Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/DoMUcEq6BtTm3FRQDryxPmWWfQY.roa
File: DoMUcEq6BtTm3FRQDryxPmWWfQY.roa (raw, json)
Hash identifier: +qqbn9S/h4BoyWpG8cMsNKdwLWsYOmcY1Nlhfm0bZAs=
Subject key identifier: 0E:83:14:70:4A:BA:06:D4:E6:DC:54:50:0E:BC:B1:3E:65:96:7D:06
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 0A54C5A6
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/DoMUcEq6BtTm3FRQDryxPmWWfQY.roa
Signing time: Sat 01 Jan 2022 12:58:09 +0000
ROA not before: Sat 01 Jan 2022 12:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206362
IP address blocks: 212.70.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173327782 (0xa54c5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 12:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e8314704aba06d4e6dc54500ebcb13e65967d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:1f:59:ed:3b:d3:e1:b0:e1:71:9d:31:0b:
17:8d:03:c6:03:ab:89:e2:db:a7:aa:e8:46:c2:07:
7a:1c:62:b9:1f:5c:45:07:f7:fe:d6:53:a6:11:d1:
4a:1c:6f:9e:d4:3f:f5:91:c0:17:05:8f:4c:e9:8d:
95:e0:9f:0b:9e:2d:41:57:fc:bc:dd:95:51:8d:5c:
2d:d6:77:09:28:42:e7:4f:59:67:25:c4:9b:05:71:
4d:f1:82:4c:ef:02:f3:74:3e:44:ea:04:95:c6:5f:
82:ef:58:7a:b8:34:93:d3:1c:ab:fe:02:32:93:64:
ae:cc:c5:c3:cb:3a:80:61:e7:55:97:fe:49:c1:9e:
e4:23:57:52:9e:3b:0f:ea:15:6b:8a:03:35:fb:f2:
a8:ad:45:a0:19:33:53:b1:68:be:60:c1:6f:65:d9:
18:ea:8d:59:0c:f5:2d:f0:58:f4:b0:43:5f:49:24:
b1:c3:6c:e2:1f:22:ae:b7:92:32:c0:8e:f4:24:6a:
05:67:63:40:3b:89:21:1f:bd:39:1c:97:8d:24:e2:
0a:27:51:e9:87:17:df:3b:19:b9:2d:e4:cb:e6:2f:
a2:f3:3a:df:dc:0d:1b:a2:fa:30:28:7e:af:19:51:
dc:24:03:0c:ee:93:02:3d:7c:0d:9c:59:65:62:1b:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:14:70:4A:BA:06:D4:E6:DC:54:50:0E:BC:B1:3E:65:96:7D:06
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/DoMUcEq6BtTm3FRQDryxPmWWfQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.186.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bc:31:87:e1:7e:5c:0d:fc:ee:d4:54:93:60:8d:cf:7c:3e:
44:a1:e0:37:65:dd:0a:b3:7a:29:dd:80:fd:e0:3c:1d:7a:89:
e7:f2:7b:e0:b2:c0:ef:70:24:22:87:09:ab:c0:74:4b:82:a0:
ae:15:16:85:35:1b:2a:8a:eb:3e:c4:f2:cf:68:49:e3:e8:31:
7c:51:3a:09:3b:9e:77:a0:76:de:ae:ca:64:38:60:36:84:eb:
79:18:42:95:4d:b9:54:f9:80:c9:22:81:5f:39:fa:b7:2c:56:
6c:4a:42:c0:52:96:db:3a:a9:18:ad:77:03:04:15:0a:e1:65:
de:33:ff:43:0f:e3:5e:c3:c2:99:47:86:9b:79:5a:f7:d4:e9:
63:ee:0e:32:f9:a0:90:c7:77:b1:88:15:df:68:1d:0f:07:25:
ab:d7:2c:48:15:22:aa:d3:dc:0c:2d:8d:33:45:62:72:20:d4:
8e:f1:bc:4c:9b:b5:cf:2d:51:fe:08:28:c1:27:e3:89:aa:18:
00:5c:c6:58:80:78:88:82:d8:8b:33:75:1d:d2:77:64:fc:08:
92:88:fc:f3:e8:3a:79:bb:d1:35:ba:17:db:17:fb:a8:38:02:
7a:8a:1a:15:95:a0:0d:68:4b:72:39:40:4f:a0:74:c3:c2:c1:
8e:75:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net