Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/1ztI48LEFsNUbzLbF4YEDKx1j2A.roa
File: 1ztI48LEFsNUbzLbF4YEDKx1j2A.roa (raw, json)
Hash identifier: W5jShEO/Mk1zDnc6VDQOl+tAwA8dTGMeKkUPBAb7SIw=
Subject key identifier: D7:3B:48:E3:C2:C4:16:C3:54:6F:32:DB:17:86:04:0C:AC:75:8F:60
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 014FE09C
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/1ztI48LEFsNUbzLbF4YEDKx1j2A.roa
Signing time: Sat 01 Jan 2022 05:53:13 +0000
ROA not before: Sat 01 Jan 2022 05:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61094
IP address blocks: 185.143.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22012060 (0x14fe09c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Jan 1 05:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d73b48e3c2c416c3546f32db1786040cac758f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:27:e9:68:3f:0e:71:d6:aa:cc:ab:95:48:
a7:ea:97:8c:bb:19:e2:4f:4d:9f:49:ab:8d:2e:bb:
5b:26:1a:1c:e7:16:cd:c4:49:65:cb:be:50:95:a7:
f5:d8:7e:65:26:80:b2:3d:4c:a8:d4:87:8b:50:8c:
9a:0e:8d:19:38:f4:9b:73:39:e4:46:b7:da:9b:fb:
03:8c:f2:30:9a:e7:4e:25:dd:90:7b:be:46:94:2f:
69:6c:70:88:c5:e3:69:db:fa:21:e4:18:7c:66:77:
d7:a7:bd:97:82:79:d3:9c:3d:3b:f6:2b:2c:14:8e:
22:67:47:8b:cc:df:d3:94:1b:1c:a8:24:a6:b0:be:
42:45:13:da:e1:25:54:31:ff:e9:25:4e:c0:f3:73:
78:f5:6d:86:ac:0a:51:a2:94:ed:e9:0c:e4:e2:82:
10:16:f9:ab:4f:ed:fa:5e:63:55:81:f2:11:b2:58:
38:ea:a8:32:17:c9:30:d6:d5:51:dc:b2:b2:80:a5:
56:35:e6:a7:24:43:d9:a2:08:f3:e6:29:bb:4f:0d:
76:96:4c:57:1b:bd:ec:3a:3b:85:e7:3e:05:d3:4e:
8c:75:7e:a4:6d:fc:c0:8e:fa:a9:ad:2c:a2:e0:fd:
29:e3:30:c7:23:e7:5d:e6:12:2c:f9:ae:37:a5:64:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3B:48:E3:C2:C4:16:C3:54:6F:32:DB:17:86:04:0C:AC:75:8F:60
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/1ztI48LEFsNUbzLbF4YEDKx1j2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.192.0/22
Signature Algorithm: sha256WithRSAEncryption
04:44:b9:d5:46:a5:bc:56:d4:92:6b:5a:5c:0b:34:82:e7:88:
64:c5:b7:70:bc:50:79:3e:10:62:c3:87:63:10:2b:b8:eb:b4:
50:0c:07:c0:21:1c:6a:1d:a8:1c:3d:25:12:b9:c4:46:1a:69:
e9:a7:56:da:6a:d7:35:80:02:14:a5:ae:2b:b9:85:1e:67:a7:
47:ad:48:20:c3:f2:e1:06:8c:2a:fc:2d:a4:e0:31:0c:00:55:
e6:77:cd:da:f8:98:31:76:1a:16:56:cc:a3:59:24:41:54:e9:
66:23:fe:4c:75:17:dd:d6:9b:6b:b0:a6:9f:7c:48:78:b9:1e:
b2:e3:a4:5b:5b:af:23:66:d8:11:7c:6a:23:9f:97:7c:d7:3a:
1f:44:f5:ca:da:2f:b2:8a:ee:c6:31:55:c5:a8:e2:4e:f9:6f:
f3:fe:b5:81:ec:3e:f4:e4:32:b1:f5:f5:c1:33:1c:c2:25:0b:
60:af:96:3d:e6:1d:b3:d7:e1:a5:30:bc:87:a8:6f:22:a7:6c:
96:d5:33:d6:d5:fc:fa:58:f6:5e:20:33:55:89:1d:e9:8f:ea:
2c:d2:1e:7f:37:75:8f:e9:ff:d5:75:4e:65:4f:ec:be:6f:70:
62:cc:1b:a6:81:8e:ef:3f:d0:37:10:f7:68:c5:bc:84:27:60:
37:36:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net