Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/2DHhkCYmnYeeuKojBd0NGKbxjwA.roa
File: 2DHhkCYmnYeeuKojBd0NGKbxjwA.roa (raw, json)
Hash identifier: jRIpB29a/idUDTyZTxKpB9iQC8+gsvIgR4yv8IqZVYo=
Subject key identifier: D8:31:E1:90:26:26:9D:87:9E:B8:AA:23:05:DD:0D:18:A6:F1:8F:00
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018543FFE4B26969A03AACF574D4B36CADF7
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/2DHhkCYmnYeeuKojBd0NGKbxjwA.roa
Signing time: Sat 24 Dec 2022 11:58:41 +0000
ROA not before: Sat 24 Dec 2022 11:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:ff:e4:b2:69:69:a0:3a:ac:f5:74:d4:b3:6c:ad:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Dec 24 11:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d831e19026269d879eb8aa2305dd0d18a6f18f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:36:4d:6d:86:fb:38:35:13:e0:24:9f:b7:
1a:76:91:21:e8:84:fa:eb:15:18:99:5e:ff:62:65:
a9:87:1c:e9:1e:11:bc:7a:24:d3:3c:e9:f3:ed:ad:
74:6d:cf:c4:a5:16:eb:1c:e0:24:63:37:a1:ab:cb:
2e:16:07:8a:f2:36:fe:66:8a:3c:31:ea:48:fc:f6:
1d:42:37:81:bd:1e:06:12:56:80:0f:97:ab:3d:3e:
7d:fc:8a:28:79:38:b5:f5:c7:72:e3:c1:76:6f:00:
ac:f4:64:ea:75:b9:0c:b3:f3:70:44:9a:e6:45:35:
36:b6:a0:e2:46:51:fe:b7:fe:12:84:3d:04:11:d5:
55:29:37:64:b4:c3:27:42:8e:da:61:8b:45:f3:1f:
dd:d1:be:8b:cd:5d:cd:db:86:87:d4:38:29:89:2b:
22:52:70:cc:7d:00:c3:9f:a9:3d:96:5d:b1:e9:86:
ee:80:2c:9b:50:af:22:b5:1d:d7:35:25:89:3a:3e:
05:66:8c:1f:c1:d0:57:83:f3:b4:95:de:b5:af:18:
1a:08:d3:f3:48:8a:bd:b0:91:8b:e3:2e:08:9f:dc:
e7:61:00:17:21:ce:9d:ac:d2:3f:12:94:fa:f3:fc:
2b:51:e9:31:15:f9:c3:46:2c:c8:57:18:25:6f:53:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:E1:90:26:26:9D:87:9E:B8:AA:23:05:DD:0D:18:A6:F1:8F:00
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/2DHhkCYmnYeeuKojBd0NGKbxjwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
63:39:00:7e:f1:a5:8e:4f:bd:d7:ec:de:90:15:c8:7c:38:70:
9e:9a:0a:b0:91:d8:b2:87:12:5a:b5:20:75:02:f9:9f:d1:07:
39:51:93:ff:20:07:91:be:a7:db:d9:25:49:76:10:93:85:ce:
18:60:73:ca:ae:4e:74:5e:80:f3:e9:6d:68:15:b0:02:88:68:
96:cb:25:31:c7:55:ad:ef:12:43:6e:03:7d:9f:69:59:51:2b:
19:a0:65:d5:f9:1f:7d:f6:b4:a2:e5:ba:7c:b0:ad:e1:5b:03:
e8:26:4e:7e:b7:42:2c:4f:e3:e2:67:c9:7b:df:22:3b:52:39:
9a:5b:94:29:93:70:af:95:bf:66:33:ac:5b:1c:f1:c8:99:c9:
3c:7a:f1:d5:f7:4e:78:05:91:22:df:97:f7:a7:7f:40:d5:f3:
aa:34:a1:7e:d4:38:58:34:04:77:09:c3:0c:bd:67:85:9b:9e:
36:3b:94:6a:32:96:cc:5d:8f:b0:72:1b:4e:65:6f:eb:bd:e0:
53:ba:66:a2:8a:ef:ce:67:87:f4:6e:c4:49:85:f8:11:d8:72:
e2:7b:cc:ee:89:64:7d:48:8a:69:ad:3e:8c:7b:5f:9f:aa:94:
01:90:1f:15:7d:6f:66:ac:8c:ec:8e:d0:b9:03:b2:32:1f:06:
50:2e:ea:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:43 2023 by rpki-client on console.sobornost.net