Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/AdHKNH6VhWEjjM-kMzN07a5rlqg.roa
File: AdHKNH6VhWEjjM-kMzN07a5rlqg.roa (raw, json)
Hash identifier: tRzrBFxwhFWCyv5eFSnuk1Tsy4KG872GQ/3xgSA8XPA=
Subject key identifier: 01:D1:CA:34:7E:95:85:61:23:8C:CF:A4:33:33:74:ED:AE:6B:96:A8
Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14
Certificate serial: 015A39C9
Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/AdHKNH6VhWEjjM-kMzN07a5rlqg.roa
Signing time: Sat 01 Jan 2022 06:03:12 +0000
ROA not before: Sat 01 Jan 2022 06:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34488
IP address blocks: 194.126.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22690249 (0x15a39c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14
Validity
Not Before: Jan 1 06:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01d1ca347e958561238ccfa4333374edae6b96a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:fa:78:91:ff:32:85:35:d1:3c:ce:5b:d1:
20:c3:3b:69:81:78:dc:cc:fe:aa:30:fe:e6:fa:1e:
09:54:84:68:0f:2d:89:c8:d9:75:b3:6b:86:58:9c:
d8:50:17:82:5f:d8:3f:e5:46:d8:be:1a:62:82:3a:
f8:52:ff:48:10:08:db:42:22:ea:22:c9:91:39:d6:
4d:c7:ee:c1:4c:42:f0:1d:7f:1a:90:85:ad:fe:d6:
c1:cc:25:f3:aa:d0:f2:2a:4f:f8:a8:53:24:69:e0:
b5:08:f5:e4:37:1d:90:0d:10:4b:a8:2a:61:8a:87:
d0:d6:33:3b:1d:5c:18:92:d4:4d:31:35:bb:8a:65:
d0:b1:86:96:fc:a9:b1:52:f8:26:a0:72:21:09:e0:
fb:dd:92:48:8b:c8:07:07:df:e6:e8:9c:cc:cb:5b:
8a:bc:c3:d2:fc:d9:20:90:ee:ab:39:b2:cc:c2:45:
64:61:1e:c1:fb:b5:d3:33:2c:fb:a5:5a:fa:1a:88:
26:6e:bd:26:37:56:03:ff:db:ec:f9:7b:a7:2b:80:
5a:c2:d6:1c:a8:a8:e9:c8:ca:82:68:75:98:8b:86:
66:b5:ab:c7:e9:c7:d7:a2:30:06:88:2d:4a:6d:86:
1c:24:14:d9:54:71:33:02:48:20:f2:21:6b:c6:27:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:CA:34:7E:95:85:61:23:8C:CF:A4:33:33:74:ED:AE:6B:96:A8
X509v3 Authority Key Identifier:
keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/AdHKNH6VhWEjjM-kMzN07a5rlqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.197.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0e:24:aa:71:12:2b:e4:bd:c9:05:07:bb:60:29:8c:55:51:
1e:a4:1b:e8:a6:30:e2:01:f7:42:dd:12:fa:45:f6:44:e2:85:
47:72:ee:6c:a5:21:da:cb:5a:0b:a3:b9:77:06:f8:5c:b1:72:
59:6e:c2:54:3a:53:29:90:15:74:23:c4:90:82:9c:71:a9:e9:
aa:cf:01:28:0d:12:73:01:77:98:d9:83:65:7e:2c:d4:7f:52:
52:d2:67:05:5b:00:b1:81:78:93:a0:11:25:b0:b8:6a:61:48:
27:a5:40:b7:c4:e1:ea:51:35:6f:6b:40:a9:ad:20:0b:52:b8:
ef:db:23:51:41:93:56:a7:36:2c:cb:12:01:03:96:89:85:83:
e2:70:f6:e6:6c:6f:a2:b5:07:46:4f:24:44:ad:81:41:98:4e:
30:7e:e9:28:90:5d:0b:c4:37:4c:ff:8a:26:4c:dd:77:f3:72:
55:fa:c7:a0:90:2c:e1:9b:80:de:8a:9a:e3:4e:96:0d:47:b4:
00:1e:a6:9b:6b:29:a7:94:28:9c:5c:21:25:9a:7a:16:5b:17:
cb:c9:c2:47:1a:ea:b6:db:3d:14:6b:42:92:2b:85:7b:a3:c5:
80:f4:c3:b5:4b:73:8b:2e:3f:9c:ee:41:b9:f4:65:70:e2:3d:
72:da:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net