
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/yVg2A2qfoCqmS5HVYtKp5-r4mSY.roa
File: yVg2A2qfoCqmS5HVYtKp5-r4mSY.roa (raw, json)
Hash identifier: FylUWNTQpp0b9uqS5YCpDdZI27Ieqjv0oA9fNCrTASQ=
Subject key identifier: C9:58:36:03:6A:9F:A0:2A:A6:4B:91:D5:62:D2:A9:E7:EA:F8:99:26
Certificate issuer: /CN=d8147428a2288531b877320e110892a275cc1263
Certificate serial: 4B5C34
Authority key identifier: D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/yVg2A2qfoCqmS5HVYtKp5-r4mSY.roa
Signing time: Sat 01 Jan 2022 02:55:03 +0000
ROA not before: Sat 01 Jan 2022 02:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212169
IP address blocks: 212.23.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4938804 (0x4b5c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8147428a2288531b877320e110892a275cc1263
Validity
Not Before: Jan 1 02:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c95836036a9fa02aa64b91d562d2a9e7eaf89926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:43:b9:9b:58:eb:40:98:39:f4:6c:a6:58:
89:a1:2c:0c:5f:91:ed:32:0c:4e:ba:da:b5:08:20:
ae:04:6d:08:2c:e3:e6:82:06:bb:ff:18:70:da:d7:
62:27:29:72:eb:96:19:4a:4e:21:d8:72:bb:49:66:
15:bf:81:d1:07:eb:a2:89:19:49:ab:c7:4a:61:b2:
d3:ad:10:a1:d0:ee:d1:9c:46:ae:ea:1f:e0:bb:3a:
23:97:5a:28:5b:32:cd:36:7d:3a:9d:d1:c1:a4:96:
f0:2f:ca:61:a7:7d:af:33:41:64:d6:ed:2d:88:ab:
15:71:bc:57:a3:df:1e:4b:99:be:0f:ea:a4:d9:24:
49:da:6c:b8:14:e6:c9:65:2d:e8:66:fb:8b:ea:30:
33:a3:59:9b:18:35:11:68:3c:58:5d:0e:55:e8:ad:
55:71:02:55:22:a9:13:c4:01:92:78:f5:0a:9b:47:
68:b5:3d:e9:e7:d7:4c:a3:87:ef:2a:ac:19:9d:e8:
89:f8:96:3a:df:da:c7:d2:29:b3:ac:06:53:cd:70:
ba:41:66:91:4c:31:42:4b:f5:82:fe:49:9e:28:87:
f4:51:d6:d7:7e:3d:33:65:a2:63:8f:61:35:b5:7b:
98:ce:29:32:f6:bf:65:97:82:1b:ae:d6:b2:66:6d:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:58:36:03:6A:9F:A0:2A:A6:4B:91:D5:62:D2:A9:E7:EA:F8:99:26
X509v3 Authority Key Identifier:
keyid:D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/yVg2A2qfoCqmS5HVYtKp5-r4mSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2e:f5:70:ee:3e:2c:fd:69:22:90:59:a1:40:f1:3d:60:30:
60:50:ba:29:35:26:47:2b:d1:8d:49:f1:06:c9:84:0c:1e:0c:
0d:28:6e:f4:e4:28:10:73:86:61:3f:5f:ca:9a:d9:19:2d:5d:
e7:f5:c2:a5:02:bb:c6:cf:73:3b:fc:f9:9e:f9:c2:5c:45:1b:
f6:93:80:ea:ec:f7:4c:b7:8a:5a:62:67:2f:d7:76:bc:b0:1e:
4b:ff:51:41:e6:52:2f:db:9a:b6:52:d6:95:76:cb:e9:e4:94:
25:63:df:54:67:64:4c:1b:96:bc:f8:f6:06:ef:1c:13:81:ef:
79:bf:a5:c2:5e:9a:51:04:cb:ee:71:ac:30:55:1b:3b:bf:6b:
08:ca:03:42:0a:07:8e:a6:c9:b6:20:94:a0:8a:19:9b:52:05:
cb:38:76:d0:9e:49:ce:46:bd:49:85:2e:23:5b:01:0f:9a:6b:
63:d3:81:f9:de:51:2f:ae:1f:c8:ea:b4:b4:e4:20:53:3f:60:
63:0d:22:16:b7:16:24:f4:22:a4:d0:9a:10:75:88:b0:d7:55:
71:59:53:56:7a:cd:fc:b8:c0:6f:e1:a5:75:99:f7:32:a1:06:
4e:1e:cd:54:0c:1d:2e:72:19:13:5e:d7:08:eb:a3:c2:66:89:
64:88:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net