Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/2EpgibfY1ATChSB_qnM7lCPqyxw.roa
File: 2EpgibfY1ATChSB_qnM7lCPqyxw.roa (raw, json)
Hash identifier: /UKCkTb+rbb3fE4//cfJlgFEwHakH2aFj2ivqjL/iCc=
Subject key identifier: D8:4A:60:89:B7:D8:D4:04:C2:85:20:7F:AA:73:3B:94:23:EA:CB:1C
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 03C29CA4
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/2EpgibfY1ATChSB_qnM7lCPqyxw.roa
Signing time: Sat 01 Jan 2022 13:54:56 +0000
ROA not before: Sat 01 Jan 2022 13:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56533
IP address blocks: 195.211.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63085732 (0x3c29ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jan 1 13:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d84a6089b7d8d404c285207faa733b9423eacb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:f7:e2:e7:41:6e:b6:3c:c2:c9:e0:55:57:
14:f5:ec:14:92:82:79:dc:10:f6:c8:d9:15:8f:33:
ed:7d:f9:ef:59:ca:8b:b5:a0:7e:dd:d7:57:16:4b:
de:77:cb:66:b8:95:e6:fd:b3:92:2e:bf:2d:7b:8d:
fb:ed:81:3a:a6:be:62:74:60:19:f1:c8:f1:f1:2d:
04:6d:f3:71:54:0d:6b:15:9a:75:2b:80:a4:a9:df:
69:49:6d:22:bf:a8:02:9a:23:17:dc:49:bd:52:ee:
92:6f:a7:53:4c:a1:69:d0:8b:c8:44:b8:85:4e:1a:
90:a4:55:81:05:3d:fb:7c:a4:32:c6:71:60:5c:6c:
50:e6:0d:56:c7:83:3f:7f:de:4e:9a:99:04:b8:9a:
11:2c:28:53:19:d4:45:10:0c:3f:5a:5c:b0:01:22:
c7:7a:51:5c:38:46:44:ec:7f:81:af:60:cd:38:15:
2b:e1:a7:11:64:0f:ab:af:9c:9d:a7:89:ff:ed:c2:
4b:67:0b:c8:72:4f:eb:b3:eb:13:3c:4a:41:83:96:
2a:55:53:3d:19:2e:7c:12:04:2e:cc:0e:f8:ea:7d:
de:6d:4c:38:08:53:dd:e5:1e:0e:50:21:32:4b:ba:
63:3f:17:9b:4e:fd:50:9f:e7:65:88:77:63:d9:44:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4A:60:89:B7:D8:D4:04:C2:85:20:7F:AA:73:3B:94:23:EA:CB:1C
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/2EpgibfY1ATChSB_qnM7lCPqyxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.250.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7d:41:c6:1f:87:8e:09:3d:a8:4d:18:df:31:0c:ee:e2:74:
65:c8:c8:07:ab:4e:ba:7f:b2:9b:5b:a0:6a:8b:0d:37:36:c6:
19:86:2c:b5:53:ea:4c:33:ec:25:f0:6c:e7:38:6c:90:9a:30:
9c:5b:2f:30:4c:4d:d9:39:df:4c:1b:70:6c:30:1e:d4:cc:45:
1d:6d:5f:f7:b4:16:2c:dd:3c:99:e8:1a:1a:6d:4b:50:a2:1c:
56:19:4e:56:89:b6:14:10:48:8a:50:15:dc:21:61:53:33:49:
0d:7d:cd:72:bc:43:74:b0:28:81:86:66:31:34:d3:65:fa:1d:
9b:11:ff:db:79:6e:63:03:cc:28:37:59:d1:ff:cf:50:35:ff:
24:3e:d8:22:3b:01:34:98:b2:a9:97:70:34:06:7f:0f:a2:8a:
7f:a1:5c:5f:02:1a:71:74:57:18:63:5a:b7:b0:c8:60:0a:80:
e4:0f:ea:cb:b9:8d:e3:34:78:cf:91:e3:dd:1d:45:a5:f1:a4:
d7:d5:d2:e6:b9:76:28:0c:1d:bd:fc:7a:40:b0:a8:26:16:cc:
04:35:dc:45:90:d8:54:f4:35:7a:7a:7c:c5:e5:77:e6:a1:f5:
43:85:e1:ee:d2:52:42:f2:82:f6:67:2d:22:41:cb:3f:76:fc:
63:31:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net