Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/kKKPg7t0tl59E8OJ6wW9hHwriRY.roa
File: kKKPg7t0tl59E8OJ6wW9hHwriRY.roa (raw, json)
Hash identifier: oJibaZbIThIhu4RHE7k2ss5gy67f6r10cXg4ISOCDgc=
Subject key identifier: 90:A2:8F:83:BB:74:B6:5E:7D:13:C3:89:EB:05:BD:84:7C:2B:89:16
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 068F9BDB
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/kKKPg7t0tl59E8OJ6wW9hHwriRY.roa
Signing time: Sat 01 Jan 2022 10:59:21 +0000
ROA not before: Sat 01 Jan 2022 10:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12850
IP address blocks: 91.225.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110074843 (0x68f9bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Jan 1 10:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90a28f83bb74b65e7d13c389eb05bd847c2b8916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:b0:2e:2e:5d:c3:df:c5:2c:da:29:4b:83:
6e:f5:26:5b:30:22:01:d1:d6:d0:c2:47:b9:00:6f:
2d:52:f5:9d:89:c5:47:40:d5:0d:f2:6a:96:39:b8:
57:31:1a:4f:98:6d:4d:48:20:4c:19:03:a7:97:b0:
60:0d:4d:8f:04:7c:f4:c1:0d:7d:8b:c6:a0:47:f8:
c0:ae:98:89:43:9e:64:d3:1c:06:ec:06:88:58:c6:
76:da:82:4f:e2:1b:a4:db:f1:5f:c4:f5:50:d0:5b:
4f:b9:db:fe:e7:82:60:dd:0a:8b:80:5b:76:df:8f:
db:26:7a:e6:99:a8:ec:8e:00:76:9b:58:4d:6e:a9:
13:60:b4:9b:9c:2d:dd:cc:82:eb:3e:47:75:df:df:
19:06:8f:42:da:04:c4:14:cc:17:a2:99:0f:c8:e9:
fd:46:c9:43:92:bf:bb:21:65:93:80:66:10:03:0d:
bf:44:15:4a:69:14:bb:63:57:ab:f9:4a:1c:ba:e0:
fb:11:53:eb:6d:a0:a3:2d:79:26:af:28:3f:34:58:
b3:f4:40:87:bb:16:05:21:90:59:d6:cd:ad:21:af:
0f:72:49:2a:6e:e2:14:8d:fb:93:7c:67:b5:2d:4c:
b1:37:9e:09:4a:50:d7:b8:d6:d5:1d:1f:30:5d:19:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:8F:83:BB:74:B6:5E:7D:13:C3:89:EB:05:BD:84:7C:2B:89:16
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/kKKPg7t0tl59E8OJ6wW9hHwriRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
84:72:7b:8a:5b:de:a4:f4:f9:2f:22:0e:7f:a8:10:f8:7f:f4:
f6:09:fb:2a:cd:b0:80:1b:12:3d:d5:f8:47:d6:1f:11:db:1d:
00:80:0f:85:8e:45:51:61:54:82:e7:e9:68:df:4b:4d:2d:51:
91:13:cd:65:e3:5a:39:8d:b4:40:17:81:f2:6d:06:34:fe:b1:
85:26:9a:d3:f1:89:cf:13:72:8f:b4:e7:ec:15:a0:f8:37:f2:
11:9e:ba:77:5c:c3:62:1e:b9:ea:a3:e6:c6:0d:73:7d:da:7f:
d7:b6:bc:d9:77:63:b4:80:2a:3f:07:a7:65:71:82:44:63:95:
74:6c:7b:dd:a4:d2:02:f4:73:5f:54:6a:6b:3f:85:4a:aa:7e:
a2:88:ee:cd:00:1c:f3:b1:c1:c2:81:26:96:3b:d8:b1:b9:1d:
56:1a:c4:dc:3e:ca:d9:f4:a9:7e:ad:bf:8d:a6:f3:8a:87:28:
8d:48:85:d8:71:e0:10:0e:9a:0d:0e:33:2e:f7:db:04:eb:c7:
fe:ea:f0:a0:d9:29:50:c7:b1:3b:9f:f6:d1:60:fe:62:39:37:
1e:df:9f:1b:65:1c:dd:4c:99:18:a8:91:41:b9:f8:c4:6c:ce:
0a:c7:d9:00:3b:30:5c:2d:ad:aa:03:88:75:96:a0:99:34:4b:
e8:5c:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:14 2023 by rpki-client on console.sobornost.net