Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/a5yb-vw8yK2oYGFvftGpq5qnU4E.roa
File: a5yb-vw8yK2oYGFvftGpq5qnU4E.roa (raw, json)
Hash identifier: NL5HNs3bTa+mGd0FLwu1Ec6uIvWLe2FIDiPBf5nHNtw=
Subject key identifier: 6B:9C:9B:FA:FC:3C:C8:AD:A8:60:61:6F:7E:D1:A9:AB:9A:A7:53:81
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 2D98064D
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/a5yb-vw8yK2oYGFvftGpq5qnU4E.roa
Signing time: Sat 01 Jan 2022 04:59:18 +0000
ROA not before: Sat 01 Jan 2022 04:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 193.103.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764937805 (0x2d98064d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 04:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b9c9bfafc3cc8ada860616f7ed1a9ab9aa75381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:21:54:73:d8:d2:4e:1e:d1:be:dc:dd:e9:
51:71:ac:35:3c:b2:63:47:7f:c5:dd:06:eb:e2:e7:
ef:a0:b4:6f:ee:88:1f:c4:42:b4:2a:f9:37:b7:c3:
4b:68:2c:b8:11:da:14:6d:1d:88:c6:3a:58:ef:10:
de:f0:57:ac:2c:08:3f:ee:9e:ae:fa:fc:11:76:d4:
75:62:69:c6:f8:09:4a:39:03:8e:c2:98:a0:8a:84:
a2:37:e5:7c:16:a9:3c:56:6d:59:4c:9d:a7:74:08:
a9:23:f7:5a:07:2e:d4:00:32:0b:eb:f2:83:9f:ab:
dc:23:ac:12:4e:19:4c:f5:36:cd:3c:b9:11:51:a6:
3e:42:be:f3:bc:a3:16:ab:4f:71:45:39:64:d8:35:
0b:22:bb:85:ea:a9:5c:bc:8b:f2:35:c2:bf:55:2b:
6b:bd:d7:40:84:dd:0e:bd:59:89:9b:0d:5c:d0:13:
fa:ac:84:eb:f0:bf:ee:53:fe:ec:8a:35:1f:f2:0c:
59:c9:7d:5e:87:ed:ba:85:4e:ed:4f:65:4f:db:03:
4d:f0:d9:e9:aa:d5:ac:b5:8c:0e:16:b4:4c:da:5b:
01:d9:a7:a4:34:ed:84:a7:4f:77:3a:94:76:03:5f:
01:af:a7:44:39:bf:14:9b:56:37:c0:f5:e6:d9:7e:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9C:9B:FA:FC:3C:C8:AD:A8:60:61:6F:7E:D1:A9:AB:9A:A7:53:81
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/a5yb-vw8yK2oYGFvftGpq5qnU4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.165.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e9:60:5a:cc:39:f4:74:4a:cf:4e:c8:01:31:33:28:2f:86:
02:90:79:75:90:a0:03:c6:01:02:a7:20:16:2e:ba:25:ee:5a:
14:c5:d7:f1:fb:8b:02:1d:fb:21:06:7b:2a:1d:6d:7a:ef:96:
16:c0:c7:15:cd:7a:3d:39:50:8e:26:1f:59:58:7e:59:d7:97:
c7:de:49:f7:4e:91:0d:6b:f6:a3:9d:62:6e:7a:69:4f:5b:00:
d9:f4:f2:c7:62:06:f0:31:3a:8f:0a:f0:b3:3b:61:06:49:c7:
4b:18:1c:c5:18:96:05:b4:81:33:06:ba:21:9f:43:08:4c:d0:
fc:e2:62:a7:c8:ee:ac:3d:6e:81:f9:6a:d4:70:aa:43:ee:b2:
6b:82:ad:13:76:0c:3e:ed:26:a8:0f:1e:12:f7:8c:a0:11:9e:
b0:78:64:7f:3d:d8:13:a8:1b:73:00:76:c9:51:1c:e0:49:b6:
81:ea:77:a6:01:c0:c3:dc:f0:83:45:e8:da:d6:44:4a:c4:a6:
9e:fd:a9:45:b1:e7:cc:23:dc:9a:89:10:cc:f7:23:a9:c5:77:
2b:be:7b:ce:6e:80:7e:2c:5c:1e:5d:6c:ea:20:bf:c9:f0:6e:
3f:fc:e0:08:d0:fd:b8:b6:2b:96:83:35:17:5b:71:19:95:8b:
0e:90:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net