Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/K9wIP5J6TqjjKUjcfoA8GV56qKM.roa
File: K9wIP5J6TqjjKUjcfoA8GV56qKM.roa (raw, json)
Hash identifier: 6btiI+E1VXufafvZTyQz4wnkRzzTCIKJ1LeTG22xcL0=
Subject key identifier: 2B:DC:08:3F:92:7A:4E:A8:E3:29:48:DC:7E:80:3C:19:5E:7A:A8:A3
Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial: 0B6C2A1B
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/K9wIP5J6TqjjKUjcfoA8GV56qKM.roa
Signing time: Wed 08 Jun 2022 10:44:02 +0000
ROA not before: Wed 08 Jun 2022 10:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209820
IP address blocks: 80.209.254.0/24 maxlen: 24
185.40.140.0/24 maxlen: 24
80.208.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191638043 (0xb6c2a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Validity
Not Before: Jun 8 10:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bdc083f927a4ea8e32948dc7e803c195e7aa8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:4c:e0:26:29:ad:46:49:e5:72:d4:b8:8a:
d0:68:a8:ff:d1:6c:04:13:26:d1:4f:07:87:8a:c7:
bd:56:c0:57:24:61:9d:56:c8:14:85:1c:6c:fa:d1:
0c:29:23:47:92:d9:03:40:83:9b:f5:5d:f3:d1:e0:
68:0c:f4:56:ee:f5:61:e0:a1:6f:29:8a:ab:8b:be:
fb:a2:86:a2:95:52:b3:ad:b7:6f:44:8d:84:00:c8:
7c:38:4f:aa:97:ce:d2:ac:26:eb:f6:83:56:00:89:
3b:e0:66:bf:f3:b3:be:d0:a1:b8:b0:16:c4:c7:96:
05:20:13:f0:fe:db:74:74:59:04:fc:d8:2c:66:b4:
b5:75:75:76:00:f4:c2:14:f6:60:56:3d:f7:75:23:
c0:78:54:d2:7d:66:56:5c:4f:91:49:41:7d:60:4b:
c3:36:d2:ff:bd:d0:ca:50:ef:6b:19:7b:bb:a8:dc:
71:db:a6:e3:75:08:0c:64:eb:7a:43:61:12:98:02:
13:f9:1b:6b:21:02:4d:34:ce:6a:bc:31:20:bd:b1:
8a:cf:be:67:bb:3d:18:ab:31:ee:3e:98:5c:b1:aa:
d0:55:fc:8f:b9:66:ae:2c:f1:d3:e0:67:07:6c:2f:
43:12:d3:a9:9f:d7:6b:37:da:a3:6f:18:06:44:eb:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:08:3F:92:7A:4E:A8:E3:29:48:DC:7E:80:3C:19:5E:7A:A8:A3
X509v3 Authority Key Identifier:
keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/K9wIP5J6TqjjKUjcfoA8GV56qKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.208.254.0/24
80.209.254.0/24
185.40.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1e:25:02:94:fc:bb:cf:ad:1e:d5:fa:b0:21:51:ce:06:ff:
98:ec:c9:ff:b5:92:24:3d:d7:9d:6f:5a:99:1f:ef:92:f9:12:
c0:7e:b7:a1:11:59:ce:eb:57:39:b0:15:8c:93:03:09:31:bc:
09:ec:b6:f9:fd:77:c7:fc:16:4e:aa:de:dd:c9:fb:94:56:31:
31:c1:9a:04:30:84:c9:c6:57:ff:98:df:cf:5a:4f:ab:d6:04:
8f:03:36:d3:ba:c0:99:a4:6c:e8:7a:95:e9:13:f7:4e:4a:8b:
68:75:d6:d5:b6:1b:85:bd:c3:16:46:a0:bd:27:cb:ff:91:07:
e1:29:bf:36:d8:d2:f6:09:59:89:8b:79:10:07:33:52:bc:db:
d6:04:b4:32:ea:4d:f8:83:a3:a7:e7:f2:97:d7:cf:45:a7:b1:
65:b5:08:46:b5:c6:d8:48:c3:3d:6e:64:95:d5:e7:ff:59:01:
53:dc:74:04:ed:fb:e0:fa:d3:6e:a6:e4:54:f6:75:28:ba:5e:
9c:30:ea:37:65:ef:03:b9:fa:34:58:7c:eb:15:6e:35:e1:e8:
46:77:c0:de:96:5d:d7:74:d0:76:ea:51:61:3f:da:da:ce:0a:
5c:e6:3d:a0:29:b0:d8:ea:e1:44:ad:09:4f:dc:22:5d:4f:8b:
d9:b0:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:10 2023 by rpki-client on console.sobornost.net