Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/5tQ9QFaUTdUCI80by6eJJPvPIL4.roa
File: 5tQ9QFaUTdUCI80by6eJJPvPIL4.roa (raw, json)
Hash identifier: CWO+ZtNmANEvYbOxOuj2RqTON9LIOZyIz457IYuiidY=
Subject key identifier: E6:D4:3D:40:56:94:4D:D5:02:23:CD:1B:CB:A7:89:24:FB:CF:20:BE
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 0EA9C344
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/5tQ9QFaUTdUCI80by6eJJPvPIL4.roa
Signing time: Sat 01 Jan 2022 00:52:02 +0000
ROA not before: Sat 01 Jan 2022 00:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58075
IP address blocks: 185.114.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246006596 (0xea9c344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Jan 1 00:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6d43d4056944dd50223cd1bcba78924fbcf20be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:33:78:18:21:c4:93:5e:3e:53:c3:35:b9:
55:fd:c3:40:36:e0:3c:78:66:e0:67:d1:aa:21:11:
df:aa:5f:1c:9c:aa:2c:97:3a:35:f1:c7:3d:9f:37:
23:0b:5b:22:60:e3:d1:0d:a0:58:f6:c9:d0:a9:11:
3c:2b:85:8c:36:59:74:93:0e:77:24:9d:1b:fb:5f:
c6:48:54:9b:f0:cc:8d:31:09:d2:cd:15:d8:23:f9:
aa:23:83:51:b6:9b:49:e0:fb:27:e3:43:38:60:64:
44:8d:a6:ee:c1:aa:f3:a6:4b:0f:b8:82:b4:c1:44:
34:ca:66:6e:aa:32:81:1a:2b:b2:02:35:8e:f2:c4:
5e:35:54:18:a9:27:f5:e1:57:1f:6d:35:f3:3f:b5:
98:c1:29:45:67:48:27:67:9c:3c:7a:1f:4a:e7:46:
e6:c8:70:f2:50:93:bd:8a:4e:08:8d:a7:75:14:e1:
6e:65:3c:d7:07:1e:e2:36:d4:06:90:4a:5d:bb:2d:
87:e8:95:c2:a2:b2:33:fa:81:8e:9e:b0:aa:c4:14:
ab:d2:5a:a1:9a:e5:30:85:ad:61:13:38:6f:4f:23:
33:7b:d9:3b:aa:4f:51:17:85:c4:8b:e4:13:f0:03:
79:98:a9:63:33:5a:44:28:d8:12:b5:0d:ed:da:5c:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:3D:40:56:94:4D:D5:02:23:CD:1B:CB:A7:89:24:FB:CF:20:BE
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/5tQ9QFaUTdUCI80by6eJJPvPIL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.236.0/22
Signature Algorithm: sha256WithRSAEncryption
93:bd:8a:e4:a4:76:46:af:d9:93:5f:37:11:57:84:56:7a:f8:
28:1f:73:a8:95:bb:e8:9e:42:bc:52:58:ba:49:35:77:77:54:
7a:8d:68:c4:20:26:2e:e5:f2:29:e4:2e:2c:14:c0:84:d0:2f:
55:94:bb:b0:4b:7c:cc:f0:46:ca:92:5f:53:5f:99:df:4b:83:
7a:11:ef:8e:a7:28:23:28:5f:57:05:68:71:26:e3:c7:2e:43:
6f:39:ea:d2:6b:23:39:d9:e2:ee:00:4b:67:41:a3:a8:b7:6f:
17:c5:49:e1:46:de:e8:f9:3d:0b:fc:e7:b2:03:57:39:cc:94:
05:f3:88:4a:a8:2e:fd:24:60:db:eb:fb:d5:e0:39:17:27:55:
fc:10:49:80:3e:b6:8d:91:ea:f6:af:04:4c:75:4e:59:89:78:
f4:c0:30:85:b4:9c:b1:36:2f:74:80:a6:d6:bc:11:08:92:c3:
49:84:80:72:f1:86:a9:2a:3b:42:43:e9:f1:cd:30:53:fa:75:
be:84:c3:4a:b7:19:1c:e2:73:ad:08:cf:bb:50:60:1a:d9:2c:
68:47:1d:6b:e0:c6:78:c1:3c:83:c6:d8:5c:50:34:2d:d9:20:
95:7f:20:e3:23:92:1b:6f:92:a1:c8:62:86:a5:32:c5:7f:db:
ec:9e:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net