Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/dMwGpqoDbYYGQBbW5oxNSyEbAhA.roa
File: dMwGpqoDbYYGQBbW5oxNSyEbAhA.roa (raw, json)
Hash identifier: B4Ve2ljQEucQc8eF3kdgJH0D1m7OL1EeThTqt6wZFFs=
Subject key identifier: 74:CC:06:A6:AA:03:6D:86:06:40:16:D6:E6:8C:4D:4B:21:1B:02:10
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03FC9BBE
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/dMwGpqoDbYYGQBbW5oxNSyEbAhA.roa
Signing time: Sat 01 Jan 2022 01:52:26 +0000
ROA not before: Sat 01 Jan 2022 01:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42625
IP address blocks: 213.145.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66886590 (0x3fc9bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74cc06a6aa036d86064016d6e68c4d4b211b0210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:80:68:b6:ff:61:d3:6a:2b:e4:cc:00:2f:
9d:b8:46:d1:2b:12:2f:ae:4d:37:05:68:84:fa:89:
7c:16:70:58:b7:49:a6:ee:d1:ac:37:2b:fb:1b:47:
3d:27:e7:b9:48:0f:38:57:48:7d:64:a0:53:3a:49:
b7:bb:96:65:3a:fe:08:9e:8b:1f:2c:da:d9:5b:e1:
a7:a8:d1:ba:09:94:e0:a5:0a:32:2c:a8:fc:05:8c:
0f:a1:8b:0c:c2:75:e1:84:33:a8:3e:cc:0e:ac:82:
68:fc:39:f4:69:f3:a4:39:c1:e3:c6:aa:ed:bd:42:
5e:b0:79:06:52:49:de:08:71:5e:38:f9:06:83:17:
1f:1f:ff:89:31:95:3b:95:3f:9f:e4:ea:27:85:48:
5c:d4:59:73:20:69:3a:bf:5c:94:c8:e2:59:01:a2:
5c:9b:27:d2:5d:02:78:2b:77:33:49:c5:8f:1f:f0:
91:69:d0:0f:ed:e9:24:28:92:46:9b:d0:0a:ba:4b:
c1:20:cc:87:95:9e:b1:55:73:f8:aa:f5:42:60:63:
e6:4e:77:ad:a2:21:2e:5a:ae:a2:43:8d:9b:ad:e1:
aa:1b:b6:2f:c0:57:c1:38:c7:13:84:3e:44:88:ee:
3b:28:f3:22:68:d0:9b:eb:d0:44:69:c9:6e:62:9d:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CC:06:A6:AA:03:6D:86:06:40:16:D6:E6:8C:4D:4B:21:1B:02:10
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/dMwGpqoDbYYGQBbW5oxNSyEbAhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.96.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b9:66:f1:6e:72:78:ef:fa:e4:ed:3f:88:9c:9c:0d:36:ba:
66:ee:e1:40:60:ea:53:a6:bf:52:ff:fa:9b:18:f6:69:21:25:
8d:17:58:aa:ae:84:b9:72:e3:1e:c5:7c:d9:db:20:49:a2:54:
7d:48:4b:ef:bf:e3:d0:b0:7a:92:1a:4b:b5:75:02:42:ad:cb:
67:d8:0f:49:7d:6c:ba:28:55:04:d6:37:41:f3:2b:29:44:f8:
1c:cd:53:e6:60:05:3b:3a:3d:bd:d2:fe:a9:08:94:6b:dc:2c:
88:60:16:74:d0:d7:2f:df:6e:e8:6e:d2:40:c6:71:b0:b9:68:
08:ad:6a:29:53:50:3b:69:5f:22:53:f4:d3:98:29:75:1e:27:
93:ac:74:1b:98:60:56:2a:b7:17:81:e1:aa:db:08:5e:bd:96:
44:09:65:2e:70:0b:2b:b0:34:65:29:de:0e:df:bc:6e:2f:6d:
01:02:2a:e2:9e:b5:29:70:46:50:ab:52:83:72:36:21:ef:39:
b7:c3:8d:a4:21:4b:24:1f:65:72:26:e3:c0:34:f4:74:35:1e:
d4:95:30:8f:26:f0:a4:6e:e0:23:36:b7:6c:cc:10:16:c7:9c:
7c:0c:a9:e5:fe:8a:17:90:71:c5:0a:8b:67:c9:d2:8e:4b:1f:
2a:af:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net