Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/SmlGTessChNi7KyfUmCSRaE1bUs.roa
File: SmlGTessChNi7KyfUmCSRaE1bUs.roa (raw, json)
Hash identifier: 4E966w+UIfixyyRHA0K+ODhrZAZLVIKb06sFKSRRGPk=
Subject key identifier: 4A:69:46:4D:EB:2C:0A:13:62:EC:AC:9F:52:60:92:45:A1:35:6D:4B
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 056E5E28
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/SmlGTessChNi7KyfUmCSRaE1bUs.roa
Signing time: Sat 01 Jan 2022 15:07:22 +0000
ROA not before: Sat 01 Jan 2022 15:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 85.203.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91119144 (0x56e5e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 1 15:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a69464deb2c0a1362ecac9f52609245a1356d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:29:ae:1e:73:b7:eb:c6:2b:50:9d:b0:b6:
0b:02:f3:24:8b:64:82:bd:49:80:32:d2:4d:f0:8b:
75:6e:35:16:78:91:73:55:12:8a:0f:16:a1:cd:65:
7f:52:8a:e4:3c:4f:d1:90:f7:db:90:2d:18:6d:93:
6e:1a:a4:1f:61:be:e5:04:02:cd:9f:33:da:7b:7b:
82:af:96:e9:0d:41:fe:6b:3d:9b:a6:a2:de:00:a6:
c9:3c:4d:e4:83:6c:ee:05:6a:e2:35:10:63:41:46:
44:bf:af:39:43:31:39:94:78:d2:b9:12:4f:ec:5b:
d5:95:12:f0:8d:9c:58:f1:38:9b:47:c1:e6:02:5d:
06:d7:19:71:4b:9c:08:3b:1c:7d:b8:82:66:6b:de:
4a:84:fc:4f:df:35:7c:31:68:44:24:a4:50:b3:a2:
35:10:14:98:20:18:47:ac:1d:94:9c:36:6f:d5:09:
53:bd:c1:57:6a:5a:2d:e4:4d:87:f1:1c:a3:61:54:
a9:0e:9e:90:bf:02:9b:d6:94:23:0e:09:6f:47:da:
32:e8:9d:8b:8c:47:49:e2:4b:37:0c:1e:05:3f:fb:
3a:65:58:71:9a:3e:86:b0:b4:e1:1f:40:c1:4b:a7:
6f:63:51:67:d4:22:89:be:56:4f:ad:bb:4c:d7:91:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:46:4D:EB:2C:0A:13:62:EC:AC:9F:52:60:92:45:A1:35:6D:4B
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/SmlGTessChNi7KyfUmCSRaE1bUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
09:27:a1:2d:c7:15:c9:9e:b5:dd:e3:12:6b:fa:3a:7c:e2:54:
a1:50:66:2d:18:be:20:a0:46:e8:9b:d7:7d:59:62:4f:d8:db:
4d:e8:69:66:be:4a:8e:b6:81:89:43:ea:57:1a:33:c0:03:b1:
48:fd:6c:9f:c2:c6:16:aa:08:9e:4c:58:ef:c1:e0:a5:37:a5:
4b:3d:06:5c:94:29:79:80:08:38:30:a3:ea:24:02:02:24:6f:
b2:d0:1b:e2:78:d7:95:5b:ae:98:cd:d1:f3:58:32:fd:f7:df:
f4:dc:15:fd:19:b7:ea:a9:de:2e:b7:a9:8e:72:8c:a9:1b:ea:
d9:ba:d9:1e:4a:2b:11:23:96:92:f2:a4:83:b0:7d:20:0c:f4:
7f:62:4f:92:9d:ba:59:da:1a:5e:c7:07:25:53:d5:93:af:c5:
32:a1:5b:2b:a4:96:ec:89:a7:9e:0e:81:cc:fe:f9:52:83:fc:
c5:9c:a6:ea:49:0f:de:81:fd:70:6c:4b:e9:d4:7f:03:ad:5d:
e4:9d:d1:59:66:36:13:37:7e:bb:9d:91:6f:b4:76:8b:6c:05:
98:8f:e6:04:44:29:c7:66:1a:84:33:30:a6:5a:e8:a7:60:32:
44:c1:e3:fc:cf:56:14:0c:7e:83:38:9c:8c:6e:4d:a3:d8:7a:
8b:4e:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net