9c:5a:a7:53:d4:9c:2a:66:86:20:5d:
be:b4:59:52:d2:13:79:e8:00:56:e2:37:c4:e9:40:
c6:d3:16:c1:98:2d:b7:7e:d3:5b:7e:3a:3f:a2:b3:
73:09:df:2e:b8:38:39:e5:bb:d5:76:d8:04:9a:1f:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:83:F9:96:A7:3A:C6:DB:4A:45:63:6D:31:72:C1:D1:DB:BA:8F
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/o9OD-ZanOsbbSkVjbTFywdHbuo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.185.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:61:ff:1f:d6:fb:6c:18:54:38:3e:60:0c:27:72:2a:cf:80:
42:67:bf:c7:04:f4:8b:57:59:c1:0e:0c:bf:ac:f2:fb:c5:46:
04:42:e8:09:2c:3f:18:49:20:a3:0a:1d:e9:34:c1:4b:4a:3e:
96:eb:9a:15:de:a9:03:2e:07:7c:b7:f5:94:a3:b9:91:07:09:
ab:5a:b1:9f:f8:51:2a:da:53:b3:77:b5:40:b5:c3:55:e8:8f:
57:d1:a6:b4:94:03:da:0d:30:02:eb:4e:ee:77:07:17:a4:7e:
42:e5:70:79:ab:ee:46:d8:be:bf:92:17:de:f7:71:6f:08:fc:
a1:db:19:89:53:f6:88:d2:0e:8c:bb:5c:ac:e5:c3:77:0d:61:
86:ed:a1:de:b8:38:af:6e:f5:e4:42:4d:22:d3:e1:c9:56:b5:
40:10:cd:c3:07:fb:ce:73:99:3e:f5:e6:55:d0:9a:89:ba:b5:
59:1a:bd:03:c4:96:c8:e1:d9:92:a6:99:27:57:5b:72:36:74:
65:0f:28:67:7b:63:cd:23:6a:de:04:93:30:72:44:53:34:66:
40:36:8c:5e:de:77:f7:d9:d5:93:57:57:35:9e:a6:09:4b:f0:
8b:6c:1e:26:6c:46:59:74:c0:66:99:21:be:03:2f:35:40:85:
e6:20:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:11 2023 by rpki-client on console.sobornost.net