Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/Xiz9-ve4un8KoDD_UEz4eu66aVQ.roa
File: Xiz9-ve4un8KoDD_UEz4eu66aVQ.roa (raw, json)
Hash identifier: aaBm1fbTQMuXEQu2evCU1U+nG5V0AvZJbHmeakrzIa8=
Subject key identifier: 5E:2C:FD:FA:F7:B8:BA:7F:0A:A0:30:FF:50:4C:F8:7A:EE:BA:69:54
Certificate issuer: /CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Certificate serial: 175EC168
Authority key identifier: A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/Xiz9-ve4un8KoDD_UEz4eu66aVQ.roa
Signing time: Sat 01 Jan 2022 05:00:26 +0000
ROA not before: Sat 01 Jan 2022 05:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44850
IP address blocks: 91.203.33.0/24 maxlen: 24
91.203.34.0/24 maxlen: 24
91.203.34.0/23 maxlen: 23
91.203.35.0/24 maxlen: 24
91.203.32.0/23 maxlen: 23
91.203.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392085864 (0x175ec168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Validity
Not Before: Jan 1 05:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e2cfdfaf7b8ba7f0aa030ff504cf87aeeba6954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:46:8b:a2:3d:ac:aa:de:81:38:f9:2b:52:
44:7d:16:79:a8:9a:0b:d4:59:6c:91:70:af:65:21:
c2:c8:03:24:49:2a:44:6b:5f:50:58:c1:93:7f:e6:
5f:19:48:77:17:32:60:19:1e:0b:e8:a2:80:01:38:
25:92:1d:b6:92:fc:28:d6:6d:30:35:7f:7e:65:53:
5f:d9:d3:ec:98:fd:8c:87:49:45:80:a5:6e:88:9e:
0b:33:04:0f:ec:cf:a6:79:21:cb:8e:45:44:b4:3f:
43:7c:b1:a2:54:2f:d2:24:9a:1d:e1:c5:55:4b:53:
e5:dd:c8:16:ec:27:9d:e8:c3:e0:48:82:7c:86:92:
82:9a:0f:c7:36:b4:dc:76:2c:f8:66:b6:93:36:9b:
50:20:32:a1:69:11:a2:da:d8:82:d1:f9:10:37:5b:
6f:67:6f:64:8f:7c:b4:8b:55:50:61:79:09:43:0c:
85:2e:94:72:bb:2c:9b:01:65:66:71:c8:2f:fb:84:
8c:a4:41:10:92:0e:ae:63:22:d3:95:45:13:df:56:
5d:47:48:e2:74:d6:31:e7:f0:a1:ff:26:53:dd:49:
97:dd:8c:b5:ac:81:0f:68:31:df:8b:2f:d2:6e:f2:
e7:c3:79:5f:4d:8a:12:6e:f4:af:e0:85:d1:9b:f3:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:FD:FA:F7:B8:BA:7F:0A:A0:30:FF:50:4C:F8:7A:EE:BA:69:54
X509v3 Authority Key Identifier:
keyid:A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/Xiz9-ve4un8KoDD_UEz4eu66aVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:a1:e1:51:bd:5e:34:88:30:54:24:0e:2e:38:65:14:e7:28:
f0:da:2a:09:dd:fe:d9:43:15:52:71:f7:d7:f5:07:f8:ab:18:
a5:a1:bc:b1:e6:cc:e3:b5:84:87:7f:4c:b6:ae:ad:6c:54:6b:
54:1d:58:0f:48:db:61:10:f1:6e:91:10:bb:9b:c0:86:5a:34:
16:8d:46:52:5d:a5:24:82:5d:53:0b:a5:8c:93:1a:be:e7:c9:
6a:1e:c5:78:96:8c:2a:4f:7b:99:20:39:7a:12:d3:22:fc:d4:
9a:9c:2a:79:3b:8a:d6:24:5d:8a:30:4d:75:40:99:29:a6:23:
a5:c6:a4:63:33:3e:42:a2:5b:54:e1:c4:87:45:4b:53:be:47:
4b:be:fb:d6:a7:9a:a6:b4:6b:3e:8e:68:4f:fa:74:31:78:e6:
18:cb:aa:c1:f8:ad:05:cf:03:03:d3:67:1b:4d:03:c1:88:61:
9a:a5:a5:b6:86:c0:f1:6c:e3:9a:2b:d6:ea:d7:e9:7c:e9:f1:
34:a8:5a:1d:76:b3:a2:d8:47:e6:25:24:fb:b2:75:18:8d:03:
67:a1:1b:89:03:e9:53:5d:f1:7b:3c:15:57:c8:d3:8d:6a:4b:
bf:d9:29:33:9c:9d:99:c4:f6:b3:bb:09:f0:d6:ca:14:48:9c:
05:88:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net