Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/m1kr_ysmdkObikZte__mhNgHYxI.roa
File: m1kr_ysmdkObikZte__mhNgHYxI.roa (raw, json)
Hash identifier: LTi11VvxeO7cLftNwXHslUyBd6mj7OSIPOBEqKvs+Zw=
Subject key identifier: 9B:59:2B:FF:2B:26:76:43:9B:8A:46:6D:7B:FF:E6:84:D8:07:63:12
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 01852EA0C41367351B70BAE72957C230A21B
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/m1kr_ysmdkObikZte__mhNgHYxI.roa
Signing time: Tue 20 Dec 2022 08:22:45 +0000
ROA not before: Tue 20 Dec 2022 08:22:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60722
IP address blocks: 92.255.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:a0:c4:13:67:35:1b:70:ba:e7:29:57:c2:30:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Dec 20 08:22:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b592bff2b2676439b8a466d7bffe684d8076312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e3:d0:05:0d:22:e0:17:34:32:23:38:66:42:
2c:49:50:20:88:c3:a2:72:d1:ab:20:90:33:0e:bf:
32:24:db:81:59:cc:49:48:72:eb:08:b9:77:1b:c6:
ad:29:0e:c8:3f:bc:ed:cc:14:e2:8d:34:ea:61:97:
3e:8d:d2:02:14:00:53:23:6b:45:39:61:a1:60:a5:
f4:ca:02:f7:1b:ef:32:bd:0d:45:45:ce:d4:56:0f:
24:f3:84:50:31:84:01:d9:79:a1:85:29:db:c2:d3:
34:95:25:66:54:e6:be:77:c1:eb:9d:2d:e4:4b:54:
65:e4:2e:46:2c:da:07:37:82:6e:14:0d:40:cc:28:
57:79:6c:f8:84:2c:5a:73:e1:6b:bc:f2:ea:a5:94:
a5:4d:99:7c:e9:b1:1d:e9:80:e4:62:a3:50:e5:11:
d6:92:90:ad:a4:1b:c1:0f:c4:d0:4d:d5:5e:5b:cf:
8b:ae:4d:b8:49:f2:85:05:53:c2:52:ca:b8:c0:f3:
2b:3c:ed:2e:ae:f8:4a:76:98:66:a3:fb:f1:8b:a2:
af:ed:68:96:3d:66:10:c2:54:23:47:e4:c6:28:d1:
9d:2f:e2:75:3a:c7:7e:3e:c0:51:f1:9f:4e:b1:26:
85:28:13:bb:af:93:94:66:0a:9e:52:25:65:c7:51:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:2B:FF:2B:26:76:43:9B:8A:46:6D:7B:FF:E6:84:D8:07:63:12
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/m1kr_ysmdkObikZte__mhNgHYxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.65.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:82:53:4d:d7:8b:c1:46:0e:98:63:6c:e4:df:a4:de:21:77:
8d:35:3d:7d:78:7f:62:ad:44:a3:71:27:12:fb:f3:2b:3a:6b:
91:04:4a:f7:17:4e:7d:d6:55:7a:23:e4:62:8c:c9:bd:e6:43:
a8:df:65:ea:a5:39:01:24:5e:80:f6:4f:f0:bb:86:9a:cd:b4:
bd:1f:d4:76:7c:09:fe:8d:17:34:16:05:0b:1f:e1:45:8a:84:
0c:2c:47:1e:a9:db:c5:14:af:4b:1c:e9:90:a2:93:ca:da:8d:
4c:09:62:6d:b8:02:80:eb:d0:ac:79:cf:88:b8:d4:ca:76:0e:
28:17:4e:dd:ed:f3:42:e6:10:b4:07:76:40:c9:9a:35:46:2c:
02:50:e2:39:72:9a:28:c1:24:37:16:67:9e:17:2d:a6:c1:77:
cd:e0:fe:52:87:cc:b7:48:af:23:36:f2:3f:ac:21:19:b9:0d:
4a:5d:d1:31:3f:87:27:61:40:6c:7b:05:01:cc:f3:50:01:65:
49:aa:93:f6:33:53:f6:a7:9c:99:26:a2:af:2f:86:59:01:16:
e9:25:15:d5:6c:3e:68:db:91:cf:dc:31:6c:61:f6:ad:73:0e:
16:54:cc:f4:08:b5:06:1f:e3:b5:82:48:17:41:29:ab:f4:92:
fc:da:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:46 2023 by rpki-client on console.sobornost.net