Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/jPIO2sj9Zylcc6hUrdNX4dGtx60.roa
File: jPIO2sj9Zylcc6hUrdNX4dGtx60.roa (raw, json)
Hash identifier: qmi+SobpWUYjVY/7Oeb/6OrFkOCEzQjLnEq8WnxIea4=
Subject key identifier: 8C:F2:0E:DA:C8:FD:67:29:5C:73:A8:54:AD:D3:57:E1:D1:AD:C7:AD
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 0181ECA33D314DDA0BE558745F9FD395A628
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/jPIO2sj9Zylcc6hUrdNX4dGtx60.roa
Signing time: Mon 11 Jul 2022 09:42:09 +0000
ROA not before: Mon 11 Jul 2022 09:42:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202211
IP address blocks: 185.69.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:a3:3d:31:4d:da:0b:e5:58:74:5f:9f:d3:95:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Jul 11 09:42:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cf20edac8fd67295c73a854add357e1d1adc7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:de:4d:ae:89:f9:e8:d6:4a:85:f8:34:ce:
c7:13:23:f7:3e:95:80:8d:c7:da:fe:77:b8:ac:21:
8d:ff:6d:95:18:18:5a:3f:1b:f1:9b:d6:36:51:75:
4a:64:0c:a5:75:a6:88:60:74:ac:77:6e:ce:31:30:
fc:83:62:56:1e:18:00:aa:6e:4a:60:22:a9:f8:88:
26:8c:b4:11:6b:ca:9b:25:7b:0e:67:c3:b5:a7:b2:
1f:eb:c4:0e:92:be:bf:0c:f8:61:80:84:9a:d1:75:
eb:33:52:79:b5:36:74:88:88:39:14:55:bb:ea:c7:
c3:4a:d8:92:51:2b:b6:65:22:55:cd:b9:60:e6:08:
83:1a:12:88:57:f9:4a:62:44:98:ef:58:b3:60:46:
ef:ba:22:ea:60:4b:3d:b3:46:2e:87:c5:64:75:71:
e7:fe:38:36:73:cb:c1:b2:c5:cb:ad:18:15:c4:43:
bc:5d:ae:82:21:1f:29:67:89:83:7d:50:2d:13:d4:
b7:70:d6:52:cb:44:96:93:07:d0:d7:5f:6c:d0:17:
cf:eb:d7:91:9a:3b:f0:4f:15:db:4d:8f:de:6f:8f:
ba:9e:ca:92:e5:9f:72:95:dd:48:26:6f:0f:85:6c:
e8:c7:dc:1e:49:75:bb:2c:9c:cd:f9:c8:4f:15:71:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:0E:DA:C8:FD:67:29:5C:73:A8:54:AD:D3:57:E1:D1:AD:C7:AD
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/jPIO2sj9Zylcc6hUrdNX4dGtx60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.252.0/22
Signature Algorithm: sha256WithRSAEncryption
36:2b:f0:ea:0e:ed:d6:64:d5:e8:b9:95:25:f8:dd:36:37:51:
42:9a:c4:e2:c1:fb:64:19:08:84:bb:4d:4e:05:76:89:dd:94:
3e:e9:76:2d:38:4c:fc:8f:82:b5:28:3e:a2:f4:a7:b1:ba:ab:
9b:6c:9d:a4:f3:ee:e3:46:1d:36:32:52:a5:f1:f6:dc:09:c4:
d7:d4:ab:ca:d7:fe:91:ef:b3:8f:e8:c7:3c:ac:7e:fc:c4:eb:
09:30:66:6c:60:03:98:92:a0:0c:1c:88:50:c7:aa:83:3a:fe:
5f:05:4b:d4:ef:84:ec:72:dd:5e:4b:0c:dd:2c:8c:ff:ec:56:
bb:a2:65:01:5a:b7:d1:ae:ae:c0:86:1e:35:00:ec:40:7e:a4:
82:c6:33:27:fa:1e:ff:2c:b7:f2:8a:c7:59:02:1b:1d:0d:75:
1a:aa:fc:d1:2f:de:a7:90:d8:0a:df:79:cd:d2:b1:b1:3f:5f:
85:5d:5d:e2:49:10:48:d8:76:3a:9f:e2:a5:c4:a4:b2:16:0e:
84:3e:af:fe:84:4e:9f:bb:7b:2b:db:95:0c:ca:84:7b:0b:97:
2e:08:55:54:5e:29:e6:6e:06:31:92:da:4c:22:1f:79:d4:65:
68:a8:aa:7a:1b:04:e4:ee:35:e2:3a:f4:0e:96:e9:01:2f:cd:
cb:ea:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net