Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/0ue_bnqhL3CYsankPLZJoKNZxjs.roa
File: 0ue_bnqhL3CYsankPLZJoKNZxjs.roa (raw, json)
Hash identifier: LcN3qbkrV/FXlGk3j2w1FgZD6c8mz9N5hjMG7p7URYk=
Subject key identifier: D2:E7:BF:6E:7A:A1:2F:70:98:B1:A9:E4:3C:B6:49:A0:A3:59:C6:3B
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0182EA8D9EA58C0E42A0B68FF2A3E00546C4
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/0ue_bnqhL3CYsankPLZJoKNZxjs.roa
Signing time: Mon 29 Aug 2022 17:02:05 +0000
ROA not before: Mon 29 Aug 2022 17:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 37.247.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:8d:9e:a5:8c:0e:42:a0:b6:8f:f2:a3:e0:05:46:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Aug 29 17:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2e7bf6e7aa12f7098b1a9e43cb649a0a359c63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7a:6a:10:07:5a:e5:84:d8:6e:5a:c1:72:9c:
d8:75:7a:12:be:4d:2e:f6:69:72:06:47:e1:94:24:
c1:a6:b4:2c:80:56:d3:7d:9f:62:56:48:be:4c:1a:
36:fe:59:c8:be:f4:5a:e0:f0:87:02:56:ac:a1:15:
a1:47:1b:a3:45:5a:60:f4:23:d7:00:6e:2e:dc:4d:
7f:de:0b:e2:1b:52:4e:a8:52:67:f9:79:96:d2:d8:
f9:39:88:3c:33:90:90:33:5c:2f:28:ab:47:12:32:
0c:4e:71:c7:1c:d1:51:79:dd:46:1f:34:53:f3:31:
b1:1e:d0:a4:a1:2e:04:06:12:79:bd:67:69:fb:d5:
8a:da:aa:8b:35:fe:0b:c7:92:c3:ae:d9:21:97:69:
6b:7d:04:9e:8f:f5:22:14:17:0e:8a:b3:b2:54:9c:
a5:4c:b5:bf:1a:a0:f7:9c:e1:08:8f:ec:8c:a9:98:
53:fe:bb:5c:4d:e9:5e:17:a0:b7:43:68:48:a1:e3:
31:92:4c:51:fd:17:d5:f6:65:c2:3a:ca:d7:79:ff:
73:9e:2c:96:15:9d:cf:c1:9d:57:6f:3f:eb:3c:44:
1e:2d:42:49:eb:3f:6b:b0:c2:c2:a1:0f:d2:50:ef:
4c:b5:0e:bb:8d:b9:80:a8:d9:f6:b8:96:45:86:1c:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:BF:6E:7A:A1:2F:70:98:B1:A9:E4:3C:B6:49:A0:A3:59:C6:3B
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/0ue_bnqhL3CYsankPLZJoKNZxjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.108.0/24
Signature Algorithm: sha256WithRSAEncryption
43:eb:f0:4c:69:87:3c:11:27:9f:3c:40:e9:94:57:9e:be:ff:
c2:d3:52:f0:6d:94:91:ac:ba:a0:f4:fa:36:1d:20:c4:a4:f0:
c2:72:55:21:2d:cf:c4:28:90:a5:29:26:99:fe:3e:f4:3d:f3:
cb:bd:11:d7:19:fc:de:86:5b:d5:08:57:97:04:79:af:79:0f:
83:1b:c1:41:b2:1d:be:7e:af:2e:cd:5d:91:7b:10:ae:74:f5:
08:ff:97:db:3c:60:3e:0b:db:cc:fd:34:f6:d0:30:77:a1:ea:
26:35:95:e0:2f:5d:8a:23:13:ad:87:50:bd:a0:42:ae:db:47:
24:c5:ae:73:95:2c:be:9d:87:05:db:33:1f:d6:ae:65:ab:6a:
e3:7a:3a:d8:91:ea:55:61:2c:e8:46:39:23:02:c6:50:bd:69:
dd:0c:44:f5:d5:f0:9a:07:61:ef:1b:88:eb:bb:c0:1e:e2:2e:
27:4b:1b:1f:64:18:27:db:26:2d:14:97:6f:1d:43:36:56:b6:
c6:3f:9c:fd:6b:22:88:2c:b4:5b:0a:cc:5a:3c:74:80:e0:5f:
d5:cf:0d:ba:d9:64:cf:1e:a4:04:10:95:6f:4c:50:11:84:89:
c3:be:c3:42:5f:e0:38:d8:f7:fe:ca:af:06:e4:76:78:3a:fb:
e1:8d:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net