Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/GnN1BbFbYRfM8AVgJraOOTLUijw.roa
File: GnN1BbFbYRfM8AVgJraOOTLUijw.roa (raw, json)
Hash identifier: hwfC451lQWaxHIFlMt6towE6Bx2aERZUzYp6bgcxINA=
Subject key identifier: 1A:73:75:05:B1:5B:61:17:CC:F0:05:60:26:B6:8E:39:32:D4:8A:3C
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 0729E03A
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/GnN1BbFbYRfM8AVgJraOOTLUijw.roa
Signing time: Sat 01 Jan 2022 03:56:21 +0000
ROA not before: Sat 01 Jan 2022 03:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44858
IP address blocks: 193.105.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120184890 (0x729e03a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Jan 1 03:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a737505b15b6117ccf0056026b68e3932d48a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:02:33:70:a6:f5:f3:5e:4b:6f:1e:92:79:
8b:5e:2d:e4:df:b3:d1:e1:b0:29:d8:17:f1:0c:28:
8e:67:8a:c7:fd:63:db:88:17:1a:26:28:11:8c:4d:
c6:bc:24:b1:16:ea:1d:9e:15:69:33:77:f2:4f:30:
06:cc:a7:e2:a5:85:e0:5f:26:34:e1:5c:7a:1d:10:
f8:e9:40:47:9b:0c:8b:83:13:73:4b:45:b4:7b:65:
97:c1:ae:88:5c:8a:83:2a:5f:15:75:dc:73:58:6e:
0e:9c:62:05:14:57:19:22:a2:05:0f:97:6b:db:7f:
ee:a2:00:7a:8b:cf:20:a6:b9:12:dd:b5:70:53:de:
c2:73:3b:83:7c:b3:ea:ed:36:51:23:78:f8:a9:07:
aa:f2:3c:4f:3a:6f:35:b0:d8:7d:68:36:45:a1:e5:
d9:68:67:37:6a:4b:2a:84:ac:67:32:fb:d6:8c:4b:
da:12:6a:9f:fb:50:ae:8c:f3:6f:5f:f4:59:6c:16:
66:35:08:d5:8c:a2:11:44:9b:b5:f6:89:10:9d:c8:
29:d0:4e:92:44:aa:8d:29:2a:2b:d2:e4:8e:22:b7:
0f:b8:a0:df:eb:27:af:bb:2c:be:2b:c0:5d:20:f7:
82:cb:9a:ba:34:99:0c:8f:53:c0:4a:b8:f6:6d:bf:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:73:75:05:B1:5B:61:17:CC:F0:05:60:26:B6:8E:39:32:D4:8A:3C
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/GnN1BbFbYRfM8AVgJraOOTLUijw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e2:fd:0f:d1:87:bb:ca:a0:a2:01:4d:37:3e:e0:5a:e2:47:
dc:16:67:a1:2b:76:e0:40:d2:de:d1:6a:b8:98:f5:b9:0e:e8:
57:bd:07:66:9d:9f:00:77:fc:27:4c:84:54:5a:db:93:4b:6a:
a4:72:43:27:17:a7:14:9d:ac:52:9e:6d:75:c4:c9:31:71:b9:
dc:28:3f:5c:5f:15:41:f7:bd:bb:6d:3c:9e:dd:1d:a7:31:0d:
bc:1d:07:b1:9c:be:a6:14:e1:58:b2:98:22:99:6b:1a:6a:aa:
d0:9d:f7:2b:32:b1:4c:ce:2a:8b:a0:c6:99:cf:7c:dc:e0:1e:
6d:2b:65:17:50:6d:cf:1c:0a:28:12:f3:89:03:01:2c:44:8d:
bb:15:48:d1:0a:8e:8f:21:c5:3c:65:2c:89:f7:e4:f8:e8:6a:
1a:6a:25:00:67:dd:ac:ef:48:20:e5:11:f3:52:07:9e:29:fa:
d1:0b:c1:f6:31:ce:1c:fb:5a:4c:b6:df:96:8b:cd:d0:04:c3:
ee:b4:36:99:fc:27:cc:88:9c:60:83:4f:a3:e7:b7:17:25:ca:
1d:c9:c0:e6:b7:a7:6a:d5:49:2a:8f:3c:97:79:5d:ae:1b:92:
5f:10:5e:54:46:d7:e3:ac:f9:07:19:4b:88:d8:6b:e0:57:f4:
4c:77:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net