Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/vDfHJ93UACvDY1imq_gqX4oDGt8.roa
File: vDfHJ93UACvDY1imq_gqX4oDGt8.roa (raw, json)
Hash identifier: EQhKeVDsA2rddnCd4JwrHQL58XaYaqqULuOB9jbgZ3c=
Subject key identifier: BC:37:C7:27:DD:D4:00:2B:C3:63:58:A6:AB:F8:2A:5F:8A:03:1A:DF
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0184379C705B09B4E1FBFEFCA9F0335B1D4D
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/vDfHJ93UACvDY1imq_gqX4oDGt8.roa
Signing time: Wed 02 Nov 2022 09:11:50 +0000
ROA not before: Wed 02 Nov 2022 09:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21107
IP address blocks: 94.250.48.0/21 maxlen: 21
94.250.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:9c:70:5b:09:b4:e1:fb:fe:fc:a9:f0:33:5b:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Nov 2 09:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc37c727ddd4002bc36358a6abf82a5f8a031adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:71:fa:e5:4d:bf:01:1a:ba:02:d5:f3:82:
f3:ba:4b:1f:92:68:bb:25:84:7a:ce:6e:c8:42:02:
38:36:e2:c2:69:b0:b8:ee:65:ee:0a:94:36:20:8b:
0c:2c:d4:5c:4e:67:e2:fa:b1:f0:ab:78:95:0f:c4:
88:cf:2b:de:c5:70:c2:06:dc:8f:da:7d:87:e8:16:
c7:8a:45:05:32:0e:5f:3a:7c:fb:aa:96:25:fd:75:
90:d4:65:f5:29:60:aa:81:3f:fc:37:d7:1e:cb:15:
77:24:46:03:47:81:37:f1:68:81:19:6e:1b:55:47:
77:d3:ce:ff:6b:75:b8:06:8c:0e:3e:7f:53:bf:7c:
94:64:cb:77:1f:41:3b:37:8e:2a:ca:57:35:c4:b7:
cf:ea:ea:1f:c6:b8:88:a2:2d:39:98:b3:f0:86:0f:
8e:c6:7c:22:44:8a:49:1c:08:0b:cc:b9:5d:69:37:
91:9a:4b:1f:5a:29:3f:9e:c8:1e:19:80:36:03:60:
cd:f9:c2:d6:61:3a:98:d1:5f:46:4a:38:8c:7d:15:
64:e2:16:82:9b:51:c0:a6:d7:eb:3d:45:8f:68:a3:
31:48:78:ae:f2:4e:34:12:bb:4f:ab:6f:13:d8:5b:
35:3c:92:da:a2:6c:65:ca:b4:bc:8c:75:f6:4e:76:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:C7:27:DD:D4:00:2B:C3:63:58:A6:AB:F8:2A:5F:8A:03:1A:DF
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/vDfHJ93UACvDY1imq_gqX4oDGt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.48.0-94.250.59.255
Signature Algorithm: sha256WithRSAEncryption
13:04:33:fb:76:4b:ad:2b:0a:cc:26:5f:ad:f9:46:47:3b:c0:
73:14:ec:b6:87:bc:04:c1:f2:eb:d2:ad:02:44:f6:2a:56:01:
ba:ce:fa:42:51:38:d2:86:77:50:72:f6:39:7e:cb:50:58:5a:
29:32:e2:49:11:6f:5e:fa:d7:de:e3:84:a1:84:9a:9b:71:ed:
c9:81:a9:65:39:bb:9f:99:21:f5:7e:d5:82:98:2e:bb:57:6c:
6b:45:f0:f4:ea:65:91:e6:1e:2c:b5:7a:ec:d2:b0:e2:6e:09:
cc:40:6a:9b:8f:fe:18:e6:59:a9:1d:d0:74:32:6d:4c:c0:04:
7f:fb:79:db:b3:5b:fd:e7:c8:ee:b9:fd:66:9d:f2:bc:21:b1:
5a:ac:80:4d:eb:e4:90:f5:15:6a:e8:a0:dc:6a:2f:29:30:8a:
c6:4b:bc:d6:d2:d7:d1:4e:eb:4b:e7:89:7e:0b:b9:89:57:9c:
b9:62:c5:36:7e:3f:7c:10:64:ee:ec:8e:de:5c:81:f3:56:28:
1e:53:c2:32:37:53:01:ed:2c:5c:c8:9f:c5:6f:6e:f0:f7:3d:
97:6e:ee:13:9c:44:3f:dd:bd:94:36:cb:3e:7c:9e:d1:5a:d6:
65:c9:e2:d7:36:f5:1f:2e:9d:e8:9a:d7:c5:17:18:08:d6:53:
d7:23:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:40 2023 by rpki-client on console.sobornost.net