Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/MwMfJjpWPeS0udv2Suum2LCSzjU.roa
File: MwMfJjpWPeS0udv2Suum2LCSzjU.roa (raw, json)
Hash identifier: TI0RQ+EU0HnekJWO6hKDVUPfQUVKuezKJR/4wN1N3BY=
Subject key identifier: 33:03:1F:26:3A:56:3D:E4:B4:B9:DB:F6:4A:EB:A6:D8:B0:92:CE:35
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 01307B
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/MwMfJjpWPeS0udv2Suum2LCSzjU.roa
Signing time: Tue 17 May 2022 12:56:29 +0000
ROA not before: Tue 17 May 2022 12:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39842
IP address blocks: 185.35.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77947 (0x1307b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: May 17 12:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33031f263a563de4b4b9dbf64aeba6d8b092ce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:5d:e1:b6:59:3e:a1:cd:82:af:72:8b:ec:
92:9d:f2:e9:ec:86:f6:99:e7:36:97:07:e0:9b:8c:
0a:fe:31:38:2c:21:0a:d3:e8:0a:df:c1:2c:fc:64:
a3:58:91:90:5c:de:82:d6:f1:49:c8:83:00:cb:7f:
8f:9a:64:c5:63:6e:49:c2:d0:15:fc:d5:e2:77:12:
ac:46:01:be:ce:46:61:d5:fb:aa:39:23:d1:25:6f:
fd:5d:08:1e:5f:60:f2:9b:c4:bb:94:ea:c3:19:61:
9b:5a:d8:93:f9:1d:5c:a1:29:c3:ee:bc:6e:9e:10:
8f:95:cb:bd:fa:2e:45:17:cb:14:54:61:2a:55:3e:
09:f4:b2:ca:7b:3e:94:f3:03:6a:bf:a1:78:73:0c:
14:b7:98:47:e0:e9:4c:df:30:aa:d4:0e:fc:de:f6:
45:4f:54:2c:54:dd:92:6e:83:2b:f8:a5:ca:b5:d1:
cb:aa:a5:6b:b5:9a:b6:b4:1a:18:3e:9d:6c:e1:03:
8e:fd:e4:b3:a9:e8:de:9c:c7:0d:57:3e:9f:58:72:
1e:00:76:ac:3f:87:17:5a:7a:1e:43:5d:09:c7:bd:
26:7a:64:ac:b6:17:fc:c9:48:db:20:4a:b2:4d:27:
84:42:36:42:78:91:82:a4:22:d9:fb:6a:9d:b3:a1:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:1F:26:3A:56:3D:E4:B4:B9:DB:F6:4A:EB:A6:D8:B0:92:CE:35
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/MwMfJjpWPeS0udv2Suum2LCSzjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.224.0/22
Signature Algorithm: sha256WithRSAEncryption
07:02:69:bb:2e:0e:58:97:9d:3c:fa:00:05:b9:70:ea:a8:fd:
5e:a7:2f:4b:c5:05:d8:d8:c3:1d:97:09:6c:c8:d7:23:44:68:
eb:38:d6:c2:bc:1a:c2:ce:c5:7d:75:3b:52:07:13:d5:14:2f:
f8:3b:41:4d:93:1b:d3:4f:af:8f:c7:6b:f8:05:cd:2c:24:58:
a1:a9:59:78:66:22:30:93:67:16:7f:4e:53:a0:6a:a2:82:68:
16:8f:f0:75:65:d7:1f:96:1e:da:17:f5:40:49:27:ed:81:69:
51:0b:1b:28:d0:9c:9c:7e:d4:6e:13:2d:24:c2:6b:a9:fa:23:
a7:b7:87:09:87:1a:b2:ca:e9:5d:f1:71:bf:f2:ff:a7:56:98:
c8:2d:44:00:2d:1a:df:eb:c3:1c:60:18:27:ca:8d:e6:0d:0b:
58:fc:ac:fc:6e:af:58:b4:0d:23:9e:5a:85:ae:e0:ee:ba:2f:
1e:78:67:0e:d1:bb:93:01:b3:61:e4:4e:6d:68:a1:a1:e9:b9:
fd:57:95:34:ba:30:28:77:27:aa:a3:90:a1:bb:3d:2d:5b:11:
fc:39:45:06:3d:87:f9:7e:8f:3a:b9:4e:c7:32:c2:99:53:f0:
1b:fd:39:e0:8a:d5:fa:66:35:2f:b9:34:95:43:ad:da:75:f4:
fa:bf:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net