Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zt6P8BLVTckgfa2Ak9J1XuWFzE0.roa
File: zt6P8BLVTckgfa2Ak9J1XuWFzE0.roa (raw, json)
Hash identifier: iOqcwzKMpeS9HX9EhNS2Fho7Zu8XXbQ6Qdha3CmqpSk=
Subject key identifier: CE:DE:8F:F0:12:D5:4D:C9:20:7D:AD:80:93:D2:75:5E:E5:85:CC:4D
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1740591E
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zt6P8BLVTckgfa2Ak9J1XuWFzE0.roa
Signing time: Sat 01 Jan 2022 16:03:44 +0000
ROA not before: Sat 01 Jan 2022 16:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31207
IP address blocks: 188.208.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390093086 (0x1740591e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cede8ff012d54dc9207dad8093d2755ee585cc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:4f:95:87:63:a7:2c:d7:53:82:0a:84:0d:
f2:01:97:b3:f6:b1:d7:15:f2:4b:23:f2:5e:ff:e1:
38:ba:91:83:33:7b:d9:61:fb:04:13:0b:1f:b0:08:
03:05:5a:67:7d:34:0e:8e:15:1c:35:48:b7:38:48:
88:e9:14:6d:63:63:98:a1:b3:8f:52:96:01:9a:7b:
de:29:d9:38:ae:16:07:54:ad:45:c5:e9:95:4a:cd:
46:b9:ae:89:71:70:fb:4d:be:55:57:9f:bf:9d:b1:
36:1a:13:75:f6:7f:df:2c:99:11:f0:82:9f:04:d9:
9a:20:e0:42:14:ef:ba:97:ad:ea:60:2e:87:01:ff:
11:d8:f4:c7:25:0a:7b:f6:21:86:9c:c4:08:bb:14:
37:bd:9a:0f:bd:37:c6:ba:3b:0c:d0:57:b8:90:d2:
d4:f8:bc:41:4d:16:c6:eb:27:ee:5c:a6:66:9a:4b:
23:7c:49:51:8b:e7:56:25:ad:c2:58:82:ad:03:0f:
5c:95:c8:60:ee:98:81:c6:11:9c:2e:9f:61:db:4f:
c7:89:d6:79:28:65:00:fb:7e:bc:ba:56:0a:76:55:
10:eb:fb:40:70:49:0c:50:aa:ea:4a:23:93:09:56:
92:75:fb:01:87:dc:91:42:f0:d1:e0:38:ed:fa:92:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:8F:F0:12:D5:4D:C9:20:7D:AD:80:93:D2:75:5E:E5:85:CC:4D
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zt6P8BLVTckgfa2Ak9J1XuWFzE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.31.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b6:e4:2e:14:0a:3d:e9:18:61:52:a7:b6:b5:16:6c:24:d3:
8e:c9:de:87:ff:f1:e1:54:0b:22:9b:32:13:93:b8:69:dc:a3:
2d:5c:d0:86:2c:6f:1d:9c:ef:1e:59:a4:2d:ea:f0:d6:9d:8f:
b9:5f:47:72:7d:25:62:1f:b4:b0:a4:61:93:09:13:9b:b3:61:
cd:81:23:ce:b3:b2:cc:44:a4:c9:03:d0:ce:16:ae:79:db:f1:
7e:7b:17:e3:ab:ef:43:1d:29:6d:8a:b5:27:c1:1a:cc:5a:66:
48:23:1e:8a:a5:64:6e:e7:cc:e6:4c:c7:b5:fe:2b:cc:3e:78:
ec:80:bb:48:1c:05:0d:92:b7:ed:38:8d:cd:c3:7e:fd:af:18:
4d:46:16:f5:93:ca:26:03:8e:e7:10:15:70:26:29:ae:26:7e:
10:39:ca:0b:7b:df:97:62:9f:42:3c:61:24:66:6b:a2:7a:73:
26:20:d9:2c:5a:17:4b:29:3a:76:6e:dc:52:c9:cc:5b:41:27:
4b:32:5a:23:37:4a:63:2b:0e:34:21:4f:9b:d5:8d:d3:62:be:
c5:13:7d:69:ed:20:78:53:be:0e:33:92:42:4a:fc:59:e9:4c:
13:9b:ed:d6:3f:1b:be:24:17:10:58:83:75:75:aa:16:d4:4a:
93:0a:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net