Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/qKT9pLVX18Dkg8T6mpWxw8ZZwfU.roa
File: qKT9pLVX18Dkg8T6mpWxw8ZZwfU.roa (raw, json)
Hash identifier: rUmmFRkLpf0rBixbfZ/qo9fq830dR5+5ls8SWTl/klw=
Subject key identifier: A8:A4:FD:A4:B5:57:D7:C0:E4:83:C4:FA:9A:95:B1:C3:C6:59:C1:F5
Certificate issuer: /CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Certificate serial: CD7FCE
Authority key identifier: 85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/qKT9pLVX18Dkg8T6mpWxw8ZZwfU.roa
Signing time: Mon 25 Apr 2022 18:04:45 +0000
ROA not before: Mon 25 Apr 2022 18:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.214.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13467598 (0xcd7fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Validity
Not Before: Apr 25 18:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8a4fda4b557d7c0e483c4fa9a95b1c3c659c1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:8f:72:19:9c:e6:7d:69:65:40:8a:a5:15:
2e:d4:1a:48:4f:77:83:b7:24:49:86:3d:86:7a:dc:
2e:23:4d:26:95:c5:42:2d:56:4e:cc:f9:a2:a6:45:
fc:1e:c4:d2:63:d2:20:54:98:f7:c2:ce:b3:33:6a:
11:6c:e0:ab:59:06:fe:54:68:a0:74:37:c2:a7:35:
c7:ac:1d:ec:7c:96:16:23:2d:94:8e:05:84:69:4e:
a1:32:74:bc:ea:81:93:92:e1:65:df:84:48:2a:74:
4c:3e:2d:20:d0:90:f5:f1:ec:f9:23:a1:56:26:d7:
c7:6c:b8:f6:6d:48:10:f1:51:eb:70:c9:30:db:98:
44:77:9c:93:69:38:06:b3:72:94:07:f8:3a:a8:bd:
36:1f:01:62:0b:62:c9:a9:b2:db:2b:0e:c7:8a:d6:
6b:22:3c:e8:59:6c:e6:bd:1d:63:c3:59:06:9c:ed:
89:d1:4f:99:6a:2d:e2:c9:8d:5e:9f:b1:81:df:1b:
e9:9d:c9:68:39:d0:49:6e:79:58:d6:11:d0:3d:f6:
ac:8f:ad:89:d3:84:00:47:4c:4b:de:a4:16:ec:d6:
36:d4:c5:9d:1b:a5:0a:c6:75:8b:0a:2c:54:04:85:
e3:9b:83:49:68:e7:77:7b:33:db:5a:76:6d:25:83:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:FD:A4:B5:57:D7:C0:E4:83:C4:FA:9A:95:B1:C3:C6:59:C1:F5
X509v3 Authority Key Identifier:
keyid:85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/qKT9pLVX18Dkg8T6mpWxw8ZZwfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:36:b1:5b:9a:b4:b3:0b:e0:3d:84:31:d9:13:39:44:01:95:
4e:c8:10:fc:2c:f8:a8:6f:52:2b:48:48:a6:7e:a5:68:21:8c:
fa:11:75:79:48:5a:2d:d9:5f:2f:64:23:39:cc:85:cd:9b:b3:
97:60:ec:75:24:8a:8a:20:3e:9f:d1:1a:ea:cc:4d:e1:96:c7:
70:11:6e:0b:2a:e3:a8:9f:7e:0f:90:82:da:ad:89:82:76:da:
c9:9c:dd:9e:6c:2c:1d:b4:ee:ba:ef:6f:99:bd:4c:30:15:a7:
b8:e3:ef:23:dc:82:5e:b3:16:ad:f7:21:99:07:3d:c7:45:86:
20:02:4e:36:fd:39:ce:a6:39:63:a6:bb:57:ac:66:9f:3d:32:
68:25:cf:23:42:b0:a7:3a:e3:da:59:1c:70:89:44:c5:47:13:
e8:89:e6:f3:b0:6a:5f:d3:8e:99:85:2f:51:69:f4:01:d7:e8:
d0:8f:93:59:76:10:15:45:06:c2:80:62:eb:b6:ee:91:f7:fd:
49:0f:5a:cb:07:0b:5e:08:0e:18:a5:a2:5d:8e:c2:0b:7a:5f:
c0:83:7a:96:a7:8e:73:20:f9:0c:6e:da:c2:05:cb:eb:58:6e:
20:f5:d5:b6:86:6b:e0:da:e9:1e:4f:74:73:09:2e:93:20:68:
ad:93:e6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:07 2023 by rpki-client on console.sobornost.net