Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/KCXvuwu1t2DofY7yeUtT46YxWP4.roa
File: KCXvuwu1t2DofY7yeUtT46YxWP4.roa (raw, json)
Hash identifier: CUnKwJvZJZmpVS0rmO93R71z8ocXa2NGp28HShlvSNY=
Subject key identifier: 28:25:EF:BB:0B:B5:B7:60:E8:7D:8E:F2:79:4B:53:E3:A6:31:58:FE
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: ADE6ED
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/KCXvuwu1t2DofY7yeUtT46YxWP4.roa
Signing time: Sat 01 Jan 2022 12:01:16 +0000
ROA not before: Sat 01 Jan 2022 12:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60789
IP address blocks: 185.26.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11396845 (0xade6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jan 1 12:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2825efbb0bb5b760e87d8ef2794b53e3a63158fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:ef:4b:25:ca:9d:ba:b6:ab:6c:26:d7:1f:
15:73:cf:d9:53:45:4c:2d:d7:f2:69:5b:b9:a6:46:
83:94:7e:ae:c1:2e:60:18:39:a4:68:f7:ef:bf:41:
94:03:7b:40:81:c0:22:37:cf:fc:68:43:b8:34:2c:
54:eb:b4:7f:25:72:a1:75:34:cc:a7:11:08:b6:d6:
4f:5c:58:e8:c7:3d:cd:8c:c8:79:b9:c8:b4:3e:51:
fb:f7:7a:86:a5:eb:b7:d9:9e:30:19:dd:80:b0:f4:
f8:d7:d7:54:69:57:19:a5:37:2a:02:69:49:d5:8a:
9c:eb:a8:7f:d4:7a:c2:a3:05:95:3b:9a:71:db:45:
60:e5:bc:e0:db:53:a0:1a:25:30:9a:42:66:87:c2:
af:7b:99:dd:bc:e5:20:af:04:50:59:3e:91:cd:20:
ba:e9:82:76:43:c0:33:e7:83:2d:f6:a7:bd:bb:0e:
8c:e6:52:1d:79:26:98:f1:e5:cf:66:5d:2d:12:06:
00:da:44:1a:d8:63:31:8b:e6:ba:24:dd:d9:7d:3c:
04:e8:f4:f4:69:3e:36:6b:7e:eb:54:67:1f:63:8e:
4e:e2:75:92:be:e5:19:c1:67:9e:4d:8a:99:9e:a1:
d0:99:0e:63:57:76:45:0c:06:ea:53:cf:07:22:7a:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:25:EF:BB:0B:B5:B7:60:E8:7D:8E:F2:79:4B:53:E3:A6:31:58:FE
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/KCXvuwu1t2DofY7yeUtT46YxWP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:5e:81:2c:a8:9f:0c:c3:c2:d8:08:f4:de:24:66:32:7c:de:
80:84:28:67:6c:23:93:ae:d6:cc:2f:b6:cc:dc:7a:80:92:b1:
ec:16:a9:13:03:8c:a0:95:5c:bd:a7:9e:59:a1:3f:e7:15:92:
69:30:d3:9d:42:f9:fe:bc:33:b1:7b:9c:da:81:c7:23:ae:15:
c9:f0:05:4a:a7:3f:e6:98:d4:83:b5:e3:89:5e:5a:42:ad:01:
ec:7c:b0:37:be:47:6e:52:19:97:98:53:a1:d5:fb:14:26:5f:
e9:fd:86:e6:c2:1b:58:66:47:ba:3b:7e:0a:26:67:4a:1c:e5:
1f:3d:30:59:7c:8b:78:36:b7:75:a9:ff:93:9b:cc:01:aa:d3:
51:8d:b5:bd:c9:a2:4b:e2:59:e6:c9:af:ee:ea:71:ce:aa:2e:
a9:b1:a1:b0:30:47:81:1d:4e:33:3b:c0:c3:c4:4f:0a:69:ab:
f3:bf:12:45:df:ff:c8:9e:49:db:f3:2d:3c:24:b0:2b:7f:23:
62:8d:26:6b:ec:9b:b0:be:7c:b2:84:9a:dd:12:7d:77:2c:06:
bc:2f:ae:b7:17:50:4e:4d:bc:4c:b8:fd:e1:b4:eb:0e:8d:10:
c2:b9:00:34:4e:0a:08:95:02:d9:33:49:74:1c:81:8f:12:1a:
c3:26:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net