Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/SrMpakoXeJT4yAr2kmPC0BUzspU.roa
File: SrMpakoXeJT4yAr2kmPC0BUzspU.roa (raw, json)
Hash identifier: 9hdKuD2fYW49LlIytkXiCwlKdPMy8OHJKzrPHFBgDvg=
Subject key identifier: 4A:B3:29:6A:4A:17:78:94:F8:C8:0A:F6:92:63:C2:D0:15:33:B2:95
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 06AE6D87
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/SrMpakoXeJT4yAr2kmPC0BUzspU.roa
Signing time: Sat 01 Jan 2022 03:54:43 +0000
ROA not before: Sat 01 Jan 2022 03:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 193.5.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112094599 (0x6ae6d87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Jan 1 03:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ab3296a4a177894f8c80af69263c2d01533b295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:f7:a0:c0:8a:f4:03:a4:1a:d4:e2:8a:a3:
2c:e5:76:ae:06:6e:0d:bb:c5:cd:c1:b7:42:eb:69:
00:f4:a9:a1:10:96:17:84:e4:10:a6:26:80:ac:c1:
9d:7e:1b:c6:7c:10:55:f9:d7:02:d8:b6:40:b7:a0:
b7:85:a5:07:71:bc:c3:6b:50:fc:a0:05:bc:12:a6:
22:57:da:38:d4:79:8f:03:61:2b:05:84:9d:b8:cb:
88:11:47:97:24:c3:97:c3:d9:bd:21:ce:0e:4e:13:
93:de:d4:87:44:a7:b9:6d:0b:7b:14:fa:9e:ed:5e:
43:2d:42:9f:5c:e1:b0:6f:01:8b:99:f7:12:8b:ae:
a9:95:6a:35:ac:01:3b:54:26:db:ba:5a:c0:19:4e:
80:77:9b:24:27:ef:4b:9c:61:91:63:ee:24:c3:c2:
32:19:5a:e6:a1:d0:5f:cb:ec:93:34:d1:c4:06:b8:
7b:f0:12:99:35:f0:32:60:e5:2d:06:56:da:21:40:
53:f6:84:35:ea:26:71:11:e9:d0:05:87:f7:9e:89:
14:98:d1:fc:06:95:ce:48:d0:fe:d2:78:dd:1a:d2:
37:f9:17:cd:29:ed:66:78:b0:22:b4:42:5b:96:66:
71:f6:d7:f5:e6:d3:7c:f0:d4:dd:34:8c:34:74:fc:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:29:6A:4A:17:78:94:F8:C8:0A:F6:92:63:C2:D0:15:33:B2:95
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/SrMpakoXeJT4yAr2kmPC0BUzspU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.58.0/24
Signature Algorithm: sha256WithRSAEncryption
41:71:75:36:9f:2b:fe:40:d7:c9:09:b7:f6:35:fe:9e:d8:35:
4a:f9:97:1a:6b:75:b2:71:a5:01:52:c7:e9:32:dc:e6:a2:62:
a2:02:00:8a:e5:b9:a6:a0:f7:25:66:16:68:62:ec:16:0d:d4:
47:f1:c2:9b:c2:df:ad:7a:d6:dd:80:67:89:df:f6:b1:8a:07:
af:1f:af:e1:29:b7:91:10:8a:5c:16:72:86:fc:96:90:93:e9:
87:97:b6:de:be:e3:4d:0f:a3:b3:4e:5f:d9:2f:68:c2:65:93:
17:9f:70:86:e8:af:be:47:d7:95:ec:a9:4f:80:7d:b0:d2:4a:
27:02:04:17:9b:f4:de:17:ef:f8:0d:8f:06:b5:c3:ab:44:f7:
50:a6:4e:88:12:54:06:37:bf:dc:41:11:1d:75:b2:66:b5:8d:
ee:2c:16:8b:2d:ce:78:67:79:45:04:f9:a5:09:84:dd:81:c4:
28:e9:cc:e7:f1:fc:a7:58:7f:03:54:f8:f2:79:88:48:4a:56:
b4:e9:99:86:aa:05:52:1e:b9:8d:dd:a3:c6:c9:84:d4:2d:5a:
14:d0:48:a8:bd:f5:03:ee:12:f2:aa:b8:80:17:84:d2:ec:9c:
97:4b:40:64:6b:60:8c:f1:25:a6:85:ab:bc:76:87:2f:0a:0e:
fc:53:fc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net