Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/niYdkNLyYCFX6EKjMoY7C-WrMwA.roa
File: niYdkNLyYCFX6EKjMoY7C-WrMwA.roa (raw, json)
Hash identifier: noc2TPcEes6PmPjbGZdXve2qRoFQWwmN4uwqSy/Eb0A=
Subject key identifier: 9E:26:1D:90:D2:F2:60:21:57:E8:42:A3:32:86:3B:0B:E5:AB:33:00
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 076A2B7A
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/niYdkNLyYCFX6EKjMoY7C-WrMwA.roa
Signing time: Sat 01 Jan 2022 10:58:14 +0000
ROA not before: Sat 01 Jan 2022 10:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 212.48.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124398458 (0x76a2b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 10:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e261d90d2f2602157e842a332863b0be5ab3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:33:d3:bc:c2:2a:78:91:4a:14:7d:e7:f9:
e3:04:3c:9a:ed:eb:f5:34:c4:4b:72:dd:cc:20:a6:
da:3e:69:2b:a4:b4:5e:31:bf:b4:a5:01:11:41:96:
d8:d1:14:39:d8:b8:e3:9a:0d:a0:0a:c1:b1:c3:82:
1f:76:da:f5:d8:7d:13:51:f0:b9:12:17:5e:00:05:
7a:67:7b:4b:6b:3e:ae:1c:85:70:f7:53:fd:e1:ff:
2d:b1:14:88:56:da:08:ec:ce:d1:1c:64:e1:6c:eb:
7c:cc:55:ea:aa:e5:01:04:6e:af:1e:6e:f3:e1:f2:
b1:dd:72:09:3c:15:bf:52:14:0f:7d:cd:3c:21:de:
5b:f5:9b:24:d0:dc:cd:c8:ac:ec:16:4e:fb:1c:c9:
5e:d3:e0:d5:ed:27:fa:82:35:73:0a:c5:92:7a:93:
14:8c:47:3f:d1:d4:1e:e0:50:7c:1e:a2:ac:5b:76:
20:fc:40:f6:4e:8b:64:7c:21:57:35:e3:44:dc:03:
b7:ad:4e:0a:2d:1b:73:7d:e3:80:94:73:e7:3d:dd:
f8:95:91:4c:c7:9f:9e:df:55:6f:d3:f5:b9:ec:d0:
a9:9e:d8:6a:52:89:6d:8b:33:06:48:08:7a:5b:e6:
eb:d8:1d:76:d8:90:eb:01:0c:d1:e6:cb:03:8a:1e:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:1D:90:D2:F2:60:21:57:E8:42:A3:32:86:3B:0B:E5:AB:33:00
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/niYdkNLyYCFX6EKjMoY7C-WrMwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.228.0/22
Signature Algorithm: sha256WithRSAEncryption
20:dc:65:02:d5:9f:1c:f2:dc:b1:9d:89:08:df:5a:80:2e:9f:
53:83:0b:55:d0:df:7b:f7:c3:9d:e0:94:29:64:f4:e0:a5:4d:
c1:46:ae:68:99:ea:0b:16:3a:d6:82:9a:d5:e0:10:a5:90:28:
56:38:4a:1a:a7:0c:f0:c8:39:19:93:6a:dd:b1:d4:61:6b:db:
cb:77:ed:af:af:6d:af:0f:22:25:af:d9:85:a1:d6:1c:12:06:
f9:34:0e:f5:50:3c:43:a2:f3:77:6e:54:d5:dc:b6:e2:0e:13:
fa:19:3d:da:f8:0e:2c:9b:6a:9a:a8:a2:77:32:fa:cc:fb:74:
52:23:cd:7c:f1:82:01:1d:7f:79:b5:dd:e4:87:26:a6:22:08:
1f:62:cc:f7:90:e3:db:2c:e9:92:d6:66:e6:a2:d0:23:92:ed:
1c:51:9d:a5:68:ea:47:c1:28:be:9c:ac:9d:94:4a:65:cf:5a:
ae:af:33:1a:db:57:6f:6c:71:ff:c2:33:b2:30:6a:f1:86:b6:
0c:02:39:4b:31:d5:2c:79:b1:77:2a:6e:c1:ef:02:93:17:5e:
5e:f6:55:f4:e5:c7:00:16:1e:1d:85:c3:c6:1a:02:d9:f7:b4:
7e:39:a3:38:b7:ad:b6:08:d5:83:b2:a4:68:25:40:be:41:13:
20:89:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net