Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/OFtZXLR_Rd-T6VDR3iitUtdbKD4.roa
File: OFtZXLR_Rd-T6VDR3iitUtdbKD4.roa (raw, json)
Hash identifier: 0HVeyLE6Ht3EkNoeE9MBdl1jdUabL7iWDR+x4kNIv0M=
Subject key identifier: 38:5B:59:5C:B4:7F:45:DF:93:E9:50:D1:DE:28:AD:52:D7:5B:28:3E
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 076BD9F9
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/OFtZXLR_Rd-T6VDR3iitUtdbKD4.roa
Signing time: Sat 01 Jan 2022 10:58:15 +0000
ROA not before: Sat 01 Jan 2022 10:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205226
IP address blocks: 185.108.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124508665 (0x76bd9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 10:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=385b595cb47f45df93e950d1de28ad52d75b283e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:68:33:6f:32:29:97:e2:7a:e0:1a:3e:5b:
fa:70:77:c6:a5:b3:35:05:b7:47:62:28:4c:52:02:
96:fc:85:91:8d:28:2d:d1:6c:90:43:fd:07:cd:bd:
8d:ba:25:3d:ae:40:c3:db:f7:fc:f1:21:c6:3a:48:
4e:c9:27:4f:f1:25:0a:4c:78:1f:67:cc:d3:dd:9f:
89:b9:2b:0b:75:e7:a7:de:a5:02:bb:37:bf:34:55:
76:51:ba:43:a0:ec:bd:fc:ba:c8:72:a3:fe:29:86:
ff:41:e6:d4:67:f9:b9:4c:2a:08:aa:c6:86:eb:6b:
27:a0:39:de:98:8c:46:34:10:76:53:f9:5b:2d:14:
ff:d7:c6:f8:89:f4:99:c0:5f:f2:ce:ce:a2:e0:30:
f0:ca:3e:f2:b3:fa:a6:96:e0:d0:c5:4a:17:85:53:
0c:4e:5b:20:52:28:6a:41:45:55:94:97:7b:db:a3:
a4:2a:5b:fd:e8:3b:70:db:50:46:f7:7e:11:c4:5a:
65:a9:63:7a:98:6b:cd:a6:4c:a5:08:48:55:36:0b:
75:cf:0d:19:8d:89:a7:bf:d1:62:ea:c0:de:a3:fc:
8c:b2:83:f1:99:63:1a:e4:45:30:65:50:1a:fb:da:
79:97:0d:09:e6:17:2a:a7:8e:d2:07:c0:e0:a3:4d:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5B:59:5C:B4:7F:45:DF:93:E9:50:D1:DE:28:AD:52:D7:5B:28:3E
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/OFtZXLR_Rd-T6VDR3iitUtdbKD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a5:8d:67:69:59:3c:18:13:b6:3c:57:bc:b0:99:54:fa:89:
18:47:d5:02:e5:98:5b:f0:e9:14:2a:1b:63:b7:89:50:e4:be:
14:19:92:13:ab:75:f5:79:b7:33:3e:c3:93:56:f0:3c:19:0b:
3b:fa:a0:f9:f8:35:93:8f:ba:8f:ef:4d:d1:1a:67:f0:2c:b0:
17:ac:4c:01:0c:94:48:2d:e2:13:96:52:95:43:92:a3:55:f3:
71:f6:c4:dd:aa:4c:8c:cb:db:f0:4d:33:76:f6:93:0d:bb:b6:
45:45:04:21:33:6e:28:56:7a:ce:78:14:c7:1f:78:4e:b0:78:
46:e3:de:8d:58:89:f0:f5:f4:00:3d:82:1b:12:7e:4d:b5:69:
25:53:d3:91:22:0b:33:f5:e1:d3:75:cc:5d:24:8a:69:a9:d4:
f6:2a:85:db:a5:1a:73:6e:e8:76:bd:42:fb:da:8b:a1:d7:79:
93:a5:ba:36:c6:5b:77:ec:8d:c8:63:2f:49:93:96:dd:6c:48:
78:e5:53:99:54:ad:ac:8b:5f:ce:d9:86:bd:f8:82:fc:6e:9b:
cb:c8:19:b1:88:00:a4:69:ae:bd:40:bd:1c:5a:7b:25:8f:1e:
a8:fd:6a:10:a8:c1:96:a4:8c:58:c5:17:42:83:8f:5d:9e:7d:
1e:67:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net