Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/Wk4AM9VTOwVhXHuLj-UOF0WmNC4.roa
File: Wk4AM9VTOwVhXHuLj-UOF0WmNC4.roa (raw, json)
Hash identifier: EIaX7+1LEiDjxdrO2ckLJp3S1SabKy0sbj/aRijMN+w=
Subject key identifier: 5A:4E:00:33:D5:53:3B:05:61:5C:7B:8B:8F:E5:0E:17:45:A6:34:2E
Certificate issuer: /CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Certificate serial: 09170185
Authority key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/Wk4AM9VTOwVhXHuLj-UOF0WmNC4.roa
Signing time: Sat 01 Jan 2022 15:59:16 +0000
ROA not before: Sat 01 Jan 2022 15:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8999
IP address blocks: 193.7.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152502661 (0x9170185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Validity
Not Before: Jan 1 15:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a4e0033d5533b05615c7b8b8fe50e1745a6342e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:64:6a:d8:f9:87:74:2c:6b:7e:1b:f7:0c:
be:a1:0e:83:e2:d8:cc:b9:ca:d6:79:25:18:ec:66:
eb:c4:8e:91:60:1d:2a:46:cf:48:49:34:59:de:d5:
67:85:d5:48:69:c6:f9:c2:59:55:97:a5:ca:c5:9b:
32:c0:b0:25:08:dd:2c:7d:39:12:79:6f:23:fd:d6:
29:c5:92:a4:af:85:af:83:94:99:73:c7:4a:32:d1:
d3:35:56:18:ce:77:dd:57:38:db:46:c1:92:26:8c:
4e:65:60:f8:58:64:87:fe:64:5b:2d:fc:d7:ee:9f:
77:49:09:9c:76:87:dd:1e:03:b8:3f:49:00:0c:3a:
09:76:24:30:69:45:f4:a9:c4:bb:54:1f:d0:7e:f8:
90:2d:03:94:8e:51:19:5e:1b:c2:2d:7b:13:d8:2f:
f5:9a:fa:38:59:9f:ef:81:97:43:c2:a6:00:a2:fb:
52:4e:e4:61:fc:28:d7:73:46:6d:78:88:5e:bb:e9:
f1:15:2a:45:aa:bb:72:79:a2:07:a0:bd:24:0a:0e:
cc:91:81:f7:a2:34:a8:34:19:b0:0d:0c:2b:1b:20:
c8:2e:ee:ee:56:cc:63:f6:23:09:ad:4a:3b:ab:7f:
63:38:7d:69:7e:70:75:39:dd:5e:30:72:fe:65:8d:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:00:33:D5:53:3B:05:61:5C:7B:8B:8F:E5:0E:17:45:A6:34:2E
X509v3 Authority Key Identifier:
keyid:65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/Wk4AM9VTOwVhXHuLj-UOF0WmNC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.212.0/22
Signature Algorithm: sha256WithRSAEncryption
52:f9:e4:65:d7:6c:6a:31:47:1c:c3:ef:f4:50:b9:1e:11:e7:
63:ba:5f:bf:99:db:df:7a:0d:32:ef:1a:b6:b1:5d:03:96:04:
81:4d:b7:d0:fb:c8:f1:c4:76:25:ff:cd:f8:29:6f:01:37:69:
7e:f2:62:0f:60:a4:54:05:e5:41:81:34:e2:25:06:f8:84:0f:
83:24:21:bc:35:3c:15:46:c3:7a:d9:4b:78:21:7a:b8:d6:3b:
27:e2:84:56:80:6a:d0:8b:5d:d5:03:5e:84:73:0a:de:8d:37:
37:74:6e:e8:fb:b1:98:e6:a0:82:d0:a5:cf:0c:92:9f:dd:3e:
28:75:a6:c5:6b:28:3a:10:c5:af:a2:6e:00:8a:46:4d:67:52:
55:fb:96:22:bf:64:b0:dd:0b:e1:89:39:5b:7f:a8:59:8e:f8:
95:39:34:27:12:60:48:69:86:78:36:9a:17:b5:34:c6:d0:82:
a5:d4:98:21:ba:8d:34:34:b5:c2:6b:bf:eb:4f:8a:f5:4e:28:
c8:dd:c0:ac:d9:24:23:12:60:b1:d9:02:45:a5:aa:fe:83:36:
7a:fe:21:6c:1b:bf:8e:5f:a9:ca:69:35:12:bc:b2:0c:23:0a:
67:2c:5f:4b:fe:4d:ce:bf:e6:2f:eb:6f:d1:e3:37:65:7d:e3:
9a:58:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:14 2023 by rpki-client on console.sobornost.net