Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/4DnU7_9KSppdpRtla_h86rsQ0UY.roa
File: 4DnU7_9KSppdpRtla_h86rsQ0UY.roa (raw, json)
Hash identifier: OY0kopENAUOcdz6w49gCg6NFGlVozwGMbK4heVsUMBk=
Subject key identifier: E0:39:D4:EF:FF:4A:4A:9A:5D:A5:1B:65:6B:F8:7C:EA:BB:10:D1:46
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0181EBFEA6DD161EB5FA26CC0DF4F07FA62F
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/4DnU7_9KSppdpRtla_h86rsQ0UY.roa
Signing time: Mon 11 Jul 2022 06:42:23 +0000
ROA not before: Mon 11 Jul 2022 06:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58204
IP address blocks: 91.239.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:fe:a6:dd:16:1e:b5:fa:26:cc:0d:f4:f0:7f:a6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Jul 11 06:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e039d4efff4a4a9a5da51b656bf87ceabb10d146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:65:3b:f1:12:ab:89:72:cc:bc:14:8b:2e:
57:3f:6c:1c:52:c8:d0:4d:8c:47:9d:b6:85:1d:15:
df:09:34:c4:e3:ca:b6:49:24:d9:68:d1:38:ef:2b:
51:c7:2a:da:a2:27:d9:a1:2e:6d:1b:d9:f8:3c:7d:
00:42:73:76:55:5e:1c:90:e1:e6:cd:ae:e3:00:5f:
ae:d3:2b:e0:e1:8d:38:88:9b:aa:98:78:b8:db:b2:
06:7b:24:e2:fd:26:d9:28:d3:63:27:11:f9:2f:76:
1b:5f:17:18:98:a8:90:72:db:54:5d:03:f7:cf:17:
d8:e0:b1:01:96:8e:92:83:03:d0:dd:98:ef:17:17:
94:c6:fb:bd:40:83:0a:5f:13:3c:40:68:9f:4e:9e:
70:22:b5:50:9e:6d:de:05:f1:a9:df:bb:2f:36:95:
35:5a:a2:80:60:f6:90:f4:25:8e:07:8f:07:51:c8:
7a:12:80:69:39:11:0b:bb:3a:c2:68:39:46:14:c9:
cf:b5:f3:71:7b:e9:5e:71:6f:79:6a:64:38:95:00:
62:f4:09:d6:4b:c2:ec:bb:58:7f:bc:8b:5e:ef:94:
48:71:2e:e9:47:cf:26:dd:a0:f3:83:bc:6e:33:90:
fb:be:b7:06:0a:25:b2:83:38:38:14:68:91:44:4b:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:D4:EF:FF:4A:4A:9A:5D:A5:1B:65:6B:F8:7C:EA:BB:10:D1:46
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/4DnU7_9KSppdpRtla_h86rsQ0UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0f:7b:db:7f:96:f3:fc:68:6a:7d:ee:3f:54:2f:02:7d:dc:
58:8a:0f:81:82:3e:9c:8c:1a:e1:5d:c2:e4:aa:20:e0:98:75:
24:b1:0f:6d:64:6c:74:6a:3c:15:7e:26:09:fd:79:fc:9a:d8:
a4:37:9a:cb:ba:5a:ad:c4:30:30:0d:fd:37:38:63:12:de:6b:
c4:fa:2a:f8:61:63:db:55:a4:0f:19:55:e1:7a:b1:e1:cb:c2:
3e:5b:af:d7:dd:25:45:46:90:ee:68:a1:ec:0a:57:0b:0d:5f:
0b:e8:e4:1f:4c:fa:c8:bb:72:70:1d:a6:a8:91:2c:0d:e3:0a:
7d:5f:0c:4d:51:99:0c:bb:1b:3f:d9:84:05:84:70:b4:70:0b:
36:b0:12:5b:76:22:c7:3b:4e:16:c2:75:cf:5f:a8:5f:d1:e9:
76:31:3c:10:41:94:22:07:4c:b2:d1:ad:02:85:24:79:b6:48:
05:59:3c:47:d6:9e:4a:8f:54:4a:bc:76:95:b8:ed:76:ec:fe:
e2:a5:b6:04:9a:a9:9c:98:a8:a5:41:4b:b3:a8:02:80:41:76:
2c:2b:4a:fa:31:85:4a:ab:b9:aa:61:aa:05:b8:14:b3:2b:92:
18:b7:12:b3:bb:1c:c5:f7:89:48:e4:63:c1:5d:70:18:7c:92:
d6:cb:da:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net