Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/uCltAfAMqLA2qbmMcEIYZgX1t8g.roa
File: uCltAfAMqLA2qbmMcEIYZgX1t8g.roa (raw, json)
Hash identifier: k63m7YUB/W8gA5Dok5b+BdwoK0sNrgV47mYWkvmli40=
Subject key identifier: B8:29:6D:01:F0:0C:A8:B0:36:A9:B9:8C:70:42:18:66:05:F5:B7:C8
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 01C53F
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/uCltAfAMqLA2qbmMcEIYZgX1t8g.roa
Signing time: Tue 28 Jun 2022 10:37:03 +0000
ROA not before: Tue 28 Jun 2022 10:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57244
IP address blocks: 192.166.124.0/22 maxlen: 22
192.166.124.0/24 maxlen: 24
192.166.124.0/23 maxlen: 23
192.166.125.0/24 maxlen: 24
192.166.126.0/23 maxlen: 23
192.166.126.0/24 maxlen: 24
192.166.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116031 (0x1c53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Jun 28 10:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8296d01f00ca8b036a9b98c7042186605f5b7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:36:bc:17:63:c2:f1:ae:8d:f8:de:bd:53:
95:8f:b7:d1:bc:2a:c4:54:f1:73:ed:47:7d:6b:ab:
83:7e:96:85:15:6e:41:84:70:e1:1a:09:3e:10:d5:
b8:80:3e:46:d6:63:13:8d:da:8b:ea:09:e2:33:38:
73:d9:d9:1a:bd:b5:5b:18:73:fc:a7:68:5c:ad:c8:
3c:a9:f4:6f:87:df:87:71:97:38:56:55:3d:29:00:
38:ee:20:d8:fa:a3:de:d0:19:52:8a:74:c9:94:46:
63:d6:43:40:84:1f:f0:41:8f:0a:fe:f1:30:19:13:
30:98:62:e8:f7:40:0f:f3:71:d4:e4:67:75:f1:ba:
3c:4c:d9:28:69:dd:47:25:65:eb:42:d2:0a:a0:d8:
26:ea:55:e4:e9:04:1a:5f:8c:25:ff:96:e5:02:0f:
9c:5c:ba:b6:dc:07:4d:0f:73:2a:38:e1:46:cb:13:
f9:7d:8a:dc:0a:14:6d:19:63:5a:7d:31:41:0e:e2:
ea:27:e6:16:96:aa:2c:e2:7e:7a:7e:b1:a7:81:80:
c0:e6:b7:24:32:a7:cf:82:14:ef:03:e8:cb:3e:93:
09:a2:b0:01:23:3d:f2:33:48:6f:d5:30:4e:e5:d6:
48:d4:bf:73:49:10:97:69:1b:d1:bf:92:94:82:20:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:6D:01:F0:0C:A8:B0:36:A9:B9:8C:70:42:18:66:05:F5:B7:C8
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/uCltAfAMqLA2qbmMcEIYZgX1t8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.124.0/22
Signature Algorithm: sha256WithRSAEncryption
78:b1:3d:f7:6d:eb:db:00:31:81:c4:3e:ec:9d:29:0e:4c:97:
c7:00:4d:62:ad:2f:43:c0:cb:af:89:d7:2e:0d:6e:40:00:c4:
2e:95:63:7d:2f:06:cb:b6:ce:20:5c:9b:e9:08:28:9a:1a:cf:
60:4f:aa:1c:1a:cf:6d:14:cb:8e:26:39:f6:17:97:3a:a7:ba:
53:27:db:2f:6a:6d:e1:a2:51:b9:58:64:30:61:50:c1:84:a9:
76:c5:f8:68:f8:6a:8a:5c:7b:15:e9:68:03:04:3c:cb:ce:76:
aa:f5:77:e3:e2:24:5b:8f:cb:8e:5b:18:5a:c0:0f:91:d5:7e:
8d:4b:db:83:c8:a4:8e:be:43:3c:a2:12:64:02:df:e2:a7:45:
c1:f7:48:2f:f5:45:2c:18:ed:d7:10:38:3f:49:5e:d1:ca:f8:
04:5d:bd:97:6b:5e:77:20:7b:47:4d:09:f7:41:43:2a:de:ae:
5b:68:b9:72:b0:3c:1c:e5:66:65:11:e2:95:5b:63:36:fb:8b:
8a:13:6e:b4:cf:be:fc:21:ea:76:19:d9:b0:13:42:26:10:2d:
57:0c:68:dc:45:0c:49:9a:78:55:6f:69:6c:7f:75:e5:fa:62:
3b:5e:7d:78:5f:b8:d8:48:18:46:55:76:c9:b9:e9:a7:4e:4e:
4a:73:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:00 2023 by rpki-client on console.sobornost.net