Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/jtuBDee7z0lH1bxfqb1E4CwHzj8.roa
File: jtuBDee7z0lH1bxfqb1E4CwHzj8.roa (raw, json)
Hash identifier: YkmWSzWSZDwayFSYuOwubr0tGxxGGflMMxm/EU0DfYY=
Subject key identifier: 8E:DB:81:0D:E7:BB:CF:49:47:D5:BC:5F:A9:BD:44:E0:2C:07:CE:3F
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 18AB8E23
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/jtuBDee7z0lH1bxfqb1E4CwHzj8.roa
Signing time: Sat 01 Jan 2022 15:07:13 +0000
ROA not before: Sat 01 Jan 2022 15:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204838
IP address blocks: 185.108.38.0/24 maxlen: 24
185.108.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413896227 (0x18ab8e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 1 15:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8edb810de7bbcf4947d5bc5fa9bd44e02c07ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:c4:d4:a0:9c:7f:97:cc:3f:2b:03:7a:db:
d0:6d:c8:90:f8:47:8e:5b:f4:f6:96:90:e3:0c:9f:
98:5b:56:95:ab:ad:a7:5a:a3:38:e1:2d:b3:ea:df:
17:10:6b:0b:fd:f2:58:0f:f0:df:c3:d6:7b:5b:45:
17:f6:2a:e3:fe:48:2e:ff:3a:b2:a6:08:66:e5:97:
f0:12:78:8a:a4:11:c4:ef:7f:dd:4e:89:42:46:a5:
a3:3d:1d:dd:35:04:a4:71:ac:6b:12:6e:40:98:21:
20:10:e8:6c:4a:4e:8b:1a:ac:9b:79:af:14:e7:95:
65:79:b6:ee:a3:30:19:bd:b1:22:75:41:0b:4a:52:
a3:79:7a:fe:84:02:16:f1:a1:1f:89:69:86:d7:b6:
b3:68:98:fe:5c:d0:da:f3:ba:a6:c4:fd:d2:49:54:
07:5c:b9:8e:65:22:71:3c:c8:fd:37:9e:32:56:fa:
e2:3b:ae:70:cc:89:2b:24:ce:6c:8d:c8:c6:06:b8:
0a:09:58:d2:f7:12:ce:0e:b2:c4:8a:b5:50:b1:ff:
01:bc:c8:07:55:53:ac:bf:c5:13:fc:dc:8f:57:a8:
43:c5:c9:d1:26:77:15:36:d8:00:5f:2d:df:d8:91:
0d:ca:78:a8:84:63:d1:62:ee:96:11:ca:cf:94:ae:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DB:81:0D:E7:BB:CF:49:47:D5:BC:5F:A9:BD:44:E0:2C:07:CE:3F
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/jtuBDee7z0lH1bxfqb1E4CwHzj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.38.0/23
Signature Algorithm: sha256WithRSAEncryption
44:de:41:56:82:6d:41:f2:6f:c8:35:72:09:df:7c:a0:be:b1:
74:cb:65:c8:b6:33:60:88:53:a7:d2:49:ee:ad:99:ca:1e:0c:
a4:01:b9:92:79:58:8e:d7:53:36:6b:33:e8:5a:0f:dc:04:4b:
d9:69:ca:d9:ab:c9:9d:e0:04:d2:1d:7d:d7:45:f2:32:a8:6c:
61:a7:7e:a9:fb:fc:a4:fa:af:c4:57:5e:3e:48:15:fb:81:76:
d2:d8:d0:3b:e2:8b:21:74:51:74:a9:e2:7b:8a:a3:eb:74:a9:
d3:8a:05:92:14:4c:71:6f:82:ce:71:7f:c6:82:0a:57:16:58:
ef:55:2f:3f:68:b9:d2:6d:96:30:6c:6e:5c:9c:22:02:3a:b1:
41:a2:51:1e:b7:cd:87:3e:3b:88:b3:c1:3d:7d:3d:4e:82:60:
33:f5:ad:38:ee:29:42:e5:38:26:12:3e:c9:5e:a0:b1:24:73:
fb:80:a0:98:ed:aa:4f:ff:95:01:9b:66:01:26:a9:37:98:e5:
f2:9d:af:c7:df:5b:38:f9:4b:ef:0f:ec:52:6a:3f:fd:19:b8:
30:cf:9b:9a:ee:30:de:d9:44:ca:f3:e2:3b:c6:db:7b:62:c3:
9d:ee:cf:6d:92:ff:b9:90:44:e6:1a:82:01:42:f0:5d:45:85:
29:32:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net