Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/ILdfV8e8tXdSmM-UGNYq3-LZZuI.roa
File: ILdfV8e8tXdSmM-UGNYq3-LZZuI.roa (raw, json)
Hash identifier: orm7dGiMWWBdjN3cPu0mxSNww7dRz2np62nzfhwrasc=
Subject key identifier: 20:B7:5F:57:C7:BC:B5:77:52:98:CF:94:18:D6:2A:DF:E2:D9:66:E2
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 014C337B
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/ILdfV8e8tXdSmM-UGNYq3-LZZuI.roa
Signing time: Sat 01 Jan 2022 12:03:50 +0000
ROA not before: Sat 01 Jan 2022 12:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29015
IP address blocks: 195.245.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21771131 (0x14c337b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Jan 1 12:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20b75f57c7bcb5775298cf9418d62adfe2d966e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:01:b3:85:78:b1:8e:27:bd:ab:a9:b6:31:
f7:d9:91:c0:40:8e:42:36:6f:4c:80:b4:07:6d:93:
eb:99:8b:a5:25:92:37:e9:17:2b:35:0e:af:fd:36:
f5:7c:4b:d2:da:80:76:73:ad:b0:8b:0e:83:86:3b:
6f:5a:04:c6:71:5a:6e:f4:03:1e:a1:34:ff:1c:0d:
35:a6:75:90:92:8c:6b:88:91:e8:8e:20:e5:4d:f0:
b1:b0:50:d9:87:6a:66:58:10:aa:38:aa:43:be:2c:
52:09:d1:51:77:18:b5:a3:9f:e9:b1:95:03:9c:40:
cc:31:98:35:fd:2a:4f:59:30:93:0e:8a:21:f5:76:
7f:43:4f:d0:c8:16:80:23:c9:b7:d4:87:d6:17:e4:
38:3b:ab:16:60:be:f6:86:23:aa:9e:be:2e:7a:76:
75:65:17:14:e5:09:b9:06:66:15:7b:24:c4:05:d0:
06:87:e7:82:33:46:83:de:05:ef:d0:bc:6f:ab:58:
65:ff:ab:70:71:92:7b:ac:d5:de:ed:20:cc:04:ea:
4e:7b:86:8a:34:d1:8d:c3:ba:06:6e:8f:a5:56:a0:
f6:0d:c1:28:7d:2f:da:21:22:ce:c5:90:42:e8:70:
73:ab:c9:e4:b4:97:9a:ba:cf:be:df:f4:91:06:41:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:5F:57:C7:BC:B5:77:52:98:CF:94:18:D6:2A:DF:E2:D9:66:E2
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/ILdfV8e8tXdSmM-UGNYq3-LZZuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fd:6a:a0:b1:4d:f3:cd:12:58:ad:fb:9d:9f:7e:35:17:68:
83:9c:ad:ed:6b:ae:33:50:ff:2c:d7:4d:b2:54:fc:f5:2d:ed:
83:7e:d8:c0:0a:15:ee:4d:20:e8:e8:18:3f:a3:47:34:66:38:
30:be:88:0e:9d:3a:df:a6:41:69:5b:29:b1:b2:a9:ac:82:06:
aa:11:49:d5:be:80:e2:40:08:24:c0:b9:c3:d7:46:53:ba:c5:
4d:62:d9:a8:1d:f0:98:c0:79:2d:00:6f:6e:b9:0d:07:57:33:
db:d8:99:b3:d1:1e:ab:40:01:2e:cc:d0:53:e5:56:c8:5c:cc:
db:6f:b2:dd:17:97:db:52:3e:38:f9:13:8d:23:4c:18:88:d8:
32:01:42:49:51:6f:99:0d:ef:33:83:b8:7f:f6:82:a0:82:f2:
85:5d:2a:ec:15:92:75:ea:a8:28:5a:92:3d:4d:6d:d0:e5:13:
5a:94:54:1f:a2:96:f2:ef:71:61:ab:27:24:bd:e0:b2:f8:3e:
db:7e:8a:48:03:5a:87:66:ca:e7:47:bd:e7:1e:1a:c8:dc:fb:
9a:da:73:14:41:cb:c7:a4:a6:af:8c:5c:0f:7b:e6:c8:d3:37:
a4:06:76:a6:af:f0:11:52:e4:6c:f1:2d:b4:d5:5b:43:b1:e3:
4e:8d:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net