Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Uh0bQUix7_i7O1e9uHWaauaPpGk.roa
File: Uh0bQUix7_i7O1e9uHWaauaPpGk.roa (raw, json)
Hash identifier: VwQcW4YKN3/IWl8+gYV65g1BIIhkQA/xhWicu9TebI8=
Subject key identifier: 52:1D:1B:41:48:B1:EF:F8:BB:3B:57:BD:B8:75:9A:6A:E6:8F:A4:69
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03F5CC61
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Uh0bQUix7_i7O1e9uHWaauaPpGk.roa
Signing time: Sat 01 Jan 2022 01:52:23 +0000
ROA not before: Sat 01 Jan 2022 01:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8739
IP address blocks: 213.145.98.0/24 maxlen: 24
94.155.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66440289 (0x3f5cc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=521d1b4148b1eff8bb3b57bdb8759a6ae68fa469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:4f:b7:be:13:73:68:68:6f:e9:df:b6:dc:
41:9e:e2:ae:99:20:cf:e0:3a:83:01:c3:e5:8d:0d:
9a:81:d2:35:3e:eb:40:e3:28:28:54:28:62:64:06:
3c:c3:90:91:e1:4b:ca:be:66:ed:7e:1b:83:22:07:
0b:ea:74:2c:b6:c8:0b:60:d4:92:31:3a:14:0a:32:
f2:bb:b7:9c:3e:84:2f:c1:13:a1:d5:5d:bd:78:50:
79:11:10:19:46:13:1c:67:e4:7e:09:d7:66:2f:67:
60:11:84:5d:8d:35:03:a6:ea:74:09:60:d4:95:c4:
e6:25:49:5e:35:12:72:7f:cd:fb:29:09:6f:71:a0:
98:bf:04:2b:94:36:28:78:f1:6f:84:d5:07:ec:0d:
ca:5a:57:f1:b8:b9:ac:73:6f:aa:a5:06:8b:20:91:
dc:88:8f:7a:11:cc:9b:6e:97:23:11:b5:2b:7f:01:
81:e6:51:b6:3a:a1:5c:61:9e:27:1f:8c:54:4c:24:
d5:d7:d2:3c:69:b0:1c:36:89:31:b5:1e:56:4a:16:
1f:b5:fc:65:7c:af:22:c6:70:f6:db:f0:c6:8d:0d:
e8:08:47:f2:f7:bb:84:48:b9:1b:05:f3:61:9d:d3:
dc:e0:fc:8c:fa:4a:11:0c:a9:db:fa:32:7b:5e:0e:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:1B:41:48:B1:EF:F8:BB:3B:57:BD:B8:75:9A:6A:E6:8F:A4:69
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/Uh0bQUix7_i7O1e9uHWaauaPpGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.37.0/24
213.145.98.0/24
Signature Algorithm: sha256WithRSAEncryption
61:12:ab:f2:bf:ea:3a:0f:a2:96:c5:e9:64:5f:bc:6f:cb:4a:
63:a4:e6:39:1a:b7:b9:2f:93:1a:6b:e4:1f:09:26:1b:d1:fa:
7f:e0:be:c6:e5:e9:1f:7c:56:e1:c2:d7:66:c1:b5:3e:4e:77:
ee:ca:72:11:88:9a:2f:49:94:60:10:b8:f4:c4:db:ee:23:66:
c9:fc:08:4c:8d:b9:45:6b:1e:84:61:31:6e:b0:6c:b6:70:14:
4f:93:68:b8:f8:cb:72:eb:43:ae:cd:3e:04:47:ef:dd:15:71:
e2:62:3a:2c:23:10:80:0f:c8:9a:f8:ea:e0:b2:2f:be:e1:40:
3d:69:e2:b8:ac:34:f4:af:93:bf:e3:94:c9:f2:5a:05:f5:1b:
b7:7f:b3:63:bf:f1:e9:18:8a:2b:85:ef:fc:e4:d4:f8:99:1e:
e4:ca:84:62:79:63:8a:54:86:39:ed:b3:9d:b5:4d:18:94:ee:
20:79:ce:a7:2a:c2:58:2e:82:c1:12:d8:25:5a:61:7b:e2:60:
c4:89:33:13:e0:14:aa:67:7a:68:c6:68:62:52:da:0a:79:d0:
b9:d2:f1:4f:37:53:85:fb:0d:fa:c2:61:5d:b7:ba:4f:ae:cc:
4a:ee:26:e3:d9:ef:5b:2f:1c:cf:b7:7b:b3:08:a7:73:a0:e4:
2c:20:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net