Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/4JzOUZpq-STvh396MgPb4dl7dFI.roa
File: 4JzOUZpq-STvh396MgPb4dl7dFI.roa (raw, json)
Hash identifier: K3Kf4BGZr9IsB7jHKZw3e4gUaPSOF6hD8alevpVNCU8=
Subject key identifier: E0:9C:CE:51:9A:6A:F9:24:EF:87:7F:7A:32:03:DB:E1:D9:7B:74:52
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0A2809B7
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/4JzOUZpq-STvh396MgPb4dl7dFI.roa
Signing time: Thu 28 Apr 2022 07:53:12 +0000
ROA not before: Thu 28 Apr 2022 07:53:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206796
IP address blocks: 85.14.46.0/24 maxlen: 24
185.92.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170396087 (0xa2809b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Apr 28 07:53:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e09cce519a6af924ef877f7a3203dbe1d97b7452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:c3:58:93:cb:61:f0:8c:22:5f:aa:d8:bb:
1d:df:80:51:60:56:06:63:95:d0:74:6e:15:fa:b2:
86:25:0d:56:7e:a7:6f:43:f5:92:ce:4b:93:a9:b3:
f7:4e:df:20:2a:2d:48:bd:e1:fa:18:93:f1:39:d6:
f3:0e:04:1d:4e:9d:23:db:6f:0a:12:c5:d6:74:99:
8e:44:cf:81:2c:6c:7b:82:b2:d7:8b:53:8d:70:59:
b5:74:79:8d:6b:28:4c:6d:9d:3e:51:82:83:97:1c:
cd:49:b7:b6:67:40:fd:9d:94:b7:7e:e1:60:07:70:
79:a8:22:4b:45:d7:e3:37:9d:f4:b3:be:7c:e6:af:
22:93:5a:e1:7e:5f:e5:cc:6b:7f:3e:0a:0e:e3:20:
18:53:83:41:b2:88:2f:b4:78:63:ab:e0:52:e1:0a:
a0:3b:aa:4a:5a:f7:c3:ef:c4:0a:66:dd:4d:9e:38:
a2:f1:7d:d9:b7:97:2e:16:7d:2b:16:72:cc:11:27:
76:e7:ea:5b:d0:d0:34:2a:51:3a:67:9e:94:97:6f:
ea:8d:f7:74:87:3e:35:d4:47:b5:48:dd:40:89:68:
51:bc:55:48:ef:47:c7:1c:fa:f2:28:d4:db:1b:88:
4e:4d:ae:6c:35:1f:ae:45:88:24:00:d9:2b:a5:7a:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9C:CE:51:9A:6A:F9:24:EF:87:7F:7A:32:03:DB:E1:D9:7B:74:52
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/4JzOUZpq-STvh396MgPb4dl7dFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.46.0/24
185.92.133.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c1:e0:44:96:b6:b6:06:8c:b6:be:b8:2b:c8:1e:06:ae:d0:
0c:5b:fb:eb:8d:af:b0:ad:d0:f2:bd:3f:3c:3c:37:40:7d:83:
71:7f:ba:df:53:7b:f7:c2:b4:6c:24:0d:27:5c:7b:21:b8:f1:
c0:29:77:9b:30:ba:dd:83:10:3b:31:bf:9e:3e:e7:91:d8:bc:
5c:17:ba:ec:0a:50:20:c1:57:93:fa:f5:9e:9e:19:55:63:58:
8d:7a:17:7f:bf:8b:86:6e:87:c5:4f:21:c4:d7:65:31:46:78:
90:a9:6b:6e:7a:73:9f:8b:ac:3c:57:58:b9:50:f5:ed:db:8f:
db:02:df:16:53:0f:75:7a:d1:a5:c0:a3:cb:e3:cb:d8:11:1e:
84:17:47:f4:09:48:47:0b:b9:e0:37:47:8e:22:8d:ea:71:28:
66:bb:bc:3a:c9:01:b1:bd:89:60:88:3e:25:3b:df:38:ce:21:
5b:32:05:08:b0:3e:5b:07:b7:68:db:e0:4f:5a:3f:a2:ce:60:
27:e7:04:71:2c:80:f5:49:4f:06:38:fe:38:1b:d6:39:2c:88:
fb:48:6f:39:27:db:29:0e:d4:77:24:92:ee:08:5d:9a:35:0c:
f0:86:7a:25:25:68:15:17:df:93:c9:bb:fb:d9:88:bd:27:93:
30:74:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net