Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/d-hJKrl6_ntI5ewYrWdmMN7b_yE.roa
File: d-hJKrl6_ntI5ewYrWdmMN7b_yE.roa (raw, json)
Hash identifier: Gj0sMa2zJSX3X0Pur3M7O9Hvr21rFC33lYNxhZZ/74c=
Subject key identifier: 77:E8:49:2A:B9:7A:FE:7B:48:E5:EC:18:AD:67:66:30:DE:DB:FF:21
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 05BF58E8
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/d-hJKrl6_ntI5ewYrWdmMN7b_yE.roa
Signing time: Sat 01 Jan 2022 13:57:33 +0000
ROA not before: Sat 01 Jan 2022 13:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209760
IP address blocks: 192.145.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96426216 (0x5bf58e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Jan 1 13:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77e8492ab97afe7b48e5ec18ad676630dedbff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:21:9d:7d:a2:67:63:cf:12:ba:f9:b2:4f:
99:7f:61:d6:2d:99:16:ef:9e:28:f0:99:1e:dc:27:
59:c1:de:86:59:e0:bb:43:9d:ea:6f:e2:25:37:c0:
91:35:63:58:e7:cb:50:c6:7e:16:dc:1b:c2:de:0e:
a0:c4:bb:59:36:9e:fa:85:bd:83:05:44:83:8b:af:
09:eb:ef:10:a6:dd:2e:3d:1a:3a:f0:8f:61:6d:b6:
76:b9:89:21:72:1e:d9:57:a7:ed:f0:3e:14:23:9d:
4b:4c:64:9e:09:23:2a:3a:b2:f9:38:2c:25:c0:82:
a4:0b:03:e5:c7:5e:18:f0:09:0c:72:33:2f:cc:f3:
fb:f8:90:fa:fe:1c:1a:21:42:67:0a:a3:d8:03:1b:
ca:e4:1a:16:81:ac:1e:70:91:59:cc:f9:3b:e3:ed:
07:d6:5d:5f:89:18:e2:f0:cf:f5:6e:fa:ec:06:ec:
b7:c5:3b:fc:1d:f2:f9:69:f0:16:9f:5e:7e:c8:f6:
d0:5e:a2:11:5b:1b:c3:21:79:ad:19:ee:b4:c7:31:
5c:e7:70:08:ba:21:e9:29:cf:f1:ce:0c:4a:4c:b5:
d9:c8:3d:73:84:28:c3:40:91:2a:1b:9c:60:ba:60:
7d:f4:5b:21:d0:4e:8d:cc:0b:36:5a:8e:5b:ae:2a:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E8:49:2A:B9:7A:FE:7B:48:E5:EC:18:AD:67:66:30:DE:DB:FF:21
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/d-hJKrl6_ntI5ewYrWdmMN7b_yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:6d:01:51:4d:d1:57:99:62:8d:24:51:dd:f8:1b:91:37:d7:
0e:1c:11:b1:84:6f:17:d6:c2:4d:1d:72:cf:43:b4:ff:24:02:
d8:7a:8f:81:e1:03:44:5d:77:2a:be:61:10:6b:d0:c5:89:2c:
49:45:48:db:24:17:03:95:49:9e:93:58:f1:ab:7a:61:e4:25:
00:65:19:6d:f9:1c:5f:68:16:df:6a:5b:77:e8:af:ae:16:89:
c8:d8:5a:1d:92:33:70:8f:ef:f0:e1:fa:57:a2:d2:92:f5:7a:
e2:2b:64:f2:11:53:6f:20:95:0e:87:a7:7a:ed:17:e2:f6:79:
75:9b:ce:9d:9d:1a:fc:8f:e6:3a:6f:97:52:a0:1a:ea:7e:a1:
76:30:8b:f7:aa:0d:46:cc:71:d6:5a:f1:59:98:b3:cd:bb:58:
5b:77:52:f6:8c:04:4d:ca:68:4b:89:d4:66:c9:25:f3:91:a3:
c4:6d:c0:62:44:1f:65:64:b6:aa:24:46:95:d2:81:90:92:c9:
3f:50:d0:e7:9c:a3:a2:5b:03:6b:00:eb:cd:b5:c0:d6:a5:6b:
9a:82:f3:39:79:3d:d2:ce:f7:4e:f7:fe:b5:79:40:a1:42:04:
d1:fb:fe:7e:12:fd:19:19:d1:05:e3:6a:d8:25:da:29:4c:ce:
40:41:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net