Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/OGPzRLy8yY3UrCvljbmuezvjazI.roa
File: OGPzRLy8yY3UrCvljbmuezvjazI.roa (raw, json)
Hash identifier: dquorONEKBjQqei+aH/K+sbb7q70sbYisupJomvpaUI=
Subject key identifier: 38:63:F3:44:BC:BC:C9:8D:D4:AC:2B:E5:8D:B9:AE:7B:3B:E3:6B:32
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 0621E796
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/OGPzRLy8yY3UrCvljbmuezvjazI.roa
Signing time: Sat 01 Jan 2022 01:55:32 +0000
ROA not before: Sat 01 Jan 2022 01:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43350
IP address blocks: 193.169.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102885270 (0x621e796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Jan 1 01:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3863f344bcbcc98dd4ac2be58db9ae7b3be36b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:c5:78:f6:97:30:2e:b8:27:8e:33:45:78:
be:76:8b:c1:a6:6f:f4:6b:37:89:61:15:5a:c9:ab:
57:82:ff:8b:79:63:9c:d3:24:8f:89:76:15:2f:1a:
bd:bc:84:01:3b:d7:07:b2:5c:b2:ca:3a:13:cd:34:
f0:65:d6:3a:51:bb:1f:d2:bb:88:6c:cc:c0:43:a2:
49:26:fd:28:e5:79:b1:14:14:2e:4c:78:dd:1b:6e:
d6:c2:3f:8d:c1:35:bd:f1:5e:bc:68:85:69:f6:a5:
96:f0:af:32:92:63:88:9e:2b:f7:c1:dc:10:bd:e2:
5a:84:58:e9:79:f5:99:53:64:1a:51:93:38:f9:fe:
6e:ad:5f:40:d4:6b:c1:a8:f9:b0:cf:28:2a:31:77:
97:f9:17:67:de:05:df:55:a4:d2:8b:57:26:9c:0d:
ef:56:8b:03:ca:a7:f2:f9:18:05:22:31:85:c1:ee:
04:f4:ba:a5:c7:14:80:4d:22:13:54:bf:85:f6:a6:
42:1c:b6:20:c1:88:e7:31:5f:47:4b:08:17:06:7f:
7f:a8:ab:93:bd:f7:90:fb:eb:59:81:45:71:67:97:
ad:61:d0:36:57:47:e3:fd:92:7f:7c:41:06:c4:7e:
60:48:d0:de:7f:b5:f6:a6:1e:e5:1c:c0:d6:a3:ab:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:F3:44:BC:BC:C9:8D:D4:AC:2B:E5:8D:B9:AE:7B:3B:E3:6B:32
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/OGPzRLy8yY3UrCvljbmuezvjazI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.133.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ac:bd:2d:a7:09:f1:49:8f:08:0b:31:05:dc:84:a7:51:ae:
f6:bb:9b:39:9c:9e:b7:ac:c7:d8:76:25:20:88:a5:e4:f5:eb:
09:00:ec:fe:e3:b1:5e:89:0d:a2:6f:61:01:6d:4c:16:2f:27:
1b:69:9b:73:42:ba:d7:d4:2d:e3:ea:69:3c:08:7d:28:ef:34:
9d:50:bf:57:f9:2b:98:83:f1:cc:f9:c9:d4:f6:7e:83:7e:1f:
f8:b2:23:23:75:27:50:51:dc:fd:93:eb:03:8d:2d:15:74:39:
6f:72:84:9f:e8:ad:1e:25:56:bb:1a:d5:9c:91:ec:11:aa:1c:
fc:e2:ed:4b:d1:97:54:80:80:ee:6e:99:99:11:32:46:e8:02:
e3:19:16:ee:2a:80:eb:ca:ff:d8:6d:cc:70:c2:8c:4f:a6:19:
78:b5:73:ab:ee:df:31:a1:70:4a:74:8c:81:a9:79:0f:9a:0e:
0f:ac:ab:c0:bf:66:4f:36:ab:41:7f:30:02:f0:4f:46:1f:66:
8b:ac:ac:cc:dc:3f:d8:19:77:01:63:a7:69:b4:d8:cd:97:10:
12:87:b2:2c:92:ec:db:0a:d3:3f:77:b4:1e:50:8e:ab:41:a7:
f5:fd:ec:f9:16:81:a5:81:06:9f:f5:27:ff:ef:d5:60:0f:16:
70:38:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:22 2023 by rpki-client on console.sobornost.net