Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/ky319wmZ8wr_XJQV02fYrUKw9iQ.roa
File: ky319wmZ8wr_XJQV02fYrUKw9iQ.roa (raw, json)
Hash identifier: EUxqlfOzZKSP0CZ3RdmTnx7I0xIaI+65Ftme51I4FVE=
Subject key identifier: 93:2D:F5:F7:09:99:F3:0A:FF:5C:94:15:D3:67:D8:AD:42:B0:F6:24
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0875B3C6
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/ky319wmZ8wr_XJQV02fYrUKw9iQ.roa
Signing time: Sat 01 Jan 2022 04:51:34 +0000
ROA not before: Sat 01 Jan 2022 04:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57668
IP address blocks: 5.183.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141931462 (0x875b3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 1 04:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=932df5f70999f30aff5c9415d367d8ad42b0f624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:5a:a4:94:fe:6a:f5:cc:b4:6b:d7:f7:af:
d6:48:2d:0c:8b:09:c8:85:e1:0a:37:3f:57:89:90:
7c:eb:42:b1:c9:33:d9:a8:37:13:e8:f0:60:d6:76:
1d:1f:8c:4c:41:2b:9d:aa:c3:dd:b7:67:e6:14:0c:
82:be:cd:48:96:a3:ca:24:1b:de:dc:d0:76:d7:4e:
c9:74:8e:3c:77:ee:23:46:a1:67:96:b9:db:f8:94:
31:c1:54:70:cc:8c:56:1e:1f:ed:94:13:8a:de:c7:
25:a6:a5:ff:68:a5:ab:04:63:2e:8e:59:dd:82:50:
ee:fc:0e:1f:0c:f2:4e:d5:59:ed:84:79:32:0d:11:
72:61:e8:01:6d:90:f0:39:cd:8f:61:fe:04:1c:dd:
1a:78:13:96:b1:95:9c:42:b5:ea:c4:b8:1d:19:05:
43:f3:9d:c3:4e:7f:90:0f:84:84:20:5f:c3:b0:87:
f4:4c:86:84:2b:8f:9b:c6:e5:90:05:72:3c:63:5f:
11:05:74:6a:68:23:49:29:ea:a3:c1:d6:0a:5c:f7:
95:96:fb:11:07:ba:7b:df:b1:f5:b6:57:91:e7:86:
71:90:47:96:82:11:93:ba:44:dc:cb:36:17:13:27:
f8:7f:b9:fa:ed:b8:2a:86:b2:10:38:5f:ae:69:da:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:F5:F7:09:99:F3:0A:FF:5C:94:15:D3:67:D8:AD:42:B0:F6:24
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/ky319wmZ8wr_XJQV02fYrUKw9iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.169.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fe:79:59:30:3a:c8:67:4a:b0:a2:f9:4a:3d:eb:bf:86:fe:
1c:7e:a1:f9:67:c8:9b:e0:ff:d0:e1:7a:1a:d9:95:79:c1:1f:
8d:4c:de:0c:9d:1d:08:85:34:0e:be:10:17:e8:35:72:e0:f8:
ea:e0:f2:8e:76:13:a5:4b:19:e4:a6:d4:2b:c2:c0:0e:d0:e5:
53:33:1e:8d:9c:20:f5:b5:87:03:2c:f8:6d:c2:e0:af:31:5a:
f8:78:5e:88:98:22:27:64:c4:9b:3f:3a:c1:7e:45:d7:b8:aa:
b0:ad:75:d2:61:a3:d2:a2:39:f7:04:93:88:08:20:11:6a:7c:
38:25:a9:98:6c:c5:70:97:8c:9c:8a:7b:a2:f8:e9:18:6f:69:
7b:d3:d9:cc:02:bd:9d:85:93:31:2e:db:88:55:4f:c6:d1:b2:
79:c1:bd:31:fc:c9:02:b0:9a:c6:77:0a:88:84:e8:57:02:ab:
06:5b:51:89:ab:d1:70:92:ec:df:7b:0d:7b:ad:bd:88:b6:95:
af:cb:b2:86:22:65:94:fd:29:e8:f1:76:3c:9a:7b:8b:4a:0d:
f7:f7:6f:6d:d3:20:d5:0d:a3:2c:1a:f7:90:fc:6d:fc:90:40:
39:47:7d:a3:7a:3a:bc:f0:e7:db:22:17:64:5f:60:cd:eb:a1:
2b:41:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net