Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/U46ASb29VDjGXk8C0Mx0vkmt7ZQ.roa
File: U46ASb29VDjGXk8C0Mx0vkmt7ZQ.roa (raw, json)
Hash identifier: cduTmtiKRjtv7IJU7dctP/JUmbd/H/9TeeqB+J5xoK4=
Subject key identifier: 53:8E:80:49:BD:BD:54:38:C6:5E:4F:02:D0:CC:74:BE:49:AD:ED:94
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 026B5999
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/U46ASb29VDjGXk8C0Mx0vkmt7ZQ.roa
Signing time: Sat 01 Jan 2022 13:59:07 +0000
ROA not before: Sat 01 Jan 2022 13:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31497
IP address blocks: 193.16.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40589721 (0x26b5999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jan 1 13:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=538e8049bdbd5438c65e4f02d0cc74be49aded94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:af:87:c5:a5:c9:dc:6c:4f:48:e6:e8:9b:
95:f9:52:d8:3f:cd:7b:71:0c:2d:ec:a1:ea:40:cb:
7f:08:66:7a:e0:55:93:9f:1e:6e:95:d8:d0:72:25:
cf:3d:7b:ea:d2:51:1c:3c:6f:f4:99:14:6e:1f:23:
a7:91:29:0b:71:3c:9b:a8:be:32:af:f0:9d:e2:86:
89:20:bc:73:33:48:f4:12:a0:c2:7a:7c:11:0f:ef:
33:e3:75:36:d9:90:f6:0b:92:cb:e8:7a:8a:8b:69:
1d:27:91:c0:61:7d:aa:53:c4:e5:f4:aa:a8:20:93:
10:56:c1:d7:05:8d:c3:dd:09:82:4d:cb:5b:d4:b6:
d5:9f:42:6a:08:0b:20:af:d5:c9:52:a8:40:0f:a5:
10:1a:40:3a:7f:e9:aa:a2:6c:ed:3f:5b:aa:1f:99:
4c:cd:e3:2f:c2:f3:41:0b:2c:3d:e6:77:d7:b9:c1:
d3:5d:71:11:e0:5b:79:58:9c:c4:0e:cb:b7:1a:d8:
67:41:76:d0:c1:3c:f7:c6:9d:78:a6:a3:a3:3e:c2:
fb:28:8d:15:db:c2:26:ed:e4:d1:4a:59:52:10:b0:
66:4f:08:a0:97:70:a2:fc:87:8b:f9:6a:f4:0e:9e:
6a:d4:20:00:1b:76:3f:a2:cc:a2:e1:8f:81:fd:7f:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:80:49:BD:BD:54:38:C6:5E:4F:02:D0:CC:74:BE:49:AD:ED:94
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/U46ASb29VDjGXk8C0Mx0vkmt7ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:5a:80:98:75:8e:86:a2:05:b9:27:4d:72:16:76:10:8c:
a5:65:98:33:dd:06:4b:d9:15:28:ca:03:dd:f7:6d:ee:48:dd:
af:e7:ba:e9:29:4a:ff:a9:6f:7d:6b:1f:ac:6b:97:b4:ae:e4:
29:2e:c0:19:02:84:c8:11:9a:8d:14:24:4e:d8:83:5e:2a:e5:
b9:3b:7c:a9:c4:3f:70:79:f7:51:a8:af:b0:a9:b1:8b:71:fb:
c1:aa:c0:2d:28:7e:9f:7f:63:61:52:86:5b:6a:e2:04:8c:7b:
a5:d2:65:92:da:c2:f9:d0:a2:cd:e0:79:e7:06:3f:b3:83:97:
d6:b7:e0:de:b7:25:4c:a2:5f:17:85:16:fb:03:20:29:ba:0e:
c8:ef:24:31:32:e0:80:3c:01:5d:4a:f7:56:54:74:d9:e1:e5:
e0:ac:d0:3b:b9:af:9f:e2:1a:66:2c:c6:36:f9:0e:3f:92:22:
44:9d:25:0d:83:e4:9c:e8:e6:ba:e2:2c:38:98:15:3a:92:86:
63:ad:b7:72:b8:a9:c8:eb:35:61:e3:99:63:90:cc:ce:4e:d0:
29:31:ac:24:0e:6f:ef:51:63:4c:d4:48:86:e9:48:69:7d:15:
ea:54:0c:02:26:25:7a:46:12:07:64:a3:ea:ea:ad:d7:5d:a2:
9e:9d:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:49 2023 by rpki-client on console.sobornost.net