Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/1TWvD6W5Nhm2u-0_cyjr_6OLp3A.roa
File: 1TWvD6W5Nhm2u-0_cyjr_6OLp3A.roa (raw, json)
Hash identifier: F0QsAoS0eMVoWwXtdd1/Pv4gKTftqXe9CiZe70LJREE=
Subject key identifier: D5:35:AF:0F:A5:B9:36:19:B6:BB:ED:3F:73:28:EB:FF:A3:8B:A7:70
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 0105ADC9
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/1TWvD6W5Nhm2u-0_cyjr_6OLp3A.roa
Signing time: Sat 01 Jan 2022 01:55:27 +0000
ROA not before: Sat 01 Jan 2022 01:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202185
IP address blocks: 91.216.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17149385 (0x105adc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jan 1 01:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d535af0fa5b93619b6bbed3f7328ebffa38ba770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:4f:24:f7:b4:16:7f:2d:ff:8d:b3:72:9f:
81:aa:33:95:e7:01:4c:d2:64:03:57:4e:f1:ec:f1:
1e:59:a3:37:96:50:37:ca:d7:e3:1f:8e:58:b4:3d:
fa:44:b1:a9:c8:f3:20:29:46:a2:01:1b:c0:97:54:
a9:2d:84:80:90:10:87:2a:25:cf:70:60:c3:f5:75:
c6:f8:dc:7e:bd:a0:3a:7c:60:7a:f6:c5:85:bd:29:
51:19:eb:d5:df:09:aa:a7:a7:b5:e3:a9:46:f2:39:
c2:76:4c:da:38:f0:25:36:1a:aa:8b:41:8f:3e:56:
7a:16:eb:0d:61:22:fa:c8:8b:84:21:df:e9:92:4f:
27:b1:d3:52:23:1d:ca:5f:35:16:f4:8f:a2:b6:3c:
2c:63:cd:6c:6a:25:3b:b9:e6:a7:8c:b5:9b:d3:6a:
dd:a2:aa:98:fa:3c:69:c5:08:6a:78:03:08:2e:72:
4c:3d:9b:dc:7f:3b:2e:92:a6:22:14:77:42:51:58:
b5:e6:96:b5:95:e6:75:3c:15:d4:34:a8:a2:55:f5:
f4:5d:f5:d5:82:eb:63:a5:80:70:eb:82:ca:91:9d:
73:5f:71:16:17:40:f5:bd:44:2a:6f:36:0e:80:38:
7c:ab:6c:f8:51:62:7e:8a:f3:58:0d:d9:3e:9d:9e:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:AF:0F:A5:B9:36:19:B6:BB:ED:3F:73:28:EB:FF:A3:8B:A7:70
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/1TWvD6W5Nhm2u-0_cyjr_6OLp3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f9:34:60:a5:13:b2:45:25:3b:aa:ed:2b:e2:4c:d2:96:c6:
e3:53:c0:37:8a:72:e3:7c:9a:4c:88:f7:b0:de:d9:35:a0:d4:
6e:bc:2a:3f:ef:33:3a:f3:4e:ad:82:df:42:e7:30:18:69:01:
4f:6e:bc:2c:ae:63:6d:bb:b1:69:47:93:51:8b:49:97:6e:e6:
96:f1:4b:13:36:2c:b4:9b:34:71:d7:64:64:a9:e4:75:f0:83:
80:09:87:06:2e:02:e3:4e:e3:71:4d:a9:fd:42:22:5f:b0:b0:
27:30:d6:db:86:95:75:15:0b:d3:90:2e:a9:1b:f3:25:d5:1f:
58:ae:a6:0b:9f:9d:c6:70:85:d3:d1:97:42:3c:e3:6a:71:8a:
4b:8f:2c:b3:1d:9e:2d:7b:18:0a:69:8d:c6:02:7a:74:68:84:
27:c4:36:f1:ff:a8:e0:80:02:e4:41:5e:f6:78:dc:23:f3:98:
8b:39:83:67:8a:32:05:53:89:46:01:31:04:1a:21:de:40:f4:
1b:bc:2b:29:52:84:f1:a7:c1:8e:1e:b5:e3:c7:5e:6d:ef:82:
d9:c4:22:f5:74:a7:2e:24:21:58:ab:9b:86:0d:40:0f:1c:70:
6f:38:58:70:34:48:b9:0c:7e:ba:22:33:b3:0c:26:0f:7c:22:
14:ea:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net