Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/BQoP8f8QXshgBR7sYMPbc77GZms.roa
File: BQoP8f8QXshgBR7sYMPbc77GZms.roa (raw, json)
Hash identifier: MimBZpkZmChSiHSczxVuO5JjMoVj86ay5oLI+/paU+0=
Subject key identifier: 05:0A:0F:F1:FF:10:5E:C8:60:05:1E:EC:60:C3:DB:73:BE:C6:66:6B
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 0EAA3809
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/BQoP8f8QXshgBR7sYMPbc77GZms.roa
Signing time: Sat 01 Jan 2022 00:52:02 +0000
ROA not before: Sat 01 Jan 2022 00:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205185
IP address blocks: 185.114.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246036489 (0xeaa3809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Jan 1 00:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=050a0ff1ff105ec860051eec60c3db73bec6666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:cc:e6:11:2e:85:e9:84:c3:2a:92:ed:70:
d4:d7:54:4b:80:11:9e:45:53:53:69:8f:07:72:d1:
d8:b1:99:c7:18:ab:84:22:29:03:49:db:fb:5b:3f:
92:de:0a:a2:81:63:16:c4:e7:66:57:de:84:b0:95:
a4:45:28:51:b4:bc:1c:33:61:7e:56:dd:ff:64:4f:
6a:95:69:38:0d:06:a9:87:62:9d:5c:a7:76:8c:4f:
ca:e0:eb:e0:9c:d4:42:c8:17:ab:0e:26:d7:7f:98:
0f:ec:59:20:92:d5:49:11:57:fa:95:de:36:73:be:
9c:71:1f:c0:ad:00:85:7e:f0:c0:0e:0a:51:06:c7:
41:3f:52:2f:7b:61:af:12:45:de:b9:97:64:29:59:
1a:4e:8e:1e:53:cd:9b:08:f7:5e:d8:0f:2c:3f:8b:
ea:e9:bf:a6:88:5d:04:03:b4:40:56:f4:30:62:e3:
5f:bd:90:46:dd:4c:fd:2d:6a:fc:ec:cd:cc:b6:71:
90:47:c7:1b:b6:58:f9:78:00:13:91:e4:6e:f1:2a:
5f:10:35:9a:76:f5:8a:8f:16:8d:cd:9c:c7:c1:c8:
c6:8b:69:76:5b:c8:50:96:c2:d7:f8:4f:73:1c:3d:
d8:11:59:ad:6b:08:ea:aa:9e:eb:26:44:17:b6:57:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:0F:F1:FF:10:5E:C8:60:05:1E:EC:60:C3:DB:73:BE:C6:66:6B
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/BQoP8f8QXshgBR7sYMPbc77GZms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
13:96:c7:26:43:11:24:2f:06:62:cc:d2:9c:b3:57:4d:df:0a:
26:e4:73:8d:f7:ca:75:b2:2c:1a:94:22:50:5a:c0:72:3c:2e:
12:cd:32:e0:a7:54:d7:53:76:56:01:70:42:8b:16:6a:9f:6e:
fc:5c:2f:3b:20:2f:ab:11:0d:76:f3:92:79:9b:c3:d3:0f:37:
96:90:4d:0e:75:67:b2:3f:ab:66:44:41:b7:86:1c:ae:08:75:
90:e0:0e:1f:93:e0:2f:ef:f0:f2:c3:8d:b5:4c:e5:89:96:82:
62:49:09:3e:59:7b:e9:16:e5:cb:ce:60:21:24:6b:ad:7c:56:
8d:c4:75:8b:98:3b:79:62:04:77:17:be:38:e1:55:1a:05:ae:
11:f4:7c:42:6a:2e:19:ec:b7:fc:8f:5e:3c:02:60:21:c5:8a:
4f:4d:6b:a8:3f:51:8e:5c:bb:ff:e5:6e:5d:a3:db:68:e8:e8:
04:f5:94:4b:4e:05:5f:9c:60:c2:82:cf:2d:27:c0:f9:f4:28:
57:7f:1f:ed:49:72:23:c4:6c:6a:e9:90:85:ef:c4:b2:c7:34:
d6:7c:9b:1d:1d:6b:54:45:9b:ec:ea:74:b3:d6:49:6c:5d:1f:
ba:c4:04:b4:61:25:5b:f4:d0:65:3d:48:bf:92:e5:6a:78:1d:
e2:19:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net