Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/qs3tI-xIaAQzxw1Nk-h8GOIJ8GY.roa
File: qs3tI-xIaAQzxw1Nk-h8GOIJ8GY.roa (raw, json)
Hash identifier: g4xvP0zF9Pgabjoko9ELV3sCoTyBo4ENPgLsX7y71jM=
Subject key identifier: AA:CD:ED:23:EC:48:68:04:33:C7:0D:4D:93:E8:7C:18:E2:09:F0:66
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 0913D402
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/qs3tI-xIaAQzxw1Nk-h8GOIJ8GY.roa
Signing time: Sat 01 Jan 2022 03:54:57 +0000
ROA not before: Sat 01 Jan 2022 03:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201032
IP address blocks: 185.77.88.0/24 maxlen: 24
185.77.91.0/24 maxlen: 24
185.77.90.0/24 maxlen: 24
185.77.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152294402 (0x913d402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Jan 1 03:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aacded23ec48680433c70d4d93e87c18e209f066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:75:ce:32:18:9b:dd:9b:c1:2b:84:4b:e5:
92:b4:7e:50:61:8a:60:d2:2b:ac:dd:a4:4b:b6:6c:
31:76:8a:d1:d6:62:39:8f:b4:17:55:e6:36:3b:ad:
6d:2a:ee:99:76:45:4b:71:ba:0e:ab:60:22:3b:fe:
10:dd:e6:63:33:43:a2:47:4c:c5:17:97:ef:14:94:
70:81:45:d8:7b:41:28:37:7e:c8:f7:4d:97:18:52:
08:2e:15:ac:df:9e:37:dd:3d:52:dc:c7:1a:ee:1c:
9e:74:61:ae:6b:b5:2d:f5:6c:29:6e:78:6a:8e:ef:
7c:ab:bb:67:5c:a2:20:82:e7:5e:a9:e4:e5:e7:c9:
e0:08:2b:a7:15:a1:cb:c2:8d:e1:c4:30:a7:f3:9e:
61:50:bb:c0:36:77:b6:08:ce:cb:09:3d:71:31:40:
b2:91:b0:15:e8:34:9c:32:0b:23:3b:31:3f:90:61:
85:b5:fe:95:0a:17:d6:e0:f3:18:04:c8:ee:9f:fe:
78:54:62:c1:04:3d:b6:1f:82:51:73:1e:41:f8:71:
86:2c:aa:41:00:06:37:b8:ab:2a:70:00:ab:c9:86:
88:b5:7c:87:85:d7:fa:bb:0f:e5:66:c3:56:00:14:
86:96:d6:bc:c9:96:fa:f7:d4:5c:2c:a9:f5:67:f4:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:ED:23:EC:48:68:04:33:C7:0D:4D:93:E8:7C:18:E2:09:F0:66
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/qs3tI-xIaAQzxw1Nk-h8GOIJ8GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.88.0/22
Signature Algorithm: sha256WithRSAEncryption
18:1f:e1:6e:c0:60:0c:71:01:13:e5:b1:a7:24:fd:b2:92:bd:
79:8f:61:e7:49:c9:53:b8:ab:45:60:8b:52:1b:54:9c:16:c0:
47:d1:af:b2:bf:c8:7c:e7:08:9e:b5:6c:c9:8f:72:ec:14:62:
47:2a:9c:e5:62:30:f3:12:dd:4c:1f:67:94:d9:c1:0a:94:93:
19:52:29:87:02:ea:55:f7:7d:0b:26:32:8e:80:88:27:2a:8c:
e9:a3:05:4c:99:e7:b6:24:50:16:39:c0:e3:2e:c8:91:21:93:
85:6a:4e:d8:ab:54:0f:d5:7d:6b:f0:5f:94:31:38:cc:5e:b4:
a3:c3:fc:1a:46:50:f5:0c:85:99:29:1b:c0:6b:e8:37:96:c1:
23:24:8c:a3:ff:85:3c:86:70:83:e0:28:07:09:17:36:cb:82:
de:02:26:96:61:32:f8:f3:07:9e:47:12:8d:8c:5a:22:39:5a:
57:dd:8f:c5:ed:da:0c:57:64:49:29:35:9f:b8:3b:7e:8a:42:
04:52:8c:6a:88:c8:f7:1a:e5:f5:65:92:93:27:c1:d4:76:54:
8b:c1:a4:73:48:79:84:88:d1:47:36:95:9b:37:a4:a0:c1:47:
c4:9c:0c:85:0c:61:fd:16:62:4d:2b:28:3e:a5:03:58:68:83:
4e:bb:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:27 2023 by rpki-client on console.sobornost.net