Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/hoykXfrJ1Tjeq1faLT5XO-_A_j0.roa
File: hoykXfrJ1Tjeq1faLT5XO-_A_j0.roa (raw, json)
Hash identifier: jlkPAc90kH2alZ4tsQq/Qx80hmHlb6FhjmmtQSs41oA=
Subject key identifier: 86:8C:A4:5D:FA:C9:D5:38:DE:AB:57:DA:2D:3E:57:3B:EF:C0:FE:3D
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 094A919D
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/hoykXfrJ1Tjeq1faLT5XO-_A_j0.roa
Signing time: Sat 01 Jan 2022 09:01:31 +0000
ROA not before: Sat 01 Jan 2022 09:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209607
IP address blocks: 91.200.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155881885 (0x94a919d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jan 1 09:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=868ca45dfac9d538deab57da2d3e573befc0fe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:13:9b:cd:aa:03:e7:c6:29:18:4f:91:b8:
b3:59:14:54:e9:19:0a:08:b8:81:10:92:1c:91:32:
44:db:12:b6:aa:74:b8:97:7e:a3:8a:86:bc:39:65:
cc:84:ec:74:ed:12:6e:34:9b:b6:c1:7f:b4:ed:84:
05:36:c6:5a:c1:6a:da:8e:f9:03:5b:4e:ec:19:3d:
db:f2:d1:21:ae:de:4a:1e:9c:01:31:4c:ef:0f:36:
cb:a4:88:ba:5a:69:57:69:87:ca:af:7f:ad:10:08:
b5:7c:1b:11:0e:45:9c:c2:12:9c:fc:01:51:66:b2:
50:0a:4c:d4:b6:cf:48:9f:67:e2:46:aa:4f:09:29:
02:79:89:d7:0a:c2:0b:2f:3f:ca:5b:7d:a3:0e:61:
dc:20:4f:bc:52:30:f8:56:bc:a1:f5:a8:81:1f:99:
33:38:92:e5:e1:4a:b9:08:4a:f3:ae:46:56:ac:f1:
1d:69:4f:7a:4e:c1:aa:86:98:75:68:ae:a4:60:84:
ad:02:1f:93:d3:41:1e:df:36:73:21:96:fe:70:e9:
9a:5c:40:11:8a:b6:9a:4b:71:11:61:7a:8a:cb:a6:
25:07:9c:0f:d6:51:56:f1:b6:75:ab:07:59:6f:a3:
b6:1b:5c:24:26:f0:77:dd:ef:0d:7c:ce:95:ab:11:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:A4:5D:FA:C9:D5:38:DE:AB:57:DA:2D:3E:57:3B:EF:C0:FE:3D
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/hoykXfrJ1Tjeq1faLT5XO-_A_j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:09:df:64:9f:02:4b:f9:04:91:df:3b:bb:6b:f7:13:72:e1:
a6:4a:19:a2:5c:9a:7b:71:1a:aa:5f:d5:84:ee:93:24:c3:80:
13:c0:1f:13:69:50:61:47:a2:a0:40:de:5b:fc:e7:11:56:a3:
fc:2c:10:75:da:e7:3c:b4:23:cb:84:c4:d0:48:3f:12:25:b3:
0f:a5:3e:e8:59:55:b3:59:2c:8d:ad:f2:12:b5:72:3e:29:11:
e6:b4:9b:9a:47:ad:ff:8a:a7:07:f7:d5:0d:30:2c:df:0e:4b:
28:58:58:75:b2:d9:df:c4:89:72:71:03:f7:b5:1c:f9:d1:14:
16:a0:5e:b0:7d:f8:0a:b0:18:bf:34:c4:d6:d5:65:f0:a3:1a:
4d:24:da:1c:35:73:76:36:37:1e:8a:e3:4c:1d:68:36:04:1e:
4e:74:52:43:13:71:fe:4d:05:67:f4:60:ed:6b:4b:a4:3c:15:
69:1d:34:0a:c8:5c:9f:cd:19:da:05:73:ab:3d:b1:09:5f:62:
e0:eb:94:74:5a:9f:22:f8:9a:7a:38:c5:70:ae:2b:5a:44:ff:
d6:6d:8c:77:9d:be:20:c1:22:6e:db:8e:5c:27:ac:c4:39:25:
35:b1:3a:ce:bf:b5:9b:c3:63:ac:46:4a:6a:db:aa:98:c5:22:
0a:c7:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net