Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/0nq535iIluQhs6Te_WKsgYdRrJg.roa
File: 0nq535iIluQhs6Te_WKsgYdRrJg.roa (raw, json)
Hash identifier: 0Zszy4WgUA7JlJU31tuRZgvxsDbKVp5Of+Lsm8w/zjo=
Subject key identifier: D2:7A:B9:DF:98:88:96:E4:21:B3:A4:DE:FD:62:AC:81:87:51:AC:98
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 06EFA0EA
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/0nq535iIluQhs6Te_WKsgYdRrJg.roa
Signing time: Sat 01 Jan 2022 03:52:01 +0000
ROA not before: Sat 01 Jan 2022 03:52:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12808
IP address blocks: 212.125.32.0/19 maxlen: 24
212.125.56.0/22 maxlen: 24
212.125.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116367594 (0x6efa0ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Jan 1 03:52:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d27ab9df988896e421b3a4defd62ac818751ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:b5:02:c4:aa:66:a4:c1:3f:72:a8:e6:2d:
ed:14:ad:f7:47:3d:3e:14:82:6c:27:25:18:59:4a:
53:d3:e3:97:b9:11:e2:d8:11:65:1f:61:7a:b6:18:
17:b8:6a:13:74:06:35:b8:ec:bb:e2:db:43:c3:c3:
06:4e:ab:a6:3f:b5:4d:60:66:2e:73:cd:26:40:8f:
6b:02:5c:6a:3d:da:64:9a:d5:51:aa:8e:57:3f:0a:
62:1e:3c:08:51:fd:47:b5:64:3f:e1:8f:da:f4:a8:
87:3e:32:30:ec:33:79:b2:f3:9e:b6:20:76:60:8a:
25:81:ec:5a:0b:c1:95:51:dc:c3:fe:76:dc:86:13:
84:9f:86:d8:0c:51:b9:65:bd:ac:ac:e4:b5:1c:68:
d6:5c:0d:58:9f:8f:8a:2a:46:e7:81:e0:8a:03:03:
13:ad:4f:30:d0:31:b4:5c:38:12:d3:6f:00:55:84:
76:cb:47:90:b7:0a:67:35:ac:d2:bb:ce:27:a3:a9:
12:e8:7e:a3:0b:d4:19:58:f4:e0:23:d6:6a:c4:b2:
06:17:a7:38:4e:79:5e:7b:ce:a0:07:e0:ef:11:6e:
7f:c2:9b:b4:5a:25:c1:0d:5d:e2:9b:c3:17:7b:f0:
5e:5f:d4:44:62:58:36:92:42:1f:6f:09:c6:09:5a:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:B9:DF:98:88:96:E4:21:B3:A4:DE:FD:62:AC:81:87:51:AC:98
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/0nq535iIluQhs6Te_WKsgYdRrJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.125.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:5e:9a:3f:42:82:bd:d5:92:a8:50:c8:a7:1a:25:25:04:13:
a7:4e:e4:88:08:c0:8f:23:9d:f6:d2:8a:b5:ef:f3:e1:79:74:
6d:d7:5f:26:ff:ba:46:81:27:32:32:dd:ee:cd:cf:90:77:39:
18:53:01:6c:e4:83:d4:99:9f:e2:48:d4:4f:df:85:b9:97:74:
34:63:13:0c:7b:c5:1c:cf:08:1c:06:ef:ca:24:ba:d9:91:42:
f1:60:70:c4:11:21:22:80:10:0f:5b:c0:b9:c4:aa:e5:80:f8:
3a:27:2d:f6:aa:46:9c:69:f8:6d:bf:a9:d9:ee:f2:ba:93:37:
2a:ec:b2:b2:69:45:d2:19:e3:7d:e6:af:14:97:4a:3c:4e:7e:
54:94:6b:1d:80:73:97:e7:eb:ea:5d:b7:40:8c:5b:37:2a:4d:
d5:a3:c2:29:94:0b:34:8d:69:9a:b9:57:68:be:97:ec:96:03:
cb:ea:6c:f4:d3:c2:f9:15:33:ad:33:56:5e:41:af:14:1c:d7:
78:d0:19:92:eb:bc:49:9e:56:9d:7e:4e:c4:d0:25:ad:05:0d:
07:42:c2:32:e3:2e:df:b1:03:30:24:2b:98:e0:73:54:c5:9c:
a7:22:4a:c8:b9:9d:90:a9:ca:0b:d4:c4:47:18:b9:52:18:ef:
7b:82:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net