Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/z-Hf_u1xJPeQ3F8524fcR-x7iBs.roa
File: z-Hf_u1xJPeQ3F8524fcR-x7iBs.roa (raw, json)
Hash identifier: XpFP5x0RLxbxBofM2iyVNI+dHYcWAQACwuULkIfs4VM=
Subject key identifier: CF:E1:DF:FE:ED:71:24:F7:90:DC:5F:39:DB:87:DC:47:EC:7B:88:1B
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 14513BF4
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/z-Hf_u1xJPeQ3F8524fcR-x7iBs.roa
Signing time: Tue 12 Apr 2022 14:24:21 +0000
ROA not before: Tue 12 Apr 2022 14:24:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29396
IP address blocks: 185.128.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340868084 (0x14513bf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Apr 12 14:24:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfe1dffeed7124f790dc5f39db87dc47ec7b881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:1d:0b:b7:41:09:d6:03:04:8e:2e:89:88:
d0:70:57:b1:fd:be:77:0f:f5:88:e4:19:79:63:05:
66:1c:83:61:c0:70:a8:d9:93:ef:19:81:3d:e2:12:
13:af:18:4c:fe:2b:28:c1:12:06:84:f8:93:35:d7:
0b:e3:7d:95:1e:50:1b:63:80:04:5c:da:09:c9:ee:
4a:8a:83:22:67:2c:b5:d4:ca:9d:3e:45:bc:f0:40:
80:90:d5:83:e0:51:d7:10:6a:12:ab:5e:81:a5:31:
e6:6b:b9:cd:50:bc:0d:a7:cf:21:bf:57:c6:e8:89:
42:45:69:0f:8e:d9:76:42:35:3f:c6:1e:37:80:0c:
b3:d5:53:cc:ed:9d:79:01:40:c7:5c:be:67:89:99:
0e:8c:c7:88:b7:70:57:19:93:3f:fa:3a:fb:a0:a4:
49:b1:f3:e7:ff:7a:7e:bb:e9:7e:94:2d:13:65:e5:
d2:d7:ca:fc:a9:5d:96:ca:f1:57:51:6f:16:ef:25:
a7:bf:3f:2b:ae:b0:a1:37:db:bb:1d:e0:2f:7d:ee:
58:f8:44:d2:bc:4e:0b:f8:1f:41:be:53:5b:39:8f:
a0:6b:de:a9:c9:c6:e1:5e:8f:aa:fb:c6:bc:66:a9:
0a:e7:fb:c2:9a:ec:8c:46:3c:9c:49:2f:5f:f3:c5:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E1:DF:FE:ED:71:24:F7:90:DC:5F:39:DB:87:DC:47:EC:7B:88:1B
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/z-Hf_u1xJPeQ3F8524fcR-x7iBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.32.0/22
Signature Algorithm: sha256WithRSAEncryption
99:05:7f:94:59:11:b1:4b:6f:a2:86:3d:ee:05:fd:8c:e2:97:
52:12:fb:e7:69:86:60:e7:07:27:8e:42:10:12:87:c5:14:01:
c3:0c:f8:cd:5d:b5:3d:68:5d:a9:3a:3e:88:87:57:00:30:c4:
40:94:a1:eb:a8:d2:a8:4c:f5:85:5b:46:f3:57:43:d8:4f:44:
8a:5c:aa:5c:33:7e:09:3d:fb:f9:28:ae:1b:bb:a8:74:27:6f:
a2:80:dd:d3:84:0b:51:1a:0a:55:bf:8f:19:67:8d:f7:d3:0e:
96:58:0d:d0:9a:44:6e:ea:3b:7d:16:1d:71:87:66:7c:83:0f:
07:88:12:33:4f:b6:71:2b:00:dd:ba:9f:13:80:7f:5f:da:bd:
a6:ef:6e:f5:a7:32:47:52:07:a7:4f:ad:d6:45:a1:7a:d5:11:
0b:64:13:16:81:cb:58:b4:46:f7:66:4f:fa:3f:c8:f2:8d:da:
de:46:af:5d:0c:71:37:27:a2:a1:56:83:02:01:8b:1c:7e:1d:
93:8b:55:54:b7:8b:aa:42:45:f6:76:e4:b2:0e:e5:37:ef:aa:
a3:bb:46:56:10:0c:86:45:c4:fd:84:78:07:6d:7e:95:b7:67:
94:00:09:15:dd:a6:fa:7e:5c:5b:69:a4:b6:25:f7:b8:38:0e:
60:b3:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net