Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/T7JuUuuN2FvGdY-Z7hu5mgpGGFc.roa
File: T7JuUuuN2FvGdY-Z7hu5mgpGGFc.roa (raw, json)
Hash identifier: cERUmIU0S09zZzxTokxyDptH4nlfdKUwTAz+L77i/Kc=
Subject key identifier: 4F:B2:6E:52:EB:8D:D8:5B:C6:75:8F:99:EE:1B:B9:9A:0A:46:18:57
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 01825EB17053842E9BEA98876B9E7048DC45
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/T7JuUuuN2FvGdY-Z7hu5mgpGGFc.roa
Signing time: Tue 02 Aug 2022 13:14:23 +0000
ROA not before: Tue 02 Aug 2022 13:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149522
IP address blocks: 192.76.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:b1:70:53:84:2e:9b:ea:98:87:6b:9e:70:48:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Aug 2 13:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fb26e52eb8dd85bc6758f99ee1bb99a0a461857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:04:69:fc:ab:ba:ad:13:a4:70:a1:58:1c:
95:71:77:31:8b:7a:69:81:f1:a8:69:a3:d8:28:00:
5a:41:c8:d2:72:5e:10:41:5f:f7:a3:70:eb:f4:2e:
42:85:4a:88:3f:72:72:91:fa:49:d9:05:9e:47:c1:
85:7e:4a:03:eb:55:81:c1:e3:f7:24:76:98:26:38:
1a:16:96:db:22:bd:38:b2:14:08:f8:c0:89:36:e4:
5e:f2:b4:1f:d7:24:21:0b:a5:75:6f:b7:f9:dc:cb:
2f:7b:ab:26:cb:b0:5e:f9:dc:7d:a2:48:c2:25:98:
ff:e8:8d:f4:db:eb:e9:25:c4:9a:5f:1c:29:32:6b:
a9:9c:73:d1:06:c1:4c:77:7f:03:f9:1c:7c:6b:56:
d3:6c:8c:44:e4:1e:5e:69:11:f6:bc:00:fb:36:3d:
5a:54:9c:d2:02:23:15:00:81:8e:50:43:6f:34:75:
5a:1c:4a:8d:4e:b1:7f:0b:ec:5b:ea:e6:a7:ff:bc:
aa:80:22:03:f7:60:2c:40:a7:02:f6:09:d9:5d:05:
f6:ae:ec:58:2c:91:45:fa:af:b0:6c:3f:5c:4e:aa:
b2:9b:f2:75:74:8e:08:2b:63:2d:1e:3a:0e:8b:e5:
78:4b:88:28:b2:f8:ff:95:cc:15:42:66:c3:b6:af:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B2:6E:52:EB:8D:D8:5B:C6:75:8F:99:EE:1B:B9:9A:0A:46:18:57
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/T7JuUuuN2FvGdY-Z7hu5mgpGGFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8d:7c:83:9d:4a:e8:18:a6:71:f6:24:7c:be:24:6f:39:35:
2b:04:5b:46:2b:35:10:6f:20:7f:f5:14:23:20:2d:5a:ad:39:
9d:1d:85:cc:c0:cd:f4:96:c3:3f:db:a8:d2:0b:34:f9:f3:a3:
5a:72:52:79:3b:7d:9c:ca:85:6b:0b:5b:78:15:45:bd:8f:38:
55:4c:e4:5e:c0:f1:01:28:64:a4:7a:9d:0c:17:25:91:75:95:
42:20:5d:24:ae:9a:a6:71:10:ff:6c:a6:ae:77:0e:20:ca:5a:
fa:10:e8:3c:5a:42:df:3b:fa:ab:6c:1b:fe:7e:b2:ba:41:ed:
dc:48:f3:f0:bb:f7:24:0b:72:ad:4f:03:46:65:73:78:cd:ae:
41:b1:1c:51:f7:88:0c:54:01:f1:16:ef:9d:3b:bd:94:52:85:
9b:2f:d2:89:1e:ab:d6:a7:1d:8f:1b:73:5c:f3:f5:10:96:09:
71:58:25:a5:60:67:74:30:de:90:05:6b:87:d3:4b:0b:6e:08:
6b:e7:c0:b5:7a:9a:f4:aa:50:ff:2a:27:46:d6:7d:68:d2:ec:
94:31:15:8a:50:1f:b3:77:86:6a:e2:d9:55:10:9f:94:6d:6d:
16:88:23:5d:b6:dd:49:11:bc:a9:f5:6d:db:ce:99:64:13:88:
e3:12:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:41 2023 by rpki-client on console.sobornost.net