Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/XubH4pft_ik9wXBDFxwUSBrpZGk.roa
File: XubH4pft_ik9wXBDFxwUSBrpZGk.roa (raw, json)
Hash identifier: Jtxv8LnyJiTpRSW05n/3qYfshpFQylnF052N+pHu1wY=
Subject key identifier: 5E:E6:C7:E2:97:ED:FE:29:3D:C1:70:43:17:1C:14:48:1A:E9:64:69
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 02F162B9
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/XubH4pft_ik9wXBDFxwUSBrpZGk.roa
Signing time: Sat 01 Jan 2022 06:59:47 +0000
ROA not before: Sat 01 Jan 2022 06:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16338
IP address blocks: 176.119.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49373881 (0x2f162b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Jan 1 06:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ee6c7e297edfe293dc17043171c14481ae96469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:c3:57:2f:73:97:64:7c:51:18:58:23:f3:
ca:da:23:dc:97:1b:84:02:dd:a9:04:3d:30:55:92:
34:87:36:68:10:fd:d5:2b:e1:f1:76:62:70:97:db:
e3:92:89:33:fb:73:a2:e4:30:dc:49:90:78:dc:7d:
ad:8a:35:e4:62:a5:1e:eb:a2:1a:3b:4d:d8:ac:36:
0c:22:0c:a8:75:2c:16:fd:69:75:b0:fa:c8:58:ec:
96:f0:d1:fe:da:84:b2:9d:2b:92:47:b0:27:f9:04:
94:e1:88:ca:16:cd:24:65:15:4d:d3:ac:fc:52:05:
fd:bd:38:ff:2e:f4:77:3e:04:3a:13:b7:45:cc:28:
a8:96:5e:4f:84:82:7f:7f:e1:37:9a:fa:e8:f9:ff:
37:f6:26:94:4c:8a:3a:c3:48:15:3c:4a:85:87:68:
3a:36:9c:8f:59:63:09:6f:55:25:9d:62:70:35:87:
13:e5:5d:48:6c:70:0e:b3:4b:19:83:8f:94:25:03:
ba:a8:12:09:e5:85:ea:98:6a:52:86:44:ff:74:59:
6d:12:b4:8b:3f:63:bf:a3:1e:b5:ce:4a:83:36:19:
78:da:15:4f:f6:01:1a:e0:ef:84:01:c8:5e:bb:ef:
13:60:d4:7e:29:b8:3f:ff:90:66:62:a8:4e:09:d2:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E6:C7:E2:97:ED:FE:29:3D:C1:70:43:17:1C:14:48:1A:E9:64:69
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/XubH4pft_ik9wXBDFxwUSBrpZGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:cb:84:3c:f4:44:fc:f8:47:7c:05:45:b6:44:9c:af:06:95:
3d:6d:e1:42:0f:bd:db:34:95:a2:da:04:93:35:46:68:2f:96:
cb:84:3d:90:9b:3b:be:e9:23:39:14:16:4d:8d:88:04:33:ba:
3c:a4:d4:73:05:eb:3b:6a:4a:2b:eb:91:38:09:31:fc:46:95:
30:86:05:87:ab:8e:8d:19:b0:30:c7:58:47:4d:c1:38:ec:75:
ce:e6:33:8c:5a:0c:c8:44:8b:11:7f:9c:92:9c:2b:d5:69:ea:
51:7c:4e:b9:46:2b:91:23:16:61:6c:91:36:5b:a4:ab:99:e6:
40:b6:49:aa:53:a2:7f:35:5e:62:97:21:4f:c2:f7:90:cf:df:
60:aa:1f:2b:fb:0d:82:e8:9e:3d:e2:0a:ba:3c:a8:10:4f:91:
f7:4b:0a:3e:cf:9f:7e:d0:f0:b2:2f:47:82:fb:a6:ee:be:35:
79:74:9f:6a:36:83:d2:7b:80:3a:da:47:bf:b5:fa:cc:8c:88:
1d:08:d1:1d:66:56:67:e6:91:74:18:d1:2b:a4:01:b8:2d:9b:
79:ed:7e:11:cb:b9:11:4a:e8:f0:5c:74:81:a3:07:be:89:26:
df:23:c6:8c:9a:08:42:ef:b8:57:a9:1f:25:1f:d6:f1:98:ca:
aa:d3:c5:7c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvFiuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZDE4NTMyYmFhMmZkODY1ODNhMjYzYmIxZmJjY2JjODBkNDBkOTkwMB4XDTIyMDEw
MTA2NTk0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWVlNmM3ZTI5N2Vk
ZmUyOTNkYzE3MDQzMTcxYzE0NDgxYWU5NjQ2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALR7w1cvc5dkfFEYWCPzytoj3JcbhALdqQQ9MFWSNIc2aBD9
1Svh8XZicJfb45KJM/tzouQw3EmQeNx9rYo15GKlHuuiGjtN2Kw2DCIMqHUsFv1p
dbD6yFjslvDR/tqEsp0rkkewJ/kElOGIyhbNJGUVTdOs/FIF/b04/y70dz4EOhO3
RcwoqJZeT4SCf3/hN5r66Pn/N/YmlEyKOsNIFTxKhYdoOjacj1ljCW9VJZ1icDWH
E+VdSGxwDrNLGYOPlCUDuqgSCeWF6phqUoZE/3RZbRK0iz9jv6Metc5KgzYZeNoV
T/YBGuDvhAHIXrvvE2DUfim4P/+QZmKoTgnSI8cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRe5sfil+3+KT3BcEMXHBRIGulkaTAfBgNVHSMEGDAWgBQNGFMrqi/YZYOi
Y7sfvMvIDUDZkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RSaFRLNm92MkdXRG9tTzdIN3pMeUExQTJaQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2YvYjhiNWJkLThhZGYtNDNlZi04YWJkLTJiM2ExNTljYTJlZi8x
L1h1Ykg0cGZ0X2lrOXdYQkRGeHdVU0JycFpHay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Yv
YjhiNWJkLThhZGYtNDNlZi04YWJkLTJiM2ExNTljYTJlZi8xL0RSaFRLNm92MkdX
RG9tTzdIN3pMeUExQTJaQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB3zzANBgkqhkiG9w0BAQsFAAOC
AQEAX8uEPPRE/PhHfAVFtkScrwaVPW3hQg+92zSVotoEkzVGaC+Wy4Q9kJs7vukj
ORQWTY2IBDO6PKTUcwXrO2pKK+uROAkx/EaVMIYFh6uOjRmwMMdYR03BOOx1zuYz
jFoMyESLEX+ckpwr1WnqUXxOuUYrkSMWYWyRNlukq5nmQLZJqlOifzVeYpchT8L3
kM/fYKofK/sNguiePeIKujyoEE+R90sKPs+fftDwsi9Hgvum7r41eXSfajaD0nuA
OtpHv7X6zIyIHQjRHWZWZ+aRdBjRK6QBuC2bee1+Ecu5EUro8Fx0gaMHvokm3yPG
jJoIQu+4V6kfJR/W8ZjKqtPFfA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:12 2023 by rpki-client on console.sobornost.net