Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/gfeJD_gvYPORkIFfdLDktqP77rM.roa
File: gfeJD_gvYPORkIFfdLDktqP77rM.roa (raw, json)
Hash identifier: xdz/yq0soTyqFCQpa8aJzZxmABoNjCAKnt1JQStYIc8=
Subject key identifier: 81:F7:89:0F:F8:2F:60:F3:91:90:81:5F:74:B0:E4:B6:A3:FB:EE:B3
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 10E914EC
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/gfeJD_gvYPORkIFfdLDktqP77rM.roa
Signing time: Sat 01 Jan 2022 09:01:58 +0000
ROA not before: Sat 01 Jan 2022 09:01:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200064
IP address blocks: 185.111.186.0/24 maxlen: 24
185.111.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283710700 (0x10e914ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 1 09:01:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81f7890ff82f60f39190815f74b0e4b6a3fbeeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:3a:f1:57:c6:a2:8c:41:49:6f:c5:5f:a1:
46:3e:78:67:09:79:4f:36:db:88:58:d2:e9:09:c2:
24:8c:b1:5f:74:ba:8a:ed:3e:0a:5b:3b:03:84:3a:
02:89:ce:71:ff:de:d4:3f:6f:1c:1b:21:16:66:ee:
fc:47:c5:1c:4c:9a:bd:4f:fa:d4:c7:81:94:39:fc:
00:b1:83:dc:eb:54:81:64:9e:7a:17:2a:60:23:3e:
0c:d2:9e:e0:f3:8d:86:d9:bb:b2:b0:e0:bf:d2:c2:
1a:db:85:8e:a9:41:45:cc:55:ad:0e:db:85:3f:a3:
de:cd:36:5d:92:4f:52:c4:1d:b9:f1:37:14:3b:6b:
3d:77:c8:e6:e0:d1:8f:bd:ef:48:37:c9:9f:1c:39:
d1:90:3e:bd:1b:1b:cc:00:27:fb:a8:fb:ba:c1:99:
0c:83:15:7e:60:cc:95:a1:d6:21:73:c8:7c:5a:71:
2c:ac:09:7f:5e:3d:05:3f:de:df:0e:3a:67:8f:80:
83:4a:07:bf:9e:2b:80:bf:34:65:10:1d:8d:28:3f:
54:cb:67:c1:0d:9b:d3:51:6a:0f:f7:e9:d6:4c:86:
6a:27:c7:73:17:ef:70:bc:8a:cc:b7:de:db:c5:17:
d1:e7:01:d8:47:52:bd:95:16:42:2e:96:34:44:da:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:89:0F:F8:2F:60:F3:91:90:81:5F:74:B0:E4:B6:A3:FB:EE:B3
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/gfeJD_gvYPORkIFfdLDktqP77rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.186.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:b5:43:6f:71:02:2a:aa:b3:78:9c:21:74:d7:30:74:3a:44:
ac:30:c0:ff:75:9f:fd:87:0e:57:bb:11:36:83:ec:67:10:23:
e2:d7:fd:4a:6a:37:68:27:4f:39:4f:19:ed:9c:81:29:27:b8:
e0:7e:b0:ae:ad:a3:bd:ad:30:16:98:18:16:df:cb:c2:14:de:
8a:2a:ae:22:82:74:b8:01:fb:91:20:51:1b:bb:5f:90:c1:f3:
40:2e:d4:37:bd:5b:0c:d7:c4:a8:9a:eb:57:ad:fb:1d:73:61:
51:1e:87:1d:15:91:c0:14:fc:ad:d4:36:2b:59:82:41:20:2e:
21:44:45:00:c9:24:93:f3:3a:87:2d:36:73:cf:55:f2:f1:11:
df:34:b3:b7:8e:4e:6c:b0:a4:7b:ba:34:a1:32:26:35:5a:97:
be:c5:9f:a8:1b:f5:b0:08:69:59:1b:25:9b:c6:fc:22:fd:2d:
c6:05:a9:c4:34:ef:39:80:ae:db:a3:1b:3f:a4:f8:11:5c:18:
6c:84:ec:43:a0:e0:4b:59:38:63:c5:d8:62:85:d0:fc:b6:b2:
35:3e:c8:fc:00:aa:b1:a1:42:78:58:8a:87:c1:66:49:93:26:
26:b2:92:94:b4:69:44:d4:c2:56:56:59:be:1d:e3:97:b5:85:
c4:75:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:35 2023 by rpki-client on console.sobornost.net