Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/8hmA9NyaYzP5_fMadkPKFhrIVZc.roa
File: 8hmA9NyaYzP5_fMadkPKFhrIVZc.roa (raw, json)
Hash identifier: s7VGfBK6NDUTRbGKu9zKC35xD9NMoZLG06vSh0CkKnI=
Subject key identifier: F2:19:80:F4:DC:9A:63:33:F9:FD:F3:1A:76:43:CA:16:1A:C8:55:97
Certificate issuer: /CN=2e39d330a5f04067eff9173473d67088abe9196f
Certificate serial: 0182EF35E3ADC61A459E9D28D87D87F6047A
Authority key identifier: 2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/8hmA9NyaYzP5_fMadkPKFhrIVZc.roa
Signing time: Tue 30 Aug 2022 14:44:22 +0000
ROA not before: Tue 30 Aug 2022 14:44:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29205
IP address blocks: 193.135.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:35:e3:ad:c6:1a:45:9e:9d:28:d8:7d:87:f6:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e39d330a5f04067eff9173473d67088abe9196f
Validity
Not Before: Aug 30 14:44:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f21980f4dc9a6333f9fdf31a7643ca161ac85597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:ac:d6:db:89:36:d0:f4:a6:e7:d7:c7:3e:
54:29:7f:f5:bd:85:32:22:9b:3b:40:c4:a5:6f:1a:
65:c6:cc:84:bf:2d:08:7f:20:0a:0c:08:77:d4:89:
8d:82:f2:24:0e:87:c1:5d:ee:f6:ec:4b:83:00:56:
4f:e4:ac:29:0a:a4:a9:ad:77:4a:7a:f9:5b:4d:94:
25:7e:cc:ad:eb:f6:c7:76:81:5f:ad:74:b6:e7:36:
74:d2:e3:35:60:d9:42:93:20:e1:30:e2:3f:ae:0e:
33:e5:71:38:f5:c9:ed:15:70:e8:78:20:b3:de:f2:
67:06:d9:75:d1:a3:8c:ad:9d:1b:16:08:ed:12:de:
39:b5:a5:3c:00:eb:66:25:15:18:b6:71:65:77:95:
47:46:e2:a9:50:e6:bc:7f:dc:87:26:5b:0a:57:27:
47:fd:7e:dc:de:ab:22:f3:b2:e9:ba:24:e6:11:aa:
d1:be:c1:cb:c5:66:01:43:05:07:a3:20:7c:03:9d:
49:71:13:fc:c5:a8:ae:8a:25:c6:a4:0b:e9:9b:65:
a5:f9:7d:87:88:24:54:86:6c:9e:5a:7a:3f:14:04:
5e:95:ae:43:77:08:1d:0b:8e:28:86:ce:a0:83:09:
66:f5:d1:c6:30:06:a5:c9:b3:38:2b:97:c0:70:83:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:19:80:F4:DC:9A:63:33:F9:FD:F3:1A:76:43:CA:16:1A:C8:55:97
X509v3 Authority Key Identifier:
keyid:2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/8hmA9NyaYzP5_fMadkPKFhrIVZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:19:89:29:d3:b5:a7:28:d9:79:08:d8:bb:f9:04:28:55:36:
ce:50:2c:43:c2:f3:9b:3e:c6:7e:a6:65:1f:9d:8b:d6:56:2e:
87:77:58:c8:f8:54:13:20:1b:bf:01:b2:b5:0d:b6:7a:59:d4:
68:57:9e:db:34:2e:77:ae:ad:ac:d5:a2:40:b2:d9:6d:ec:c6:
14:df:71:d7:77:3c:b2:8e:53:14:1e:b2:ac:be:86:13:73:c1:
5a:97:f8:93:d0:20:01:29:41:ff:b7:bc:84:d1:75:25:9e:d2:
0c:46:d2:95:c3:c6:16:c1:fb:6f:3f:cf:f4:ee:b3:4b:d3:99:
4a:74:e5:93:6a:fd:54:9b:71:7f:b5:1f:d3:72:9f:c1:b9:5d:
43:7a:b1:21:18:8f:3b:55:b9:f9:3f:57:b6:d7:93:5e:3f:15:
66:5b:a1:ef:31:64:40:28:de:b1:9b:ac:a8:7f:be:4a:8e:0b:
29:29:ca:7e:dc:6e:55:df:99:bd:9d:f4:1e:4c:e0:29:ce:86:
b0:39:33:c2:76:8a:5b:24:0f:e6:22:05:37:f5:d2:67:96:74:
6f:d6:fa:2f:a3:0a:ca:44:66:49:8b:eb:d5:75:d1:81:27:09:
fb:18:58:35:02:40:2b:82:ee:b2:86:e8:f2:f4:f4:50:ad:dd:
b6:4f:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net