Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j4imnP5a5m0z1t5SLsfRdUgrJXc.roa
File: j4imnP5a5m0z1t5SLsfRdUgrJXc.roa (raw, json)
Hash identifier: kttpK0TMcPDyIRdkJrepQYdchz9IhgbVT0/RZR26+5o=
Subject key identifier: 8F:88:A6:9C:FE:5A:E6:6D:33:D6:DE:52:2E:C7:D1:75:48:2B:25:77
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 020657
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j4imnP5a5m0z1t5SLsfRdUgrJXc.roa
Signing time: Sun 26 Jun 2022 07:51:21 +0000
ROA not before: Sun 26 Jun 2022 07:51:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60901
IP address blocks: 185.241.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132695 (0x20657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jun 26 07:51:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f88a69cfe5ae66d33d6de522ec7d175482b2577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:a9:e6:2b:20:7f:ff:7a:77:a4:5a:85:a0:
ea:b9:ed:98:e9:1d:e2:c5:93:94:d5:94:de:54:80:
6a:5e:a0:ae:5f:09:d2:22:ca:9d:78:28:ce:52:ec:
80:d6:5b:12:ac:30:ec:49:e8:bb:9e:52:0b:2e:8b:
5d:20:e9:4b:00:9b:88:bf:35:af:f1:b6:f9:28:ff:
98:57:c9:f0:73:ff:5c:c8:ed:06:01:03:5a:ce:12:
df:e1:be:f8:46:68:f2:95:94:80:03:84:a5:7a:a1:
bc:f2:53:ed:f9:e5:14:57:7c:1e:1a:21:f5:2b:db:
58:f8:63:bf:59:28:8c:45:a3:1d:24:1d:b7:55:80:
3f:0f:db:ae:dc:b6:3e:8b:8e:51:72:68:6d:2c:9f:
3f:33:e5:08:00:16:08:e3:c5:4c:6d:cd:fe:f7:5f:
59:9e:09:4f:29:c2:50:09:bb:80:12:49:ab:31:b1:
24:12:cf:7a:2f:f3:e8:13:b5:55:a2:c9:6a:38:f2:
c1:57:ab:56:54:8c:89:09:d5:48:7f:ce:c0:5c:39:
e5:6a:12:d6:67:8b:8e:84:9a:ef:58:ff:ef:0e:97:
21:ef:bb:8f:2c:07:3f:3d:4c:7c:17:f9:3b:ca:2a:
65:67:f3:58:e0:6a:9c:8c:84:3b:aa:4c:c0:41:93:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:88:A6:9C:FE:5A:E6:6D:33:D6:DE:52:2E:C7:D1:75:48:2B:25:77
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j4imnP5a5m0z1t5SLsfRdUgrJXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.87.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a3:cb:d1:2c:d6:92:b3:6e:4e:7d:65:37:bd:a4:56:75:03:
1e:91:1e:73:38:d1:89:6e:d8:da:5c:99:7e:70:88:20:b4:4b:
c3:a1:23:68:f7:f6:cf:13:53:b3:b0:64:cf:78:52:a8:12:b2:
fc:71:7c:64:79:16:ab:6c:c6:a9:53:40:e1:b5:01:c5:4d:69:
6a:34:e0:81:3b:d1:3a:7e:3d:84:03:7f:df:f4:d6:f3:d0:fc:
4f:53:21:a9:c3:24:8a:01:ba:44:1f:b3:92:c5:2f:c4:c0:5e:
01:7a:59:6a:ac:7d:09:3d:5d:52:89:61:bf:3c:7f:be:65:5a:
3d:ff:e1:a0:a1:30:a1:bd:62:0c:ec:0a:23:b7:a6:19:ef:ca:
d1:3f:ee:aa:c7:e6:87:84:3b:9c:01:85:f8:b9:04:e2:bf:2e:
09:ef:f1:88:93:6b:da:9b:85:52:21:2d:fe:07:3a:dd:13:c5:
bf:25:01:9a:13:08:1f:f9:3b:30:c1:d5:68:22:fe:9f:d7:5b:
b6:62:07:33:94:21:21:92:b7:7a:d2:b0:93:83:56:45:d8:5d:
5d:3b:be:08:de:80:4a:bd:fa:7b:35:30:ff:79:e9:9e:fd:d7:
1e:ac:ea:f6:97:d9:f8:a7:20:a4:f3:f8:28:4e:af:d9:16:02:
8a:ba:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net