Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/G2qSycLHfYIWQ3wLUX8unl7GuC8.roa
File: G2qSycLHfYIWQ3wLUX8unl7GuC8.roa (raw, json)
Hash identifier: T+EsA3imslob3JJulVatXmAABvQoSyXNTHE50893aCI=
Subject key identifier: 1B:6A:92:C9:C2:C7:7D:82:16:43:7C:0B:51:7F:2E:9E:5E:C6:B8:2F
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 12D7BB37
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/G2qSycLHfYIWQ3wLUX8unl7GuC8.roa
Signing time: Sat 01 Jan 2022 10:54:03 +0000
ROA not before: Sat 01 Jan 2022 10:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25101
IP address blocks: 193.111.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316128055 (0x12d7bb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jan 1 10:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b6a92c9c2c77d8216437c0b517f2e9e5ec6b82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:92:52:0f:75:46:2d:84:e5:40:55:ab:0b:
33:15:22:a3:58:89:4e:77:b7:ac:00:e4:81:70:67:
16:49:15:f5:4f:14:fb:4b:30:fb:86:fa:4d:59:ae:
59:5e:ce:47:68:37:19:06:37:fe:f9:c0:c0:5b:47:
5a:01:bc:35:57:32:ef:18:5f:ab:a7:d2:cf:4a:6d:
4f:95:ff:bb:1e:80:e5:32:a0:a5:e3:83:26:ce:03:
10:89:7e:ca:4b:d3:9d:32:d9:fe:77:7c:3e:cb:66:
e2:5b:80:9d:78:3f:06:7a:96:53:cb:09:db:d5:45:
a3:4d:91:13:f3:03:35:37:8c:dc:60:19:00:c4:0c:
fd:96:70:4e:5e:a1:c5:f4:48:a1:e3:04:68:20:f2:
19:88:eb:36:ba:4e:dc:61:fe:10:fb:75:55:93:72:
a6:0c:d7:2e:5e:7f:02:65:3a:ac:47:5e:f2:19:e8:
00:46:d6:dc:f5:39:f7:69:ba:e0:d9:2b:36:df:4c:
2c:75:ef:fd:8f:02:43:20:54:c6:27:d7:2c:ef:c7:
56:fb:78:73:ea:9d:93:2d:00:a2:53:3f:48:fb:de:
c1:0d:ff:b5:47:5c:71:95:fe:13:c3:d2:73:72:8c:
86:0a:50:5f:58:eb:7c:71:71:9a:8a:e5:cd:c0:e2:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:92:C9:C2:C7:7D:82:16:43:7C:0B:51:7F:2E:9E:5E:C6:B8:2F
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/G2qSycLHfYIWQ3wLUX8unl7GuC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.237.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c8:c6:54:75:00:2a:33:d9:b8:b0:05:6d:24:01:84:84:ab:
7f:87:14:58:c5:3f:d0:c2:1e:93:5a:09:4f:55:3e:dc:5c:85:
da:25:93:d7:72:55:21:35:4c:f3:82:bc:3f:03:9d:b5:55:23:
3c:6f:fc:8f:3f:5b:02:6e:9e:ba:37:94:90:0f:d4:c8:fd:44:
b9:89:ab:14:f1:73:55:5f:d0:64:de:8c:7b:76:96:5c:f7:98:
5e:3d:f3:63:05:7b:34:0c:89:da:25:07:e0:37:a1:26:43:bc:
51:dc:76:0e:05:dc:d5:f9:9f:c8:4d:8a:25:36:ca:61:ac:b3:
af:bf:c6:cf:51:b9:52:1e:41:4a:51:38:1b:54:5d:0c:26:5a:
82:53:e8:ae:e6:2e:1b:7f:54:2d:81:61:8b:9a:06:42:a7:c2:
fb:77:d6:a8:62:af:9c:46:10:b4:15:fe:2d:a6:15:04:11:d3:
ef:b0:32:26:5d:44:30:a5:b9:d6:45:5a:1b:1d:61:27:01:f4:
c3:01:57:7b:f6:b1:4a:d9:03:fc:7c:f7:2b:a3:f2:79:37:9f:
ed:fb:47:5d:b8:9e:ef:44:90:e8:b9:42:1f:df:15:09:63:97:
44:82:8b:d9:2a:e5:af:c0:0f:36:6f:de:cc:ff:31:44:80:5f:
b9:5e:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net