Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1deizzomDV6e_hkS-QkXDjCjdek.roa
File: 1deizzomDV6e_hkS-QkXDjCjdek.roa (raw, json)
Hash identifier: X+wPXbr1oUZHLZPumDdDlYkxkEWjXvHilLvhImo55QI=
Subject key identifier: D5:D7:A2:CF:3A:26:0D:5E:9E:FE:19:12:F9:09:17:0E:30:A3:75:E9
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 079C987A
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1deizzomDV6e_hkS-QkXDjCjdek.roa
Signing time: Sat 01 Jan 2022 10:05:01 +0000
ROA not before: Sat 01 Jan 2022 10:05:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132839
IP address blocks: 178.236.42.0/23 maxlen: 23
178.236.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127703162 (0x79c987a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Jan 1 10:05:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5d7a2cf3a260d5e9efe1912f909170e30a375e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:f4:c5:fe:6b:f1:35:07:cf:b7:d8:dd:14:
a4:fd:64:9d:8d:4d:70:ef:57:fe:be:49:d4:d2:4a:
76:78:bd:d5:fe:ff:90:7e:c5:7f:7b:1c:f6:53:36:
ce:65:ae:74:e0:34:08:b7:b9:73:81:f4:b7:35:b1:
c8:97:75:6d:19:98:fd:b6:d0:06:bb:59:78:7d:31:
89:fb:16:d0:d0:77:ba:57:a5:65:4c:fb:5a:cd:be:
2d:68:c8:b6:32:b2:ff:54:31:a1:22:2d:dc:39:5d:
c0:ed:dd:66:1a:ab:8b:dc:71:1d:e3:16:cd:58:95:
26:31:53:16:07:75:39:58:10:51:c3:d9:36:bc:78:
4b:29:2b:79:7d:b7:ef:e5:f7:c3:b8:a0:08:2b:aa:
bc:60:54:a9:5f:02:4e:7b:aa:56:9b:e2:b6:a2:27:
ba:b7:63:69:4a:1a:02:7d:89:68:6e:f1:2e:01:6e:
b6:36:d3:7a:1b:05:3c:69:48:f4:ef:8d:be:46:83:
ea:de:b9:90:4c:a8:b9:ed:50:61:76:94:48:8c:b9:
3a:11:cb:ae:6f:fe:35:d0:d1:be:14:3f:3e:19:63:
f3:c0:ae:37:7f:95:56:49:ee:0c:5c:18:ae:59:82:
e2:c8:1f:2c:33:b6:2d:55:0a:ab:df:7a:a8:f0:78:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D7:A2:CF:3A:26:0D:5E:9E:FE:19:12:F9:09:17:0E:30:A3:75:E9
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/1deizzomDV6e_hkS-QkXDjCjdek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.42.0-178.236.47.255
Signature Algorithm: sha256WithRSAEncryption
2f:be:e4:bd:8b:5b:ce:1d:25:75:73:16:2b:0a:82:d1:80:cf:
e4:8a:b8:09:14:8d:1f:65:84:19:ac:50:30:fc:7f:74:07:80:
a7:fa:76:70:e7:32:14:e9:53:b0:71:eb:a1:85:ff:39:12:16:
2c:43:f5:c9:65:5a:6b:ed:27:f4:4e:87:02:a5:0b:4d:75:0a:
88:39:b1:d9:68:a5:53:1f:21:36:62:b9:ca:28:fb:c6:03:dd:
29:a8:70:46:4a:8b:59:3f:6c:45:e3:fe:00:5c:c1:ad:76:5f:
91:c8:2c:36:d6:bf:d4:fb:6a:d3:e2:ca:59:b6:e9:8c:0e:7e:
f8:b8:d9:dd:6c:fc:89:b5:79:d8:db:bb:00:4d:c0:0f:3e:c2:
f6:58:91:e8:7a:73:ca:62:ba:39:8b:ff:5f:a7:5a:48:62:72:
e2:bb:df:2d:d0:06:fd:24:65:1a:68:3f:33:70:08:ad:40:d7:
be:d3:c7:e8:10:34:c2:99:9d:53:5b:ae:88:d6:bd:5d:63:95:
66:26:19:aa:7f:6c:fa:60:55:12:7d:1c:23:5c:2f:b1:e8:ff:
b2:c3:71:2d:33:0a:3e:f8:f1:0d:f9:4c:f9:8e:13:0c:0a:9d:
9f:65:3a:86:ce:d2:0f:66:69:73:e1:17:64:49:be:4f:33:40:
ed:13:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net