Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/s0SzPgA781U-kyK62EzEwIZQPIU.roa
File: s0SzPgA781U-kyK62EzEwIZQPIU.roa (raw, json)
Hash identifier: q7R4j3YcUW766k/KDwNWzcdxk+sm8FoOIIc6ht28HxM=
Subject key identifier: B3:44:B3:3E:00:3B:F3:55:3E:93:22:BA:D8:4C:C4:C0:86:50:3C:85
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 01EA7ABE
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/s0SzPgA781U-kyK62EzEwIZQPIU.roa
Signing time: Sat 01 Jan 2022 13:56:30 +0000
ROA not before: Sat 01 Jan 2022 13:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207557
IP address blocks: 194.9.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32144062 (0x1ea7abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Jan 1 13:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b344b33e003bf3553e9322bad84cc4c086503c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:b3:eb:ff:cf:ae:54:c7:10:19:8d:d0:5d:
6b:27:44:03:5e:7d:7a:98:17:5a:82:bc:6e:8a:9f:
c2:fd:cf:ba:52:63:c3:95:dc:b8:77:08:32:b0:96:
df:3e:d0:5d:03:08:21:ad:5f:56:fb:39:49:57:59:
e7:1f:de:60:c3:93:18:88:ff:0c:0d:51:1b:6a:58:
bb:e3:0b:bd:20:55:fb:2f:71:9c:ad:c8:3d:14:dc:
e0:2b:a5:9e:c1:b6:df:91:9d:30:4d:af:21:f8:44:
57:13:41:32:98:21:48:29:55:9f:57:f8:3b:80:45:
b1:2b:21:e3:fd:4f:7d:69:37:19:58:25:17:3d:8f:
1a:46:2b:ab:bc:a5:ab:44:8f:4f:95:95:4e:50:2a:
9c:35:76:e3:1d:e9:e5:64:7b:66:4e:06:4a:6f:25:
99:e7:73:85:9f:74:d8:4d:ca:88:38:ee:9c:7d:12:
c5:2f:72:80:22:d1:30:be:5e:cb:3e:88:4e:ce:c2:
fc:d7:b6:03:f3:a9:82:86:cc:be:83:ae:28:15:a5:
d7:14:e8:59:e9:7e:4a:d8:72:66:99:0b:2e:79:f6:
d9:a8:2c:44:67:8b:16:45:15:0c:85:09:24:86:ad:
8b:6e:61:5c:e6:51:a1:b1:29:d0:5c:b3:f1:9c:86:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:44:B3:3E:00:3B:F3:55:3E:93:22:BA:D8:4C:C4:C0:86:50:3C:85
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/s0SzPgA781U-kyK62EzEwIZQPIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.188.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ee:9c:40:d1:e9:bf:a9:77:a4:b1:d6:fd:a0:4a:7e:c4:0b:
b3:7e:73:79:ce:5d:ff:c1:0e:44:d5:4b:63:22:7c:d9:0c:61:
be:81:06:9d:77:02:cb:89:f6:61:91:fc:ba:03:25:23:fa:1e:
5b:c5:ca:a1:98:5e:ff:c3:45:b5:32:c6:74:e9:dc:a4:cb:02:
50:18:6a:69:e8:55:42:d8:30:e2:7c:c9:fe:7b:08:27:2a:8a:
9d:f2:51:5e:56:b7:d0:ec:ad:b8:b5:68:43:5f:66:6f:75:d3:
42:99:93:86:6f:43:db:00:68:eb:d9:d7:3e:1b:c3:36:3d:a9:
29:7a:1c:7e:a0:31:f8:26:61:cd:1e:e2:47:59:58:9b:c4:45:
6f:6b:c2:5d:98:a6:d2:b4:2e:2c:3b:13:68:d8:ad:bd:e7:38:
91:79:4c:e8:d6:81:62:33:1c:f0:15:ea:33:20:f3:a3:b2:2a:
84:fc:1f:2d:a6:9f:b0:2c:8e:0e:f1:51:a1:81:e8:cb:45:84:
94:c3:a4:a7:1e:be:6d:d9:ff:d0:ad:d3:21:68:54:03:d0:6d:
90:55:55:56:76:86:ac:23:60:e3:d2:21:46:37:22:61:c3:9c:
52:7a:40:38:89:f7:51:7f:78:4c:07:60:6a:5f:5e:d8:69:f6:
8e:a8:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net