Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/Psc5btFNZc46rGPiakb7XQBPtTg.roa
File: Psc5btFNZc46rGPiakb7XQBPtTg.roa (raw, json)
Hash identifier: kv0MJNxc+zbiySubhuobn3FX4FApya7MkJBW0/0FDfU=
Subject key identifier: 3E:C7:39:6E:D1:4D:65:CE:3A:AC:63:E2:6A:46:FB:5D:00:4F:B5:38
Certificate issuer: /CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Certificate serial: 05D637E7
Authority key identifier: 64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/Psc5btFNZc46rGPiakb7XQBPtTg.roa
Signing time: Sat 01 Jan 2022 11:04:58 +0000
ROA not before: Sat 01 Jan 2022 11:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62433
IP address blocks: 91.228.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97925095 (0x5d637e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Validity
Not Before: Jan 1 11:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ec7396ed14d65ce3aac63e26a46fb5d004fb538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:3e:d4:cf:0e:54:94:28:a4:b9:1a:bd:92:
7b:23:94:4a:65:d6:63:e3:c4:59:54:47:70:20:7a:
8d:70:f0:a6:89:97:bd:ca:b1:a4:f8:02:25:ad:6c:
ac:46:dc:b4:c8:87:09:38:a0:84:e2:e4:38:42:c2:
1e:09:8b:bb:89:83:4b:90:d5:68:3b:2f:43:9a:ed:
0d:0c:07:32:7b:40:67:13:68:7b:c4:2b:73:8d:4c:
03:2c:17:c3:92:fc:ba:43:9e:5e:70:f3:be:6d:9f:
5d:e5:33:74:0e:c8:9d:c4:7c:e1:ba:05:44:46:d1:
4e:77:c7:07:04:8f:d1:5f:31:28:80:38:80:0e:36:
cd:1a:de:6f:54:74:f5:3a:3d:bb:1c:28:92:87:c3:
a0:1c:5d:a5:61:40:ef:c1:36:c0:08:3d:f4:18:2d:
bd:cf:9f:65:4b:13:6a:c9:d2:33:75:62:3c:5b:32:
6e:76:4d:04:f5:02:96:7c:55:c7:d7:3c:4f:e8:ec:
87:e7:9f:85:a3:56:b8:a1:9a:b8:05:6c:e7:f3:dd:
e2:45:79:a1:ed:c0:be:67:bb:17:9d:3b:3c:22:e6:
b5:bc:e3:96:ff:f6:27:a5:85:8c:c4:d6:67:3e:5d:
e1:85:0f:c0:eb:54:0e:12:8e:a8:3c:b0:28:6f:fe:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:39:6E:D1:4D:65:CE:3A:AC:63:E2:6A:46:FB:5D:00:4F:B5:38
X509v3 Authority Key Identifier:
keyid:64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/Psc5btFNZc46rGPiakb7XQBPtTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5b:55:6d:b3:73:27:45:f8:2e:82:38:61:bf:19:63:02:e8:
58:b5:34:ad:1c:ed:7d:86:ae:f9:af:ce:b9:f3:3d:32:45:e7:
d3:16:63:cd:52:5c:37:22:2d:df:0e:e7:0c:0a:e8:c3:9e:05:
1d:03:12:a5:27:08:83:9f:fe:ad:e2:10:b1:86:2b:d3:bb:81:
5b:4b:7f:c2:f0:ff:90:9a:63:f0:c9:46:5a:46:a2:b2:7f:e1:
82:82:a2:b2:aa:85:04:7a:f5:e7:eb:49:73:e5:b3:27:b2:be:
db:aa:c1:09:23:48:cf:5f:b3:bd:d3:15:0a:5c:71:14:6e:63:
80:56:d0:57:5f:8d:44:df:b3:14:f5:f9:a8:44:c6:cb:8b:24:
a3:b9:35:24:c8:93:1d:10:b8:41:6d:1a:85:d8:c0:f5:bf:67:
a5:a2:e7:19:ad:5c:41:ba:5e:a9:d9:ff:03:83:64:7a:c9:a2:
4e:8d:f9:af:4c:44:02:33:5e:e6:59:9a:e0:71:c6:9e:5b:71:
16:7f:46:d3:dc:fe:5b:ba:cc:50:f8:a2:03:f1:fd:3f:b0:0c:
ce:f0:66:7f:30:64:5e:59:05:ba:54:33:5f:0f:af:be:8e:3d:
0c:d9:a4:4f:87:3a:61:c1:1e:a8:cd:db:ed:d3:6d:5f:af:ff:
6e:82:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net