Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/IRuDteUCPmOzkRu6zoG4JnWS0bM.roa
File: IRuDteUCPmOzkRu6zoG4JnWS0bM.roa (raw, json)
Hash identifier: Rkgk8/ciwlIHcwdvOxF2Rn7xuFoqQZ2MYLp0i6hj2C8=
Subject key identifier: 21:1B:83:B5:E5:02:3E:63:B3:91:1B:BA:CE:81:B8:26:75:92:D1:B3
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 076B3320
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/IRuDteUCPmOzkRu6zoG4JnWS0bM.roa
Signing time: Sat 01 Jan 2022 10:58:15 +0000
ROA not before: Sat 01 Jan 2022 10:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200624
IP address blocks: 212.48.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124465952 (0x76b3320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 10:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=211b83b5e5023e63b3911bbace81b8267592d1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:ac:80:71:86:9e:ad:3e:92:75:07:44:2e:
e9:bf:2b:67:0f:05:15:df:01:71:fd:47:9f:4e:b9:
5f:9a:11:01:41:eb:cc:ff:a6:79:f6:09:d7:14:10:
9c:df:55:4d:2f:a8:2a:6e:67:ff:be:12:3d:58:65:
3c:6b:09:d6:2a:4e:a9:35:c7:79:09:f6:29:1e:41:
04:ee:bd:20:00:0b:b2:79:2f:cd:e7:af:86:52:03:
4d:c7:98:de:f3:c8:52:19:1f:11:c6:0e:c7:5e:aa:
33:80:a8:c9:8f:68:2b:a9:07:6e:02:ba:42:43:73:
10:8a:9b:5e:90:1a:f8:13:76:8a:63:85:dd:ed:dd:
6c:b3:02:40:b0:27:8d:fb:9b:43:86:15:8c:c7:97:
54:a0:fc:c1:a6:fb:e1:57:1e:15:ea:2e:a8:78:b7:
22:2e:c6:82:38:c3:58:af:02:d4:d3:d4:8e:31:52:
aa:98:f4:e0:dd:e3:f8:21:83:97:62:39:80:11:5d:
ea:4f:07:86:cd:e6:09:b1:de:f1:e6:42:cb:65:66:
42:6c:c5:cf:98:ae:4e:0b:1e:f7:3e:ae:fd:6f:d5:
a9:03:33:5b:23:16:55:cb:70:da:fd:a5:42:73:6b:
e7:36:d4:08:bd:06:a1:89:e2:b8:19:8d:d0:3e:23:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:83:B5:E5:02:3E:63:B3:91:1B:BA:CE:81:B8:26:75:92:D1:B3
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/IRuDteUCPmOzkRu6zoG4JnWS0bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.235.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2d:bd:76:ad:2a:c0:e0:45:a1:f1:97:db:42:00:9a:d9:ea:
43:e9:98:fc:54:a3:50:e2:ee:ce:4a:d7:6f:5e:e6:4e:5b:59:
c1:69:a4:32:4b:59:c5:5e:94:3d:39:a1:d4:b9:18:65:29:bc:
89:19:01:51:50:87:20:a1:2a:c8:2a:ff:77:e1:d8:35:d3:6c:
4f:ec:96:8d:3d:7f:3c:3b:4b:b2:4b:7c:fc:40:2f:4c:f3:17:
2f:32:28:a5:2a:63:5e:e0:87:21:04:1d:f2:30:1b:d4:df:ef:
44:2a:71:e0:c0:c1:f3:14:c9:0e:65:48:18:f7:9c:7b:4b:25:
d4:eb:e8:1f:35:39:cc:d0:8c:15:f3:17:ca:00:51:c6:4c:24:
34:ba:6d:9c:fa:03:4e:de:3f:85:3b:d7:52:30:65:f9:60:bc:
de:92:92:16:ba:5b:d5:80:78:53:1e:e3:4e:4f:88:f6:bb:91:
10:4f:da:50:95:33:4a:58:bc:8a:7f:3e:75:88:f5:09:e4:12:
e1:d3:a8:34:92:e4:a4:aa:a0:9c:43:fc:2b:6e:fa:8b:23:4a:
39:b3:62:03:42:a7:63:e8:e5:a2:45:2b:87:d1:1f:1d:00:b0:
9c:9d:c3:d5:4e:0b:17:21:3c:1a:7a:e4:9f:94:c7:9a:56:2c:
df:56:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net