Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/9PNQQn1IulwVuhOWAzRkpZy1k50.roa
File: 9PNQQn1IulwVuhOWAzRkpZy1k50.roa (raw, json)
Hash identifier: gjmaCfQqZvr/E9LRLFvol1NMs4o97RbZZTgjoy/GCWQ=
Subject key identifier: F4:F3:50:42:7D:48:BA:5C:15:BA:13:96:03:34:64:A5:9C:B5:93:9D
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 06A7D374
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/9PNQQn1IulwVuhOWAzRkpZy1k50.roa
Signing time: Sat 01 Jan 2022 13:01:22 +0000
ROA not before: Sat 01 Jan 2022 13:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59455
IP address blocks: 185.98.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111661940 (0x6a7d374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Jan 1 13:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4f350427d48ba5c15ba1396033464a59cb5939d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:be:94:93:da:b3:e2:83:47:c6:9e:a4:28:44:
34:81:5c:60:90:81:07:4f:ec:ff:ca:9c:a5:c5:c0:
f4:6c:80:3f:36:64:79:75:d2:33:37:d9:55:16:25:
e2:19:b3:a7:18:87:9a:be:cd:5c:35:f3:f6:4c:f5:
62:59:8b:f1:eb:56:d3:2b:b5:66:6a:62:f9:a8:06:
83:cf:d3:8d:47:af:63:d5:60:50:53:77:58:87:33:
16:07:52:aa:1d:06:de:9c:6f:ac:d7:28:e4:d4:a1:
63:88:ec:06:be:5a:28:e9:2e:ac:27:8d:df:08:57:
4d:ba:de:09:3d:40:f2:08:9e:4d:18:82:ec:4a:b7:
81:29:05:bc:d7:40:c3:e9:29:ad:f9:8f:3b:e5:09:
80:7e:e5:ad:0c:4c:d2:74:1d:e9:66:77:de:c4:14:
f4:76:fd:2b:ac:0b:d2:9b:81:d4:11:78:a4:5e:81:
70:42:38:e2:3c:7f:bc:e8:65:12:86:4e:2d:43:ba:
0e:3c:bc:d9:73:7a:22:a0:a0:df:b0:ed:d6:05:c7:
ca:52:e4:41:1d:5b:8f:b6:03:4b:ea:8b:6b:ec:b6:
ed:3f:d5:03:18:98:49:df:92:c6:9f:24:a4:cd:bd:
5f:61:15:6e:50:0a:38:f6:c8:90:fc:df:38:6f:e2:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F3:50:42:7D:48:BA:5C:15:BA:13:96:03:34:64:A5:9C:B5:93:9D
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/9PNQQn1IulwVuhOWAzRkpZy1k50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:b7:46:af:71:e2:62:fc:1d:e2:23:16:1a:8f:3c:1c:f0:0b:
89:91:7f:ff:f7:5f:a7:4a:18:c6:01:e3:6a:67:cd:37:1e:43:
dd:23:fc:df:84:f3:53:2b:ce:d5:ae:7c:83:bf:65:a3:df:08:
d4:ee:be:47:a1:bd:c5:1c:84:26:87:6f:5a:67:46:c9:5c:a1:
99:07:6a:e9:1d:49:d4:05:6c:68:7e:81:f5:a2:ac:6a:65:fc:
7b:f9:08:36:c8:8b:ea:32:71:f8:62:8a:cf:f1:74:1c:13:b4:
3a:1b:52:75:da:bb:dc:06:0f:d5:f1:fa:cf:99:8a:33:89:dd:
6f:7f:f6:a9:ee:10:d0:4c:7a:25:14:78:ba:2d:a0:17:87:26:
28:f1:54:e7:92:cc:1e:75:93:a3:16:93:e1:89:d9:92:c7:b3:
6f:ae:ba:15:ad:88:86:74:02:7b:5c:be:5a:04:a6:ef:d4:e1:
d5:5f:99:01:60:f9:46:9e:b9:a9:b1:f2:f2:fd:7b:5d:92:96:
73:cc:73:77:a2:b0:0a:f0:a4:86:7b:b5:c3:93:92:e2:63:7c:
d3:cd:35:25:a9:74:d1:f8:ac:cb:f3:21:07:ca:eb:ae:df:bb:
33:dc:9d:85:f9:33:0c:5e:9b:49:df:5f:09:9b:81:36:71:6a:
5d:41:75:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net