Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/T9hWbF6BwkeZAI88qVXe6sn3gpY.roa
File: T9hWbF6BwkeZAI88qVXe6sn3gpY.roa (raw, json)
Hash identifier: E28a45/uW8vP20KlxRHiOj/D7fxpbqWY0aYRwmcgKWc=
Subject key identifier: 4F:D8:56:6C:5E:81:C2:47:99:00:8F:3C:A9:55:DE:EA:C9:F7:82:96
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 10EA8C8C
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/T9hWbF6BwkeZAI88qVXe6sn3gpY.roa
Signing time: Sat 01 Jan 2022 09:01:58 +0000
ROA not before: Sat 01 Jan 2022 09:01:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207050
IP address blocks: 213.162.222.0/24 maxlen: 24
213.162.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283806860 (0x10ea8c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 1 09:01:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fd8566c5e81c24799008f3ca955deeac9f78296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:fe:6d:0f:4c:dd:14:5c:a1:95:08:1f:b5:
7a:d8:07:e4:2f:8c:1a:ac:00:bd:ed:bd:30:4f:fa:
8d:54:61:fc:08:4e:72:b4:8f:4b:a6:9b:f5:41:41:
ad:eb:c8:02:71:47:81:7b:2c:95:b4:37:0f:87:e2:
ba:c2:61:6f:0a:3a:c0:8c:67:58:6a:4a:a1:54:ae:
79:ec:48:03:50:d7:d7:0d:1a:8b:8d:d2:5b:d4:6e:
cd:cc:0d:9c:f7:14:ac:f6:d1:9f:c6:fe:a7:c3:2b:
2e:eb:b8:87:3e:b2:4b:03:10:02:e7:22:80:8a:8b:
41:66:9f:2a:07:bc:b1:cb:44:50:1c:1f:3f:8f:27:
22:78:c4:25:b1:67:24:ff:d7:65:73:3d:de:d7:1e:
06:76:c4:7a:2a:55:19:92:19:67:67:b2:e1:26:80:
c5:05:4f:be:7e:e0:3d:42:da:46:e4:de:03:1d:a3:
e6:33:bd:36:71:79:1f:a6:9d:d4:c0:1f:9a:d4:b3:
a5:e5:75:1f:f6:f9:0b:cb:6c:5c:37:03:3c:af:fc:
1c:31:af:cd:e0:c6:d4:fe:b4:81:6a:bb:fc:2a:cf:
42:88:85:06:97:31:c4:c6:e9:73:c4:c8:15:84:3e:
46:87:25:4d:e9:7a:56:c3:0c:a4:0a:bb:df:4d:a3:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D8:56:6C:5E:81:C2:47:99:00:8F:3C:A9:55:DE:EA:C9:F7:82:96
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/T9hWbF6BwkeZAI88qVXe6sn3gpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.222.0/23
Signature Algorithm: sha256WithRSAEncryption
98:23:d5:69:ba:82:55:b3:dc:a0:fa:db:52:c0:d8:d3:c2:bd:
95:df:23:5f:84:99:c9:7a:d1:bd:72:a0:32:c1:75:33:40:76:
4a:a3:86:95:d0:87:01:e3:53:de:43:ad:10:84:00:d6:03:ca:
36:e2:02:48:59:08:8a:5e:df:7b:fd:8a:33:9f:70:98:82:79:
b2:7b:1d:fe:45:8d:89:3b:ed:69:3d:35:8e:68:c8:90:6f:90:
57:21:f1:e7:2e:a2:43:eb:5c:bc:39:e6:e1:96:3c:d2:91:ab:
9c:e9:0a:2c:67:03:4e:e0:3e:c8:b3:54:85:1e:c0:7b:85:b5:
19:0f:2e:e9:fd:cf:71:01:29:6f:cf:fc:f4:44:ec:5b:95:09:
63:e6:3c:fb:ac:c4:b2:e1:f6:be:ae:37:5f:bc:43:18:fa:59:
ad:ef:81:e0:5e:62:53:3a:fc:46:e9:ca:e5:1e:de:8f:2c:44:
e9:0b:82:aa:66:92:f0:93:97:27:c0:28:3c:32:a4:6d:6e:be:
73:61:61:25:83:23:61:e0:75:bd:51:b8:2d:1e:17:fb:a9:35:
f5:4b:f5:48:3f:bc:dd:f5:58:17:da:34:40:a1:18:49:b3:fc:
15:92:73:2a:ec:01:9b:17:2f:e5:d4:11:2c:5b:87:29:0b:85:
0d:23:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:35 2023 by rpki-client on console.sobornost.net