Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/Ln_8C8uP2G0maqCJw_yuPiD-o64.roa
File: Ln_8C8uP2G0maqCJw_yuPiD-o64.roa (raw, json)
Hash identifier: cwM0WzYz0B639cCZcyqjGz0DPzjAeyhZMWyP2GFgfG8=
Subject key identifier: 2E:7F:FC:0B:CB:8F:D8:6D:26:6A:A0:89:C3:FC:AE:3E:20:FE:A3:AE
Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial: 09A35327
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/Ln_8C8uP2G0maqCJw_yuPiD-o64.roa
Signing time: Sat 01 Jan 2022 09:01:35 +0000
ROA not before: Sat 01 Jan 2022 09:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2116
IP address blocks: 194.146.244.0/23 maxlen: 23
194.146.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161698599 (0x9a35327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Validity
Not Before: Jan 1 09:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e7ffc0bcb8fd86d266aa089c3fcae3e20fea3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:f7:90:30:08:98:62:fe:0b:9e:de:fa:b5:
bc:93:a4:77:e5:92:47:ba:c0:74:ad:50:e8:d2:49:
49:20:f3:1f:a6:ec:75:01:57:61:49:3e:ba:cd:40:
e5:28:49:45:8d:24:ea:3e:d8:cb:5c:1a:49:1b:e1:
60:c7:e0:cc:71:a5:8b:b8:e7:80:80:c8:64:c1:1c:
a5:db:45:a2:97:10:bb:48:df:ab:04:a0:79:bd:13:
03:b4:f2:57:51:9d:32:ae:17:bb:29:e0:66:af:38:
0d:67:34:f3:1c:a9:f3:c4:19:f4:84:fb:47:86:f7:
09:e5:29:6f:41:02:27:22:32:50:e2:6f:20:e7:14:
52:d8:d8:aa:c4:05:61:62:ee:e6:e8:08:10:bc:e3:
99:fd:2e:f0:4f:ea:51:39:22:90:ef:52:26:06:4b:
6c:db:66:a6:89:65:0d:85:db:cd:6f:82:64:ac:dd:
4a:20:6d:20:86:d6:01:98:06:a4:e3:fe:ef:c9:cf:
1a:a6:5c:27:f7:7d:7e:27:f8:ba:b9:03:2e:a1:d2:
64:d7:91:10:1e:51:0d:33:72:9b:42:02:7d:75:c6:
67:77:9c:da:39:db:26:0c:9a:fc:1b:b9:be:8a:20:
63:1e:79:54:2c:59:67:97:13:68:ab:ae:e7:2e:50:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:FC:0B:CB:8F:D8:6D:26:6A:A0:89:C3:FC:AE:3E:20:FE:A3:AE
X509v3 Authority Key Identifier:
keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/Ln_8C8uP2G0maqCJw_yuPiD-o64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.244.0/22
Signature Algorithm: sha256WithRSAEncryption
af:8b:94:c2:de:40:e8:7c:f0:c1:e0:d0:ff:83:00:6e:df:64:
13:39:a2:1a:c1:0b:21:c5:35:65:c5:78:b0:2a:16:35:9b:f4:
bd:3b:12:9e:9c:5f:d1:c9:9c:96:d6:9c:57:88:03:22:cf:f2:
f8:23:6c:6c:8a:26:5b:fe:83:4c:8d:eb:3b:e4:a2:70:b1:b2:
be:74:da:19:a9:16:da:68:4e:d1:08:ec:22:11:ac:e0:f9:46:
33:e0:68:42:14:dd:7f:1f:1a:1c:1e:ec:35:65:15:bb:33:20:
c5:d7:bb:82:49:dd:92:71:83:91:ae:d6:ed:95:58:bb:1c:e7:
c7:de:50:ff:c9:93:ff:da:dd:2d:8f:9e:76:18:6e:5a:5f:16:
12:37:64:ba:ce:10:46:12:e1:e7:dc:c1:5d:c3:a2:12:2f:27:
07:f5:10:9c:aa:42:22:14:12:1b:cf:d8:d9:fc:fd:6c:8b:61:
f1:c8:7b:86:99:b8:81:ff:3b:7b:10:ea:c3:d9:60:86:89:c5:
d8:56:bc:54:27:e3:c2:4d:54:58:3c:46:79:47:ff:5a:39:3c:
a2:9d:15:60:f4:d0:47:61:58:40:e0:cb:46:87:09:e3:4a:cd:
34:70:aa:69:24:ae:4e:e6:aa:8f:9b:98:bc:e1:e1:3a:29:f1:
bb:da:4e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net