Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/n7bjkdaHwd7kOQdb_huL-xCMawo.roa
File: n7bjkdaHwd7kOQdb_huL-xCMawo.roa (raw, json)
Hash identifier: 4nQIa2Z4MC/yHvQ88YG3Z7pnMpXjn3nOHnVX9RG4dwI=
Subject key identifier: 9F:B6:E3:91:D6:87:C1:DE:E4:39:07:5B:FE:1B:8B:FB:10:8C:6B:0A
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 09FCC4FC
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/n7bjkdaHwd7kOQdb_huL-xCMawo.roa
Signing time: Sat 01 Jan 2022 11:01:15 +0000
ROA not before: Sat 01 Jan 2022 11:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1449
IP address blocks: 185.97.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167560444 (0x9fcc4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Jan 1 11:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fb6e391d687c1dee439075bfe1b8bfb108c6b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:a0:4a:5c:66:e1:bc:fc:63:24:41:d6:91:
1a:da:87:8f:5a:bb:55:f6:12:50:25:a4:78:e0:cd:
c7:88:d7:b4:b4:d9:aa:7b:30:df:0c:20:e5:58:39:
7f:79:96:aa:b4:49:d7:b3:67:50:9f:04:45:b8:73:
0e:82:c1:df:a9:bb:e3:14:a7:28:b0:08:87:31:d5:
3a:54:8d:94:37:9c:ce:15:5f:ba:d6:df:cd:c6:88:
ea:78:cf:e1:ca:99:74:65:43:02:2e:62:03:88:0c:
12:2c:73:3b:35:67:ed:12:4b:1d:28:7a:78:54:08:
be:92:50:5b:c7:83:c8:a6:2c:12:1e:97:a7:55:e9:
5b:df:49:3d:91:50:10:ec:86:ac:76:80:33:e8:33:
70:03:70:86:6d:9e:a8:30:4c:f9:61:c7:6d:f0:d2:
09:c3:8b:05:2e:09:5b:9a:29:0a:86:de:dd:cc:d4:
06:09:ba:1b:e9:5b:9c:1d:2e:71:79:3f:7a:6f:11:
fa:fe:3d:2a:85:35:e2:f6:ae:3f:e0:ae:4a:79:3b:
a1:f8:c4:de:a5:b4:b8:bb:f3:37:c8:20:24:5b:ed:
28:58:8f:b7:51:bb:e1:05:95:8e:85:b9:97:dd:4c:
61:11:35:94:27:75:ee:c5:87:59:bd:5e:66:d6:a2:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B6:E3:91:D6:87:C1:DE:E4:39:07:5B:FE:1B:8B:FB:10:8C:6B:0A
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/n7bjkdaHwd7kOQdb_huL-xCMawo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:cd:99:85:37:c2:71:82:26:24:81:91:95:b7:5d:9d:0a:d3:
d3:95:7c:20:f8:94:5d:bd:b2:57:a8:62:52:f1:89:5e:54:df:
f7:40:30:f3:ca:37:b8:bc:0c:6d:f1:70:b2:e6:d9:bf:e5:c9:
dd:ae:6b:8b:97:e8:6f:2d:a6:6b:b3:31:49:7d:1d:af:5e:7a:
56:8c:c9:ba:4a:24:60:5e:39:5c:7e:b7:de:ff:0a:a9:88:bc:
1c:20:54:ee:5b:7d:15:93:60:a5:02:bd:e3:7d:dc:aa:90:e1:
f3:32:e8:91:71:03:37:67:d0:ee:1d:9c:32:19:8b:d4:7a:39:
9f:27:e2:93:5d:af:7e:06:f8:0d:e0:65:bd:84:28:85:f7:0a:
db:02:a0:3d:fb:4c:dd:ab:a2:0e:50:7b:e4:e2:8a:95:a4:8f:
34:b1:cf:73:ae:67:e6:9b:ef:52:07:c1:39:dc:32:95:0a:94:
1f:ca:cf:68:a4:b5:ea:ba:6a:53:90:83:4e:96:5e:49:3b:14:
06:94:9a:28:6d:29:b7:fb:2d:6d:c1:d1:e5:47:db:24:59:d7:
e1:e5:ef:33:e6:fd:cd:79:33:43:0d:80:ba:ba:26:58:10:5f:
6a:a4:63:47:cc:ae:e3:3a:fc:f8:83:8b:1c:3f:13:f7:3f:79:
b6:cb:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net