Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/X7ZPUFCOv2HC0hvuPM2p8Yw9Zj4.roa
File: X7ZPUFCOv2HC0hvuPM2p8Yw9Zj4.roa (raw, json)
Hash identifier: PqCkB1Pw8gNBqL7R8y6yrDHdYyVSAKPjqhg+V8eSx44=
Subject key identifier: 5F:B6:4F:50:50:8E:BF:61:C2:D2:1B:EE:3C:CD:A9:F1:8C:3D:66:3E
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 05C87B6B
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/X7ZPUFCOv2HC0hvuPM2p8Yw9Zj4.roa
Signing time: Sat 01 Jan 2022 07:57:49 +0000
ROA not before: Sat 01 Jan 2022 07:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207425
IP address blocks: 193.105.121.0/24 maxlen: 27
193.105.96.0/24 maxlen: 24
193.105.102.0/24 maxlen: 27
193.105.117.0/24 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97024875 (0x5c87b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Jan 1 07:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fb64f50508ebf61c2d21bee3ccda9f18c3d663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:d6:98:c7:15:53:3b:69:41:52:63:79:38:
59:f3:d4:18:5a:59:83:4b:3b:91:65:8b:39:1b:9c:
60:ff:c9:4c:f0:d6:bf:90:53:20:46:94:14:43:93:
e3:4b:36:49:ba:6b:c4:29:07:b8:07:45:2d:ad:69:
94:d0:6a:ea:10:ae:bd:f5:52:ff:7a:9a:4e:3c:ee:
4e:92:8d:f8:eb:b0:f3:a8:71:ec:84:0a:30:1d:68:
43:5d:c3:ca:da:82:4a:2c:75:2d:1e:48:f2:2f:bc:
06:01:2b:71:ce:76:16:ea:97:3f:af:06:c1:35:97:
70:c9:05:dd:ab:42:a9:0c:73:42:d7:9c:75:3f:5b:
79:b6:96:c3:d7:82:e1:0b:be:26:84:85:f9:1e:e5:
01:a3:10:be:5d:83:2f:39:c2:a9:5c:62:52:6d:3a:
4a:81:3f:ec:7a:98:4b:30:f9:52:a7:70:8d:01:fe:
2c:ff:67:e9:ba:0e:ea:5e:95:4e:e2:f9:8f:1e:fd:
00:1a:d1:f5:eb:47:03:a4:cd:5d:4d:b0:aa:b9:bb:
19:14:eb:5b:c6:53:67:17:9f:34:bd:57:1f:a9:b1:
0a:71:30:98:be:98:36:77:f2:70:30:33:1d:d9:4b:
4b:70:4d:8e:f3:3f:0c:36:a7:53:72:ac:f3:03:ef:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B6:4F:50:50:8E:BF:61:C2:D2:1B:EE:3C:CD:A9:F1:8C:3D:66:3E
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/X7ZPUFCOv2HC0hvuPM2p8Yw9Zj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.96.0/24
193.105.102.0/24
193.105.117.0/24
193.105.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3e:18:e5:34:8b:f8:a6:96:b4:1e:9f:cc:66:70:70:6b:51:
f9:ab:f7:a7:a1:2e:be:36:c6:4d:ec:64:31:41:2e:ed:09:da:
c4:d1:bd:de:64:f2:8c:14:fb:e0:40:05:23:3b:78:84:2e:26:
ff:31:2e:8f:fe:6d:b7:61:e3:64:33:2f:ad:bb:c5:59:f5:14:
4f:60:51:54:a5:67:0a:64:4e:20:88:54:d2:6f:a1:3d:5d:62:
b7:c0:08:92:0b:a9:4c:3c:7b:0a:53:5f:42:63:c6:a7:2d:4b:
8a:39:af:4c:f8:e7:15:7f:7a:ee:3a:bc:03:c9:b6:cc:bf:3e:
42:aa:61:97:32:9c:c5:38:1f:14:44:5a:db:68:88:04:bb:9a:
0f:9a:40:91:8f:b8:b2:c9:1d:d1:0d:1d:0c:c3:0a:07:1d:88:
d9:58:b4:77:22:0e:91:0e:37:06:10:66:33:1c:90:dc:04:f0:
4c:6c:9f:ac:51:11:ee:e8:9e:34:d4:50:f4:bb:51:91:88:70:
35:0b:c9:ed:94:01:31:b3:97:9b:3e:4f:0e:a6:1d:e5:3b:40:
19:87:48:c1:cf:15:ca:1f:44:64:cb:90:89:ca:6e:45:dd:2e:
40:ac:ae:72:7e:62:43:f0:b1:ff:8a:ce:d0:a3:5b:f2:fc:16:
01:4a:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:45 2023 by rpki-client on console.sobornost.net