Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/s4BahiieIDxV55FKcjL1czZr9G4.roa
File: s4BahiieIDxV55FKcjL1czZr9G4.roa (raw, json)
Hash identifier: Yxm8Svw8Tl441854oroz6Hv4CthLNtjE+lpggEhhzSw=
Subject key identifier: B3:80:5A:86:28:9E:20:3C:55:E7:91:4A:72:32:F5:73:36:6B:F4:6E
Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial: 05792901
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/s4BahiieIDxV55FKcjL1czZr9G4.roa
Signing time: Sat 01 Jan 2022 05:56:48 +0000
ROA not before: Sat 01 Jan 2022 05:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39661
IP address blocks: 194.50.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91826433 (0x5792901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Validity
Not Before: Jan 1 05:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3805a86289e203c55e7914a7232f573366bf46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:03:e7:c6:6c:3b:84:55:81:f5:25:bd:49:
c4:7f:e5:a1:5b:9e:8a:7a:3c:8f:7b:4c:1e:63:b8:
00:e1:c0:0f:1d:70:6b:1b:9f:45:5e:fd:99:6c:e6:
c8:ae:b5:f7:42:ef:4e:bc:9a:a7:17:eb:e3:d2:20:
76:be:c1:90:67:6c:2f:aa:50:53:db:ce:28:47:3e:
06:20:06:9f:4f:d2:92:a5:3b:05:57:f7:29:5a:0e:
17:69:07:7a:08:78:a2:34:77:54:60:76:34:40:6c:
61:23:98:7a:2e:56:be:4d:3e:c7:d0:b1:30:f9:d7:
5c:aa:18:8a:bb:8a:6b:16:07:ba:90:46:16:64:c9:
a9:f6:6f:95:c1:59:6f:c2:92:6a:54:43:35:e8:a4:
5a:f0:4d:b6:62:ff:3d:17:a0:8e:4e:0e:61:a9:b7:
3c:f1:5b:54:00:ff:d5:2c:39:47:98:b0:e1:17:39:
74:b2:52:44:c5:f2:20:47:35:6c:04:aa:22:ea:97:
8e:f0:b7:34:3b:70:c7:72:3d:36:8a:15:9b:44:d5:
6e:f8:68:c0:2f:1d:75:cf:a8:cb:0c:8b:86:fb:7c:
c6:2d:cf:d3:43:2b:ad:ab:3c:ec:ee:6c:45:fc:9a:
77:51:11:3c:da:c7:b1:54:d6:78:ed:f6:2c:45:5e:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:5A:86:28:9E:20:3C:55:E7:91:4A:72:32:F5:73:36:6B:F4:6E
X509v3 Authority Key Identifier:
keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/s4BahiieIDxV55FKcjL1czZr9G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.110.0/24
Signature Algorithm: sha256WithRSAEncryption
52:be:8a:89:94:35:18:ba:a6:1a:10:2a:a3:82:80:5c:79:a6:
df:f0:4e:70:80:94:f8:00:00:50:18:d9:2a:f8:4a:8a:a3:52:
11:78:b5:2c:92:19:cb:bd:0b:50:5c:e2:81:31:c4:b1:09:6f:
ac:e2:c9:d1:54:7e:80:e3:ce:6b:a6:bc:85:98:17:7a:9d:16:
50:f4:f4:cc:97:1b:a3:ac:b3:1f:ba:7c:ac:c7:93:3f:2e:77:
c1:55:37:70:f0:68:a8:2e:70:85:db:7b:e7:84:41:50:9e:70:
5f:35:83:3e:19:25:df:9e:9e:bb:23:f4:74:5a:55:32:9b:2b:
65:c6:99:91:ab:07:a1:1f:0a:64:e6:5e:48:8e:c3:73:44:8a:
fa:16:29:98:a9:d6:79:f7:09:20:4d:b6:ba:bc:c3:4e:32:33:
d8:27:77:2e:dc:62:9f:7e:0d:ac:b7:7d:d6:9a:69:86:bf:a0:
cc:ea:d7:e4:6a:af:7b:fb:be:4c:16:37:69:45:23:75:9b:20:
db:3a:db:0a:7f:bf:b4:c8:3d:d4:b3:db:97:89:a2:7a:8c:cd:
1b:21:11:e5:74:59:a5:f1:b8:42:5a:53:85:d8:5b:2f:8b:45:
ca:87:8e:94:cb:71:49:ff:25:b7:32:00:8a:99:26:2e:ee:63:
a4:6a:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net