Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/TmUJ4R_BuG5KOjOWWjp39RyUbsM.roa
File: TmUJ4R_BuG5KOjOWWjp39RyUbsM.roa (raw, json)
Hash identifier: aTgxyRac4juO6aEwFFad3MWxRNy5FrG04f8MrsnJTpI=
Subject key identifier: 4E:65:09:E1:1F:C1:B8:6E:4A:3A:33:96:5A:3A:77:F5:1C:94:6E:C3
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 09AA5E0F
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/TmUJ4R_BuG5KOjOWWjp39RyUbsM.roa
Signing time: Sat 01 Jan 2022 02:50:49 +0000
ROA not before: Sat 01 Jan 2022 02:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 786
IP address blocks: 160.6.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162160143 (0x9aa5e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jan 1 02:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e6509e11fc1b86e4a3a33965a3a77f51c946ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:fd:46:4f:4c:c7:ab:ae:09:d0:9c:f2:42:
7d:62:7c:e2:3d:90:c3:e8:60:82:d3:b1:bf:db:55:
62:9e:86:1f:9f:90:06:bd:1c:d4:64:73:07:fe:4c:
4c:9b:f9:a6:56:ab:19:b8:d8:32:16:bd:4e:3b:f8:
44:e2:52:a4:09:c2:97:0c:be:81:27:8b:67:38:03:
ff:e3:17:e8:ac:86:72:10:89:d7:5c:44:1e:4f:51:
9a:3b:06:6f:9e:10:af:0b:1e:57:19:67:b6:cd:41:
d9:57:fc:17:be:72:33:36:4a:96:12:7d:e4:bb:02:
28:e8:b1:92:1e:ce:19:1d:f2:27:5b:c5:d0:5b:3e:
d7:df:ec:b6:42:2c:7d:1d:50:46:27:7c:9d:fe:34:
d9:44:be:45:23:21:71:0a:9d:08:2f:20:8a:69:f7:
9f:d4:32:71:8d:89:07:a8:1e:a6:5b:b4:45:e5:01:
8b:a8:ab:83:83:7b:16:33:b6:90:3b:f2:7b:66:ea:
ec:1c:be:ae:da:ed:9b:b9:5e:da:21:83:37:95:8f:
29:a3:2d:98:55:03:6b:46:15:24:bc:8e:61:f2:a1:
8a:a8:5b:34:44:5b:54:54:10:f4:35:58:b7:67:08:
8c:e3:d0:26:80:be:ad:30:9b:b1:c6:10:c3:64:c9:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:09:E1:1F:C1:B8:6E:4A:3A:33:96:5A:3A:77:F5:1C:94:6E:C3
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/TmUJ4R_BuG5KOjOWWjp39RyUbsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:fd:36:73:f8:b7:b2:2a:af:03:a8:8c:31:93:07:88:c7:85:
2b:f3:05:6e:d2:f2:db:65:42:ac:5f:b2:f4:26:21:67:8e:30:
95:8c:de:a8:64:c3:93:15:c8:37:6b:c4:11:ec:a5:2b:da:22:
1c:60:74:6c:c4:1b:e8:dd:0f:fb:7f:64:ae:27:38:b6:3e:26:
5c:65:0f:3c:af:71:f7:78:51:e8:dc:37:0f:87:9e:c4:ab:4c:
df:6a:37:0e:ea:56:28:b9:51:67:cf:9b:af:82:f3:91:22:b9:
af:21:dc:ab:af:0f:cb:31:90:de:a6:7b:3c:ed:39:dd:d9:36:
68:26:61:5d:6d:27:49:6d:b7:11:5c:1a:b7:ac:67:9e:fa:e2:
85:c6:2f:8c:df:2e:e7:09:4d:e7:97:7d:3d:89:28:81:22:f8:
d2:b6:28:4c:ef:22:f8:73:72:6e:22:2f:31:8d:19:c0:dd:ed:
1e:e4:27:da:fd:55:cf:99:f7:20:d4:01:a6:48:7b:b3:a6:5f:
74:66:cb:30:2c:f0:5b:ab:fa:6f:05:ac:64:00:27:23:83:32:
7b:de:56:27:3b:64:4e:d1:7e:25:22:4b:25:10:32:dc:34:93:
65:e8:b2:f6:fd:34:6b:7a:20:83:4b:6f:f5:67:c4:de:ad:77:
28:67:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:55 2023 by rpki-client on console.sobornost.net