Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/dbqACdYKcQZnDMGH2n6qaCmrJqI.roa
File: dbqACdYKcQZnDMGH2n6qaCmrJqI.roa (raw, json)
Hash identifier: jer4F3K+8T38rcPmwdJzcGpebVLdpJgqIVoFomePLFw=
Subject key identifier: 75:BA:80:09:D6:0A:71:06:67:0C:C1:87:DA:7E:AA:68:29:AB:26:A2
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 06313CCB
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/dbqACdYKcQZnDMGH2n6qaCmrJqI.roa
Signing time: Fri 29 Apr 2022 11:46:17 +0000
ROA not before: Fri 29 Apr 2022 11:46:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57136
IP address blocks: 91.230.248.0/24 maxlen: 24
194.105.142.0/23 maxlen: 23
194.126.205.0/24 maxlen: 24
194.102.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103890123 (0x6313ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Apr 29 11:46:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75ba8009d60a7106670cc187da7eaa6829ab26a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:d9:1e:f2:25:bb:3e:4c:5f:6c:57:88:31:
bf:7a:06:30:a4:a8:0e:1b:1a:40:0a:fe:a6:21:1d:
48:3f:49:6a:d3:92:19:e6:cf:5b:e3:77:10:44:6d:
b6:07:6b:1c:84:6a:98:d1:8d:8d:19:a7:ed:e7:b6:
a0:fb:49:58:1c:d8:04:38:04:c9:83:5a:c6:2a:7b:
fa:96:59:0e:5b:43:4b:a8:d7:ac:fe:e6:bc:9d:1c:
44:67:55:31:f7:87:87:e6:db:94:f8:43:0a:82:2f:
1f:e0:2c:22:bd:65:0e:aa:8d:6c:cb:a1:f7:15:30:
72:75:ee:d0:d3:86:41:3e:22:cf:26:88:f7:71:8c:
4b:a1:51:7a:80:88:12:61:49:9f:45:85:24:a7:a5:
f8:ca:27:c7:b5:f3:ba:a0:06:0a:6a:d9:74:7f:a6:
37:ce:63:e8:53:82:34:a3:5c:d9:68:2d:8c:32:bb:
e9:e3:cc:a0:34:2f:4f:6b:cd:21:69:4d:92:4c:fe:
83:c2:3d:77:f0:f2:d5:cb:90:4a:bf:eb:ac:64:8c:
7a:31:97:44:aa:ce:b2:bd:19:16:76:88:81:ff:56:
8c:63:52:c8:aa:a3:c9:7f:03:08:cf:db:7d:3b:bb:
00:66:ce:fe:ce:42:73:f2:17:bb:5d:5e:c7:e0:6a:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:80:09:D6:0A:71:06:67:0C:C1:87:DA:7E:AA:68:29:AB:26:A2
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/dbqACdYKcQZnDMGH2n6qaCmrJqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.248.0/24
194.102.117.0/24
194.105.142.0/23
194.126.205.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4e:e2:8b:81:bf:d1:79:22:27:f5:a4:5a:78:62:f8:1f:c5:
4f:47:4e:1d:a3:fd:23:9e:4d:ba:3e:80:44:b0:c8:e2:28:8a:
ca:54:81:f7:c5:65:ba:1d:53:b7:cb:80:da:84:74:63:75:4f:
3b:4c:e5:74:a0:71:6e:85:76:04:1c:a5:c2:81:3f:b1:08:fa:
0c:db:c1:e7:19:47:d7:f5:16:87:1c:0e:29:12:b5:a0:b0:0e:
43:da:41:2c:0f:c2:bf:ea:3c:0f:c1:fb:d1:b7:8a:7a:ad:01:
2b:36:a3:8d:41:33:93:23:77:39:fe:ac:4c:c9:92:83:b9:4d:
59:54:40:42:85:14:40:c0:a0:a1:f8:3d:57:cb:38:c2:1c:f2:
3a:c1:98:26:92:71:5e:d4:70:7b:9d:66:a9:68:c8:6a:72:f1:
84:9f:3d:68:71:5a:41:d6:a5:79:a4:4a:93:a1:1b:73:68:94:
5d:69:2b:5d:fe:25:04:be:28:68:52:e7:69:c7:c4:91:30:21:
d9:28:5d:b3:aa:86:7e:d6:e4:b4:f3:aa:ec:42:5b:95:b7:c1:
52:ac:07:4d:ff:e5:2d:b9:b0:20:a1:12:10:de:93:a1:b1:fb:
91:2c:f9:75:59:6c:9c:83:f8:98:ce:d0:77:c9:43:20:5c:92:
2b:3c:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net