Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/iXti3ObBCHLRmrrXxEvlvgO-Tz4.roa
File: iXti3ObBCHLRmrrXxEvlvgO-Tz4.roa (raw, json)
Hash identifier: dtvCH21h6LvdKIkCD+qEGK2FUeq09p0GqfPhPgXnPY8=
Subject key identifier: 89:7B:62:DC:E6:C1:08:72:D1:9A:BA:D7:C4:4B:E5:BE:03:BE:4F:3E
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 03DDB6AC
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/iXti3ObBCHLRmrrXxEvlvgO-Tz4.roa
Signing time: Sat 01 Jan 2022 09:00:16 +0000
ROA not before: Sat 01 Jan 2022 09:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47196
IP address blocks: 195.22.149.0/24 maxlen: 24
195.22.152.0/24 maxlen: 24
195.22.148.0/24 maxlen: 24
195.22.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64861868 (0x3ddb6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Jan 1 09:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=897b62dce6c10872d19abad7c44be5be03be4f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:15:30:5f:18:4f:cd:2a:cd:9b:59:74:44:
05:97:cf:2f:e5:36:3d:93:4a:f4:50:b0:9a:a2:9f:
6b:68:b6:01:e7:7a:4c:c1:12:f9:06:f7:aa:33:64:
77:62:47:aa:4a:d5:9e:84:b7:d9:c8:7c:38:70:1a:
66:98:0c:41:55:2c:90:cf:d3:be:3b:de:78:2f:ba:
0c:14:1a:3c:de:45:40:88:ee:eb:8b:7d:72:25:bb:
10:d7:95:29:ee:98:0a:a0:99:cd:9c:9e:38:c2:ef:
21:81:41:4a:a1:5c:44:cd:c9:2e:0c:48:65:2d:d3:
eb:8c:d7:b4:f9:7e:32:86:13:73:74:71:dc:33:8e:
05:c0:01:90:7a:eb:73:2d:6f:66:57:38:a0:f6:f4:
25:a7:ab:03:72:fe:7d:68:47:95:55:28:a6:1b:0c:
c9:a8:f5:44:27:25:bb:8b:7f:cc:32:ea:f3:91:7e:
73:be:d2:5e:63:d2:86:99:b3:eb:57:f5:2d:c8:1a:
a3:df:aa:dc:97:40:73:9f:b5:bf:ca:34:60:b9:4e:
a4:89:b7:e2:ef:06:7e:56:33:9b:11:4a:ff:bf:aa:
3f:1c:95:40:00:47:0d:5c:58:2d:fd:ba:7a:00:a9:
e3:6f:78:84:9f:2d:6d:c0:f8:f9:d2:b9:85:a5:e5:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:62:DC:E6:C1:08:72:D1:9A:BA:D7:C4:4B:E5:BE:03:BE:4F:3E
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/iXti3ObBCHLRmrrXxEvlvgO-Tz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.148.0/23
195.22.152.0/23
Signature Algorithm: sha256WithRSAEncryption
27:8f:e4:37:95:f3:68:52:dc:b6:1a:ba:3a:e4:28:29:b0:3a:
c3:c9:ba:62:9e:e2:f4:b1:fe:cf:e6:fb:bb:10:29:1a:ab:9b:
cd:c6:c3:3d:6a:52:c8:e4:71:e1:aa:4e:48:10:46:d0:6c:db:
0f:01:fb:1d:d9:f9:5a:b6:f5:14:8a:c3:87:54:3c:13:5e:7c:
6b:ef:ab:6f:9e:3e:01:25:c3:47:1b:2a:95:be:81:16:de:f8:
fa:ff:14:46:de:c3:b5:98:13:11:c1:e6:c4:3a:18:90:bf:70:
97:c7:ea:a5:d4:70:ce:8c:dd:af:4b:95:28:e9:18:f9:a7:42:
2a:0b:c9:ce:4f:e3:36:7b:48:16:17:e0:7b:63:4a:6e:ea:4d:
2d:7c:66:4a:eb:4a:ad:b7:c6:3c:5f:eb:25:30:76:c3:ee:52:
12:1a:7b:a6:42:04:31:62:0e:cf:d4:d6:1c:31:be:6c:c7:89:
2e:fc:1a:d5:9c:91:ec:2d:f3:c5:80:45:2c:50:46:c0:96:50:
9a:45:97:d5:67:05:a4:b3:7a:09:d6:10:bd:a1:ed:c3:35:56:
cb:c7:ee:60:fe:e3:ab:a5:3c:8e:d0:f5:01:69:1e:82:2c:7a:
ea:c0:fb:73:92:e4:7a:0c:da:c6:54:28:1b:2e:4c:b5:a5:a9:
e6:8d:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net