Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/tlOFuOmvsyNfTdoLDyAXYhB0Ktk.roa
File: tlOFuOmvsyNfTdoLDyAXYhB0Ktk.roa (raw, json)
Hash identifier: mkznJgekO+3spjysLS8goI7bPmyW3ioY+Gc6s59iXdw=
Subject key identifier: B6:53:85:B8:E9:AF:B3:23:5F:4D:DA:0B:0F:20:17:62:10:74:2A:D9
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 1364A971
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/tlOFuOmvsyNfTdoLDyAXYhB0Ktk.roa
Signing time: Sat 01 Jan 2022 09:54:51 +0000
ROA not before: Sat 01 Jan 2022 09:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8699
IP address blocks: 185.120.28.0/24 maxlen: 24
185.120.28.0/22 maxlen: 24
185.120.29.0/24 maxlen: 24
185.120.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325364081 (0x1364a971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jan 1 09:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b65385b8e9afb3235f4dda0b0f20176210742ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:fd:e4:70:ed:90:0c:16:9a:02:c4:19:be:
f5:b0:1c:31:9d:0b:d9:b8:9a:cf:ce:9c:0c:c9:74:
bc:8f:ee:3d:b6:c7:4c:8d:14:63:a5:ab:70:eb:7f:
f1:fe:25:c8:32:57:d8:22:4d:51:96:30:93:c6:7d:
c1:ff:cd:a7:bb:46:14:2b:cb:78:45:24:e6:c0:48:
90:a8:45:b8:99:2d:53:29:5b:db:95:4f:ea:e5:ae:
89:34:a2:6c:2a:e6:e6:ae:19:81:84:09:4a:eb:6a:
26:82:47:91:c3:b2:f9:d0:2e:a2:1c:03:b9:4a:5e:
1f:d2:e9:b3:25:bb:14:ee:14:d3:b4:27:6f:26:4e:
38:33:48:dd:92:bc:8a:e1:24:ae:95:3e:85:ef:8e:
06:bb:c6:a8:ad:6e:91:0d:e3:1a:df:c7:eb:16:e6:
6d:d9:2f:47:fc:5a:db:25:f5:e6:2b:f3:69:0d:b1:
d3:45:72:91:7b:36:59:e8:be:4d:f8:af:4d:6f:cb:
72:60:fe:f4:5f:3d:5f:4a:51:d0:b4:a8:ff:c5:82:
09:a3:f8:42:dd:b5:f7:6a:9f:ae:44:48:78:16:c1:
b4:b0:47:1c:e5:10:ed:4b:64:6c:fd:91:98:d4:fc:
dd:3a:87:26:dc:84:4b:ad:f4:12:4a:e8:6b:0a:35:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:53:85:B8:E9:AF:B3:23:5F:4D:DA:0B:0F:20:17:62:10:74:2A:D9
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/tlOFuOmvsyNfTdoLDyAXYhB0Ktk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.28.0/22
Signature Algorithm: sha256WithRSAEncryption
77:0c:80:fb:8f:94:bb:d3:40:76:96:83:35:f1:7b:f4:d6:f0:
cd:37:01:2a:62:f0:65:2f:cf:5f:b9:e3:11:34:25:2f:e7:fb:
26:cc:5c:c4:6d:ed:4d:9f:f9:dc:9c:b8:7c:87:1e:f9:9c:73:
15:c5:08:e0:36:e2:a7:4c:81:69:be:47:64:b0:1c:67:6b:f6:
46:0c:82:69:56:89:07:d0:92:69:a6:a8:80:f9:77:2c:85:07:
ec:64:2f:a0:e8:79:d4:ff:e1:f2:c8:5e:79:90:11:6d:de:fb:
91:b6:85:ed:bb:05:fa:59:f8:a2:21:49:1f:d3:0b:44:d5:48:
7f:90:91:23:e7:22:80:39:89:1c:84:bc:c9:ad:96:09:29:eb:
1a:41:e6:c7:7c:ac:eb:9d:bc:d5:06:7a:a8:dd:ee:27:bc:5c:
e7:51:88:6c:38:f8:76:f2:86:f8:87:91:db:c8:26:b0:f2:0e:
48:15:8b:35:84:4f:05:95:54:d9:aa:dc:18:1e:84:aa:4d:35:
5d:54:f2:ce:f6:3a:a3:ec:53:7c:52:ea:49:45:18:0f:b8:4d:
c7:d7:05:cb:50:fb:83:cc:b0:a3:08:bb:e3:d3:7f:39:d9:18:
7c:69:07:de:e0:aa:05:43:c3:45:3b:25:3b:62:2b:c6:4a:d0:
65:08:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:06 2023 by rpki-client on console.sobornost.net