Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/C77oAx7vHu7WOaBqKAP10mXt6zE.roa
File: C77oAx7vHu7WOaBqKAP10mXt6zE.roa (raw, json)
Hash identifier: DTkYG28oanE7qZuRhgDuUxcmmAazroJf31uAS611VyU=
Subject key identifier: 0B:BE:E8:03:1E:EF:1E:EE:D6:39:A0:6A:28:03:F5:D2:65:ED:EB:31
Certificate issuer: /CN=78beb07e8965aace510f44353242c9cc4d51a237
Certificate serial: BBCF
Authority key identifier: 78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/C77oAx7vHu7WOaBqKAP10mXt6zE.roa
Signing time: Tue 25 Jan 2022 18:23:46 +0000
ROA not before: Tue 25 Jan 2022 18:23:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.198.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48079 (0xbbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78beb07e8965aace510f44353242c9cc4d51a237
Validity
Not Before: Jan 25 18:23:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bbee8031eef1eeed639a06a2803f5d265edeb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:f6:8c:13:2f:4b:fb:30:45:54:c7:fc:18:
b1:30:17:9c:87:88:49:fb:2c:24:d3:d2:c2:e1:27:
d0:11:2c:c8:82:34:86:a3:29:49:6c:02:57:00:e5:
1e:7d:36:f4:91:0e:0f:46:1e:be:ac:44:6f:d9:a6:
fb:84:c5:b5:3d:1d:09:af:71:9e:7e:e8:5f:6e:ea:
32:37:37:74:72:d5:2e:d0:b3:67:92:f2:f7:f9:69:
62:f9:f8:95:a8:45:15:65:6a:95:79:f2:34:77:9c:
93:64:d4:07:54:ef:52:10:33:8a:fe:c6:3d:c5:f4:
27:89:64:62:fb:a5:6f:d0:93:ac:e7:c8:57:3a:b3:
3c:ef:79:64:e8:77:e3:53:02:cc:62:53:85:26:47:
6c:62:83:98:8c:fe:ac:6d:b5:d5:17:f7:18:8d:f4:
6e:21:de:79:88:01:82:af:bc:8e:60:3b:ea:ce:cc:
88:fa:42:c5:d8:05:df:3f:f9:43:22:be:16:9d:4e:
cb:b3:36:c4:71:3b:3a:f2:59:94:1b:25:ec:ca:8a:
39:6e:7a:8b:2c:e6:fa:e8:01:ea:e6:67:c5:9f:28:
a3:53:a2:85:d1:85:48:8a:a4:24:33:c7:2a:bb:ac:
ad:b9:cb:fb:71:ae:8a:64:af:6e:d4:30:fa:6e:a4:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:E8:03:1E:EF:1E:EE:D6:39:A0:6A:28:03:F5:D2:65:ED:EB:31
X509v3 Authority Key Identifier:
keyid:78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/C77oAx7vHu7WOaBqKAP10mXt6zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f2:bf:b4:d2:a3:bb:07:da:d6:ac:9e:41:6c:69:c3:ed:37:
a4:0e:22:69:cb:41:50:89:57:f5:b8:bb:cc:1f:26:9b:cf:7d:
b1:aa:4f:ec:4f:55:49:4b:b9:ac:05:f6:11:81:97:19:f4:0b:
39:fe:bf:8d:f2:d8:34:0b:c8:d9:b1:40:d5:17:cc:33:e0:23:
01:a0:88:6d:6c:c8:79:df:49:70:c8:c9:34:84:b8:89:fc:65:
dd:14:a9:2c:c4:75:5c:22:af:f2:b2:40:4d:aa:3e:bf:77:d3:
d2:d7:24:b5:1b:70:9b:77:bc:bc:58:29:ea:31:8c:87:c8:ea:
0d:12:46:0b:2d:81:e5:6f:3d:ae:c8:7b:fe:02:54:42:8f:31:
54:0c:45:40:81:7d:85:f3:d6:db:2e:6b:06:86:75:ba:e9:15:
51:18:2f:52:67:c9:82:0e:a7:74:59:09:a6:9c:b5:da:56:78:
fb:f4:c9:64:1e:3a:bd:a9:f0:0f:89:99:4d:48:c9:65:99:71:
5d:71:84:4e:17:e4:6a:6a:70:fe:3e:2d:10:d3:81:22:62:b7:
14:a1:5b:59:b1:fb:99:14:24:3c:e7:c8:63:9d:76:1c:4e:e3:
c4:c4:94:65:48:dd:ab:67:d5:16:9d:74:0b:96:13:61:7d:0a:
b5:21:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:08 2023 by rpki-client on console.sobornost.net