Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/noPye38bpYI-TfkQGIaYRjejb9I.roa
File: noPye38bpYI-TfkQGIaYRjejb9I.roa (raw, json)
Hash identifier: QnZtbKLgJ3M43UAh6arXTZYJRQUwjOUhHP9zD0as0JA=
Subject key identifier: 9E:83:F2:7B:7F:1B:A5:82:3E:4D:F9:10:18:86:98:46:37:A3:6F:D2
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 08F15771
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/noPye38bpYI-TfkQGIaYRjejb9I.roa
Signing time: Sat 01 Jan 2022 03:58:05 +0000
ROA not before: Sat 01 Jan 2022 03:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8218
IP address blocks: 164.138.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150034289 (0x8f15771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Jan 1 03:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e83f27b7f1ba5823e4df9101886984637a36fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:15:6d:ec:33:66:01:59:ec:26:5a:10:20:
0c:90:11:3d:1c:8e:5d:6f:38:f9:5a:84:73:66:36:
78:9b:28:7b:23:8c:03:b4:f9:1a:48:ea:a2:05:b7:
d0:50:74:e7:9f:96:26:40:4c:96:a8:65:2d:4b:53:
71:a1:05:e1:9e:a3:97:a4:88:e5:b1:e2:aa:7a:bc:
b5:cb:0a:6f:04:77:df:dd:3c:c4:cb:44:c2:41:9c:
fa:eb:4d:88:6a:92:82:36:b5:ce:2c:db:88:48:0c:
d1:09:0c:87:be:12:9c:dc:b3:ea:bb:f9:2c:c3:f9:
63:ef:b2:53:e5:d6:b3:c3:fc:31:5c:d9:ee:a3:92:
9a:6a:b9:f2:d2:cc:54:03:0e:5a:8f:ac:4c:17:9e:
29:d9:0f:96:0e:94:53:b8:db:12:3e:d5:39:79:c2:
4b:42:46:1b:dc:e1:db:5c:6f:8e:ef:68:43:1e:18:
e0:c6:bc:9e:95:8a:c0:b4:ee:92:c8:51:8a:6e:99:
05:dd:1f:ad:7b:c7:04:92:8b:67:b5:fa:74:ba:d1:
fe:78:d4:90:47:81:fc:27:f6:95:68:e2:bd:85:05:
f8:4b:75:f8:a1:67:ea:b4:ab:8d:98:8a:cd:08:77:
be:f6:7d:c7:8d:23:67:e9:3a:f6:be:ae:e0:71:eb:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:F2:7B:7F:1B:A5:82:3E:4D:F9:10:18:86:98:46:37:A3:6F:D2
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/noPye38bpYI-TfkQGIaYRjejb9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.246.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6b:6d:f8:f3:c3:56:1c:90:87:ef:51:b2:66:80:42:6a:15:
ef:b5:10:0d:04:3b:ff:ee:79:d7:84:af:d1:40:23:5a:6b:74:
e7:91:87:ee:94:ea:98:9c:10:31:f8:a8:a0:77:2c:6d:b3:7a:
47:cb:0a:49:90:89:14:e9:60:c3:fc:ac:46:17:c0:20:ce:fa:
ba:02:76:0e:88:a8:8c:9e:49:bd:93:35:97:32:53:2f:66:83:
6d:b5:01:34:c5:16:74:8d:d6:2f:8e:47:9f:06:d3:7d:db:0c:
cf:be:1d:2e:3c:97:3e:d7:27:fd:7c:2b:b7:d7:f2:c6:eb:01:
c9:2f:8d:8f:ce:c5:8d:a8:e2:a0:7e:5f:c9:27:95:ae:40:a3:
24:3a:ee:37:62:44:ea:9a:04:72:1f:69:39:21:cb:ee:49:0c:
b8:23:d7:c3:a9:fb:f6:b0:03:5f:fd:ed:ca:d2:db:38:fd:4c:
2b:d5:2f:43:0d:7d:f1:36:56:bb:92:6e:a6:86:b8:db:1a:bd:
71:73:cc:13:23:f7:10:bb:98:b7:69:c7:c8:47:fb:09:ff:4c:
98:74:8f:bd:f9:2a:06:9d:74:e5:46:36:2a:25:10:0b:b2:cd:
a1:66:e0:6e:2a:d3:70:6f:de:a4:e5:f9:15:45:e0:81:0b:ee:
ef:18:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net