Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/xMy1AZyRq81VBDYwhEnFQSmOP_I.roa
File: xMy1AZyRq81VBDYwhEnFQSmOP_I.roa (raw, json)
Hash identifier: NqiNnL8C5orW7rMbRP8n/+8rsVBDrf/9bwX/hxYpYwg=
Subject key identifier: C4:CC:B5:01:9C:91:AB:CD:55:04:36:30:84:49:C5:41:29:8E:3F:F2
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 4ECC
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/xMy1AZyRq81VBDYwhEnFQSmOP_I.roa
Signing time: Tue 12 Apr 2022 15:26:08 +0000
ROA not before: Tue 12 Apr 2022 15:26:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207163
IP address blocks: 185.164.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20172 (0x4ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Apr 12 15:26:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4ccb5019c91abcd550436308449c541298e3ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:52:79:6a:91:d7:bb:01:24:c2:67:60:de:
c3:93:68:26:40:76:79:56:28:60:a5:c1:4b:b5:b1:
6d:8a:b4:44:ff:e6:f2:59:64:58:2d:be:c3:64:44:
7b:05:cd:da:34:0a:8f:c2:0e:c8:5e:33:16:e4:31:
b1:74:3d:40:ac:9c:f9:72:5e:e6:8c:ca:4d:ba:e9:
cc:5a:a3:01:ee:ad:9d:eb:aa:cd:2d:8d:16:de:e0:
a3:8a:5c:60:8c:4a:c6:6c:e9:54:c3:1a:2d:78:b9:
76:d4:29:4a:2a:d8:1b:3b:f9:fe:5a:fb:bd:9d:e1:
4e:7f:e0:68:eb:a1:9d:b3:0a:af:59:f7:0d:50:2b:
17:87:2d:d7:3b:a8:14:7c:25:c4:f0:f7:44:4c:dd:
f4:15:ee:54:a6:ec:49:9f:53:08:8a:c7:53:bd:b4:
fb:b2:a6:6b:a4:d3:ee:0a:94:9e:ff:31:6e:4f:17:
25:36:ef:fc:15:65:18:2f:2a:c3:39:98:32:7a:85:
f5:ca:2f:a5:d6:6e:71:33:81:74:0b:e0:57:5a:55:
01:04:37:a7:b3:c8:a7:d8:fd:e8:52:00:df:75:55:
d4:ec:c2:a5:05:74:d6:39:ea:d3:3d:43:a6:81:25:
5d:a5:da:03:a0:68:c4:5d:58:d6:32:e3:94:05:b5:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CC:B5:01:9C:91:AB:CD:55:04:36:30:84:49:C5:41:29:8E:3F:F2
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/xMy1AZyRq81VBDYwhEnFQSmOP_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.88.0/22
Signature Algorithm: sha256WithRSAEncryption
29:2b:66:d9:c8:fd:82:d5:ae:98:63:b6:59:80:8c:8f:52:4e:
dd:f5:60:8a:7c:99:c4:22:eb:38:92:f6:7d:bf:5d:ce:1b:1f:
db:82:72:2f:89:c4:00:c4:98:f1:31:1e:3a:b1:37:d6:d1:27:
22:78:ac:55:36:1b:f1:2f:7d:fd:27:1f:0c:7c:5e:47:55:1f:
66:0c:bb:6f:22:cc:91:a5:5a:91:3d:03:cd:53:65:30:bb:30:
ed:1c:92:d3:19:a8:43:27:69:70:69:f4:b9:67:b0:e6:73:05:
8c:49:d5:45:c9:b5:ba:63:5d:b0:dd:01:5f:34:92:64:6e:84:
95:6b:41:0e:ab:d6:f9:7a:04:d7:fe:23:1f:35:70:96:2e:20:
e7:11:2f:fe:0c:96:c2:a7:1d:6b:30:49:a1:8b:44:3f:ec:c2:
97:ea:24:30:18:bc:3d:7c:74:ea:1f:69:2b:e9:e0:91:19:e4:
7c:98:00:00:7f:de:3d:3c:10:00:b2:46:72:34:5e:93:cb:af:
92:7b:70:60:ec:95:01:e0:4a:44:1a:11:4f:9e:75:58:e2:ce:
ea:fe:f0:b7:1e:b4:3f:fb:5e:8c:41:30:d5:32:cd:5f:89:6f:
a8:bd:19:6f:55:46:a4:43:d8:32:2e:04:03:0d:bd:be:86:a7:
d2:03:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net