Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/82rA896SdziJDXsRxB1trQTXBy0.roa
File: 82rA896SdziJDXsRxB1trQTXBy0.roa (raw, json)
Hash identifier: c6pT4SyRIMLJdBTPBDzTc87k251iFCawxYe9bcn5M24=
Subject key identifier: F3:6A:C0:F3:DE:92:77:38:89:0D:7B:11:C4:1D:6D:AD:04:D7:07:2D
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01848AAB0E0E731E267A846C7ADBF8053CDC
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/82rA896SdziJDXsRxB1trQTXBy0.roa
Signing time: Fri 18 Nov 2022 12:16:16 +0000
ROA not before: Fri 18 Nov 2022 12:16:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201363
IP address blocks: 217.113.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:ab:0e:0e:73:1e:26:7a:84:6c:7a:db:f8:05:3c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Nov 18 12:16:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f36ac0f3de927738890d7b11c41d6dad04d7072d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:8d:44:83:95:b9:88:65:a8:c1:b2:45:02:
bc:31:0e:b5:7e:c8:bc:47:87:2b:a9:a5:94:62:61:
ae:bc:da:2c:64:05:63:db:dd:76:04:de:21:99:69:
8c:5e:a1:f3:18:6e:a2:91:57:38:bf:d6:55:fb:f7:
59:d3:f5:57:ce:d2:8d:66:bf:00:e8:28:47:ad:f0:
0a:8c:7a:2b:ae:f8:39:64:54:ed:e5:ef:6c:5a:51:
9e:fc:14:b9:a2:99:4e:44:03:38:2f:23:0b:45:e6:
d2:38:ca:cc:8b:72:5f:de:24:c7:aa:0d:fa:12:70:
f9:b3:33:4c:cc:19:e9:8b:ef:22:5a:dc:d4:d7:26:
5b:ee:0d:79:f4:7f:63:d5:32:e7:a6:93:b1:7b:e2:
20:89:f6:8e:44:4f:6d:a5:0e:4e:48:e2:dc:17:08:
a6:5f:e5:39:60:51:35:5e:b6:d5:cd:8c:7d:4a:f4:
a4:b9:b7:c1:f5:43:02:4c:5c:59:3b:1c:9a:de:1e:
60:c5:47:ac:75:47:21:01:c5:7c:82:d7:24:8b:c2:
e9:62:8a:b9:61:ee:46:aa:ec:d8:21:b5:7a:46:e1:
17:6a:64:c6:26:11:69:16:26:6c:fc:c5:0d:69:ba:
bb:66:da:27:44:20:0d:5c:bd:e7:43:22:c6:8f:c3:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:C0:F3:DE:92:77:38:89:0D:7B:11:C4:1D:6D:AD:04:D7:07:2D
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/82rA896SdziJDXsRxB1trQTXBy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.17.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e8:9d:4c:29:c1:61:91:87:71:dd:3c:2d:ff:39:9d:b2:95:
38:b0:42:07:1b:25:13:56:81:d6:54:52:d1:78:7a:27:e5:6d:
78:30:05:00:a3:57:e5:97:cf:f5:43:92:76:bd:41:22:a6:95:
bb:0b:4c:5e:5e:2c:67:a0:37:68:4e:cb:0c:70:57:36:d3:47:
d5:cc:63:c3:36:87:b2:47:58:84:54:ea:c3:02:57:40:78:57:
cb:f7:8f:fd:a3:16:92:fe:e8:10:0c:6d:a4:ab:4d:b4:bd:41:
b8:cb:15:cb:40:34:36:e4:5e:ac:3e:72:be:a2:00:bb:72:4c:
e5:f3:d8:93:e6:49:ce:10:6b:7d:57:70:bb:b9:9d:7e:8a:66:
b5:4d:9f:a6:00:2b:a2:b9:38:92:46:7b:14:c1:65:47:9b:f0:
e6:9a:84:5b:0c:f2:45:ee:2d:c3:f9:41:62:d6:00:ca:fe:79:
46:3d:2e:5e:0d:fe:48:10:76:5f:9c:49:66:d3:fa:81:15:49:
c8:75:73:c4:80:12:ab:5a:44:32:34:31:2d:e2:f3:92:b1:65:
32:1d:fa:16:bb:4c:93:76:c3:f4:f5:0f:f0:aa:15:b4:d2:fb:
1f:b6:a7:9a:77:bb:b1:cf:d1:10:1c:bc:61:9e:fc:4f:2a:86:
bd:80:49:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSKqw4Ocx4meoRsetv4BTzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjIxMTE4MTIxNjE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzZhYzBmM2RlOTI3NzM4ODkwZDdiMTFjNDFkNmRhZDA0ZDcwNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUWNRIOVuYhlqMGyRQK8MQ61fsi8
R4crqaWUYmGuvNosZAVj2912BN4hmWmMXqHzGG6ikVc4v9ZV+/dZ0/VXztKNZr8A
6ChHrfAKjHorrvg5ZFTt5e9sWlGe/BS5oplORAM4LyMLRebSOMrMi3Jf3iTHqg36
EnD5szNMzBnpi+8iWtzU1yZb7g159H9j1TLnppOxe+IgifaORE9tpQ5OSOLcFwim
X+U5YFE1XrbVzYx9SvSkubfB9UMCTFxZOxya3h5gxUesdUchAcV8gtcki8LpYoq5
Ye5GquzYIbV6RuEXamTGJhFpFiZs/MUNabq7ZtonRCANXL3nQyLGj8Pk9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNqwPPeknc4iQ17EcQdba0E1wctMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvODJyQTg5NlNkemlKRFhzUnhCMXRyUVRYQnkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XERMA0G
CSqGSIb3DQEBCwUAA4IBAQAU6J1MKcFhkYdx3Twt/zmdspU4sEIHGyUTVoHWVFLR
eHon5W14MAUAo1fll8/1Q5J2vUEippW7C0xeXixnoDdoTssMcFc200fVzGPDNoey
R1iEVOrDAldAeFfL94/9oxaS/ugQDG2kq020vUG4yxXLQDQ25F6sPnK+ogC7ckzl
89iT5knOEGt9V3C7uZ1+ima1TZ+mACuiuTiSRnsUwWVHm/DmmoRbDPJF7i3D+UFi
1gDK/nlGPS5eDf5IEHZfnElm0/qBFUnIdXPEgBKrWkQyNDEt4vOSsWUyHfoWu0yT
dsP09Q/wqhW00vsftqead7uxz9EQHLxhnvxPKoa9gElP
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:55 2023 by rpki-client on console.sobornost.net