Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/wOr6KiuxK5DZgyz9sIbzLWWDzqI.roa
File: wOr6KiuxK5DZgyz9sIbzLWWDzqI.roa (raw, json)
Hash identifier: tccHMZDmTvncEF94aGH4a0OlMr8mZO+B3CCNpyoMFKo=
Subject key identifier: C0:EA:FA:2A:2B:B1:2B:90:D9:83:2C:FD:B0:86:F3:2D:65:83:CE:A2
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 171D3130
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/wOr6KiuxK5DZgyz9sIbzLWWDzqI.roa
Signing time: Sat 01 Jan 2022 02:53:14 +0000
ROA not before: Sat 01 Jan 2022 02:53:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31308
IP address blocks: 193.151.20.0/24 maxlen: 24
193.151.21.0/24 maxlen: 24
2001:67c:2c91::/48 maxlen: 48
2001:67c:2c90::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387789104 (0x171d3130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Jan 1 02:53:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0eafa2a2bb12b90d9832cfdb086f32d6583cea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:46:77:75:48:a8:93:8e:c8:13:6a:72:83:
46:c1:dd:15:42:c3:e1:81:b3:ce:63:9e:ea:c9:3e:
a9:3b:8c:04:7c:ca:7d:5c:b9:a2:87:0f:54:d4:5c:
b6:b4:1b:fa:e5:88:f7:f5:0e:74:15:d1:1a:49:43:
c0:df:9e:9b:14:dd:6b:90:b0:47:0a:74:af:82:b5:
9f:44:26:3b:fb:40:34:f4:90:30:19:a1:18:9c:6e:
57:70:6a:af:88:3c:20:26:5e:0d:9f:2a:07:67:31:
4b:fb:ea:08:78:d4:15:85:e2:2d:d2:a1:43:84:73:
39:58:1a:b6:23:7a:46:e4:11:f9:7f:0d:6b:ba:f7:
57:23:c7:b1:f4:b5:ff:df:ce:5d:06:76:f5:f4:d6:
e8:7b:52:8e:a8:68:c4:7f:f1:bd:fa:8f:bf:8d:3a:
b4:09:58:8c:a2:25:1e:f0:cd:6f:4d:38:cb:9b:e4:
08:91:6a:79:15:32:c5:7c:cf:c7:3b:65:93:4a:5e:
2a:be:be:0b:db:b3:78:bb:71:cf:e4:c6:7c:cb:60:
8c:64:16:3c:28:2a:e5:86:ac:5c:ef:bd:2b:13:95:
6d:7b:48:4f:1e:80:7d:a9:04:6e:1c:f3:4c:b9:2e:
57:51:36:f5:76:c1:c4:04:85:9b:7c:19:6d:89:74:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:FA:2A:2B:B1:2B:90:D9:83:2C:FD:B0:86:F3:2D:65:83:CE:A2
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/wOr6KiuxK5DZgyz9sIbzLWWDzqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.20.0/23
IPv6:
2001:67c:2c90::/47
Signature Algorithm: sha256WithRSAEncryption
37:91:26:63:be:0a:db:f6:a5:78:fc:1c:3f:47:72:2e:22:fb:
26:41:87:7f:b5:52:b4:ed:92:85:77:c8:da:81:cf:69:50:8d:
15:11:ce:16:08:18:e9:64:33:9f:71:50:51:83:d8:0e:b0:6c:
a9:48:5d:14:c1:67:6f:5b:18:94:82:6d:4d:a7:c2:dc:cc:9a:
58:ba:ad:d2:aa:42:c5:1c:d5:4d:a4:a8:df:d9:49:3b:e7:ad:
f6:6d:2c:b9:0d:ec:31:fa:01:81:9f:c0:7e:e2:ea:30:50:09:
e8:2e:26:de:fe:d7:e8:af:cb:e1:08:ce:a6:f5:c4:35:6c:ed:
6f:99:8f:28:91:9b:87:30:b1:02:4e:f0:5f:9b:1f:1e:db:e3:
20:be:1a:b8:94:5d:88:34:81:12:ea:bc:4c:2d:af:57:34:fa:
21:a4:be:be:88:66:cb:d1:dd:d5:65:6c:1a:c8:9f:2f:55:73:
64:7f:82:58:01:3d:3a:63:37:a0:6c:3d:d2:29:3b:75:64:8b:
25:9f:4c:e2:bc:e8:8b:9d:eb:0b:4a:5c:7d:27:17:d2:be:48:
ed:20:43:35:f5:b3:ed:4e:f2:1a:f5:4f:41:de:2e:ca:59:f6:
08:66:e9:32:ca:80:45:1a:5e:3e:ab:34:74:62:fb:c5:fd:0d:
44:0c:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:03 2023 by rpki-client on console.sobornost.net