Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/hIy5j4onBdBMJwFJM7RO2lDXn90.roa
File: hIy5j4onBdBMJwFJM7RO2lDXn90.roa (raw, json)
Hash identifier: mYBz47tC/qsPfj9rHfCvsktQBOSuiq6CBSGTTdZYSG4=
Subject key identifier: 84:8C:B9:8F:8A:27:05:D0:4C:27:01:49:33:B4:4E:DA:50:D7:9F:DD
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 037FEFBB
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/hIy5j4onBdBMJwFJM7RO2lDXn90.roa
Signing time: Wed 23 Feb 2022 11:06:44 +0000
ROA not before: Wed 23 Feb 2022 11:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12779
IP address blocks: 86.105.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58716091 (0x37fefbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Feb 23 11:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=848cb98f8a2705d04c27014933b44eda50d79fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:9e:78:10:b4:2d:5d:30:54:81:2c:be:52:
33:2f:be:74:af:3e:fd:53:ea:00:32:63:15:63:c4:
53:bf:9d:24:dc:4e:a3:3d:1a:a3:2a:3e:69:b3:5a:
1f:b8:c5:5d:c4:55:69:9d:fa:ca:71:f6:f1:14:e1:
f1:55:a1:ce:66:47:16:34:11:b0:62:50:b3:f8:55:
93:7a:60:59:c4:61:63:72:18:73:2a:4f:b7:eb:be:
30:02:6d:81:bd:0b:4d:d9:7b:83:df:b6:d7:91:42:
cd:3b:c0:2a:4f:be:39:0f:10:8b:89:81:0d:a3:aa:
6c:fe:44:04:dc:1d:e1:89:a8:c0:e3:d8:4a:9d:ae:
25:14:5b:40:f6:97:7d:48:d5:9d:9f:e7:de:fb:44:
95:8f:ca:02:00:c8:9c:51:03:48:6f:91:ff:18:4c:
37:f8:8d:55:2e:ae:88:f1:cf:d9:6c:74:4c:10:d2:
5c:d2:31:ca:91:91:b2:34:f2:02:a5:5f:24:ba:c0:
9a:d7:d4:33:e8:42:75:d9:32:3b:64:9f:f2:28:0f:
b1:04:f2:f4:2f:ee:51:d0:52:02:70:cb:ac:46:9b:
1d:05:c7:51:f1:bf:22:d6:8d:e5:68:1c:62:cb:31:
2e:88:c5:20:8b:03:39:2b:dc:fa:83:d9:0a:e5:36:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:B9:8F:8A:27:05:D0:4C:27:01:49:33:B4:4E:DA:50:D7:9F:DD
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/hIy5j4onBdBMJwFJM7RO2lDXn90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.14.0/24
Signature Algorithm: sha256WithRSAEncryption
57:47:12:6c:ba:7e:69:8a:79:5d:c7:0b:ae:50:24:25:b0:5a:
30:49:e4:6e:26:62:7e:5e:ca:a7:df:a9:10:a9:9d:97:b3:d8:
08:7f:9b:17:c2:ca:0e:03:26:d6:e6:39:ba:44:76:5e:d5:41:
fd:38:03:85:ab:38:fd:34:68:d4:aa:d0:05:ec:98:29:8f:89:
e1:72:f5:86:cf:6f:71:ee:7c:91:7b:5a:0d:54:b8:d5:cf:98:
9a:1c:46:bc:b8:36:0f:ab:0f:a8:8a:cf:7a:03:52:ac:6f:56:
e4:f3:05:90:f2:3c:3f:b6:71:bb:67:dc:1d:3a:72:5f:05:31:
41:7c:b6:f7:30:44:cb:21:31:c9:5c:dd:3d:ca:2b:db:ee:f8:
c3:a3:3d:18:68:88:f6:9e:e2:b1:de:bb:a9:8f:5d:54:1a:70:
f7:b3:c2:17:d3:ce:51:a1:1a:4c:1a:6d:2b:76:ca:bc:a2:a5:
77:d0:f3:e8:d8:e0:bd:4d:51:8a:70:8c:67:8c:9c:6a:72:a7:
eb:4c:af:b5:a6:8a:25:e9:9a:15:82:fb:c8:be:b9:77:ca:7a:
88:22:2a:a8:99:95:66:c5:28:67:cb:a9:a1:98:31:d0:8f:b4:
d4:88:79:f1:60:08:14:aa:d3:50:56:a1:ea:71:45:f0:65:79:
14:67:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net