Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/R3MVh-jtv70puhbdNwnq53ipmP0.roa
File: R3MVh-jtv70puhbdNwnq53ipmP0.roa (raw, json)
Hash identifier: KnZbSYeMGhmE8Abmv22c9xkfxISzqjPvLGNWCT6hPIU=
Subject key identifier: 47:73:15:87:E8:ED:BF:BD:29:BA:16:DD:37:09:EA:E7:78:A9:98:FD
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 04711E48
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/R3MVh-jtv70puhbdNwnq53ipmP0.roa
Signing time: Sat 01 Jan 2022 10:58:21 +0000
ROA not before: Sat 01 Jan 2022 10:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45022
IP address blocks: 195.5.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74522184 (0x4711e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Jan 1 10:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47731587e8edbfbd29ba16dd3709eae778a998fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:65:83:c7:5e:50:aa:ac:35:f7:ca:0e:e7:
89:50:14:0c:89:9d:ca:ae:e8:a3:6d:94:4d:1b:f8:
ad:44:49:d6:96:ef:d6:fa:aa:a6:ee:c6:75:fc:e2:
0f:cb:a8:26:84:fd:c2:29:85:c5:23:96:f5:8c:73:
17:7d:01:70:b2:ff:36:ff:03:30:e1:39:63:0f:61:
7c:83:9b:4c:1a:ee:12:fa:3f:5d:9f:3d:9c:53:b8:
5f:72:72:f1:06:c8:26:6d:ba:2b:f6:8b:47:84:38:
46:82:7d:12:b2:50:1d:74:f4:b4:b9:69:50:97:2e:
ed:e1:f9:3a:19:7b:05:91:00:a0:d9:f1:59:0d:c2:
c5:f9:ff:29:5c:6f:de:d3:c7:7e:5e:ac:b4:de:b4:
af:18:ff:52:41:80:8c:0c:dd:b5:3d:78:33:d6:38:
a9:01:a3:5c:d1:8a:33:2f:d4:6b:b1:67:22:51:25:
e2:aa:74:bd:bd:a0:2c:02:06:4b:27:03:4f:c4:5d:
6e:17:e7:bc:33:2e:fb:62:71:6b:eb:8e:60:1e:b6:
39:50:cc:11:d7:86:44:2c:7b:95:99:31:9b:6c:c9:
e2:94:ff:2f:7a:0b:9d:cc:2f:bc:ed:7e:dc:12:74:
38:ff:38:da:5d:9f:ed:9b:a0:64:21:bf:b0:32:72:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:73:15:87:E8:ED:BF:BD:29:BA:16:DD:37:09:EA:E7:78:A9:98:FD
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/R3MVh-jtv70puhbdNwnq53ipmP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f6:53:5e:83:fe:a1:29:4b:c2:c8:80:ae:0b:1c:5e:aa:ff:
0b:56:3e:c2:6e:27:d4:47:7f:3c:62:c3:65:59:ff:84:35:18:
22:31:c5:18:4f:39:d8:ea:22:a8:cf:6c:41:8d:92:2f:19:86:
0e:3e:08:cf:e5:b4:9d:cd:38:dc:f1:8a:b3:32:93:3e:f3:cf:
c6:d6:3a:16:5c:b4:fb:b3:0c:9a:94:b3:f0:5b:19:d7:6b:50:
5e:b9:c8:9a:9e:b0:2e:f5:0c:8f:c6:07:64:65:72:5a:70:8d:
04:39:0d:5a:8b:ce:b2:be:70:1e:42:a4:3d:a8:34:b5:22:ac:
c2:4e:f8:c8:a2:e4:8d:ab:39:08:b9:10:6a:ff:93:23:10:a7:
7f:29:70:66:50:ea:35:84:43:f9:72:f7:ab:1a:97:29:b1:1d:
a0:42:a2:d4:f3:70:2e:8c:b8:ea:c8:91:f3:f1:27:cd:ec:cc:
28:a6:28:af:c5:e1:4a:2d:41:4e:08:b5:17:f4:c5:e6:bc:34:
e1:e8:48:57:44:b6:2c:b6:a8:a8:b8:0b:71:ad:b7:30:f3:63:
93:cf:37:9b:41:cc:80:1c:ba:96:5e:48:82:3f:d7:6a:49:79:
09:8f:ef:e9:46:9c:35:98:ae:b7:81:05:05:c5:31:91:64:0e:
91:e5:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:54 2023 by rpki-client on console.sobornost.net