Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/RbHkD6cQmkvv0xU3NAvxQQJkMIE.roa
File: RbHkD6cQmkvv0xU3NAvxQQJkMIE.roa (raw, json)
Hash identifier: jHve2xHw+TRhr4cg2izUIjRYn0UqjpjvBtGjqR4/+74=
Subject key identifier: 45:B1:E4:0F:A7:10:9A:4B:EF:D3:15:37:34:0B:F1:41:02:64:30:81
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 11BB7235
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/RbHkD6cQmkvv0xU3NAvxQQJkMIE.roa
Signing time: Sat 01 Jan 2022 07:56:40 +0000
ROA not before: Sat 01 Jan 2022 07:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40965
IP address blocks: 185.110.133.0/24 maxlen: 24
185.110.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297497141 (0x11bb7235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jan 1 07:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45b1e40fa7109a4befd31537340bf14102643081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:2b:04:30:21:d6:fc:bf:66:05:bf:72:1b:
a9:99:99:b5:41:f1:f2:16:81:53:71:48:50:2c:2c:
c4:3c:e8:a3:a2:0b:82:51:86:c7:fe:b4:c8:9a:c5:
39:94:31:88:56:dc:de:74:f2:16:44:60:a3:c8:c6:
c9:86:fc:ee:b7:bf:09:f6:95:2f:e1:d4:77:8d:1d:
5e:32:b2:26:11:41:e0:af:4b:9c:b7:d5:33:df:22:
dc:e1:87:3b:ea:14:1c:d1:b2:be:33:7e:65:a1:85:
04:5a:18:6e:0d:aa:1c:03:05:e7:bd:79:3d:c6:11:
de:9f:36:db:a6:6b:da:a2:10:76:0f:a0:34:a2:77:
67:49:c0:5a:d8:aa:fe:b0:db:94:84:e0:f1:26:23:
30:29:fe:e1:df:a2:55:01:80:65:7b:c8:1a:4e:d5:
c8:36:6d:54:e7:70:94:18:7c:65:a4:3e:6d:4a:ca:
47:eb:88:6c:ad:e4:09:81:9f:25:20:4f:2f:7d:9c:
97:cc:f9:f8:3e:30:7a:b8:20:ff:20:d7:6e:06:36:
6d:e8:cf:9e:11:db:61:97:bf:30:15:9f:12:03:a2:
f4:21:a0:d2:51:d1:32:1a:a5:c2:e4:24:4c:ee:0c:
14:80:c8:fd:e5:00:a9:70:60:b8:e9:93:fe:2e:0a:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:E4:0F:A7:10:9A:4B:EF:D3:15:37:34:0B:F1:41:02:64:30:81
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/RbHkD6cQmkvv0xU3NAvxQQJkMIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.132.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5e:a6:a2:7b:d2:f9:23:cb:29:3c:b0:88:34:3f:ba:2b:f5:
4f:cd:bb:28:9d:4c:6a:ba:b7:13:aa:8f:4b:1f:f8:d2:b1:05:
8f:ab:9c:0d:0d:87:f9:00:52:67:f5:e6:a7:25:1b:0b:da:de:
94:27:46:8e:71:c4:6f:f4:0f:4f:de:e0:ae:d1:37:f2:50:bc:
46:d6:0a:fd:13:93:c9:f7:d0:25:c0:55:77:f7:cc:9b:77:a8:
c7:51:b8:7f:38:2b:29:98:b8:1e:c3:e0:3b:56:4e:79:42:59:
fe:3d:f5:43:23:62:52:9f:5a:12:68:d1:2c:3d:75:78:79:28:
40:53:0d:f3:14:a1:3e:99:9d:29:00:10:f9:b2:ae:14:dc:38:
42:fc:09:fe:2c:75:71:a7:cd:85:4c:82:a0:35:8e:5e:3b:ca:
dc:a1:13:0c:db:f0:b7:dc:09:22:c1:d4:a7:ba:91:52:4e:ea:
70:96:17:c0:9e:3a:3f:ff:1f:02:2a:32:97:24:a9:d3:5e:00:
00:6a:3d:2c:d0:a6:d0:e0:be:42:92:bb:19:b1:4c:ac:83:fa:
f9:96:73:ff:a9:cf:d7:57:3b:0f:3c:d8:45:9f:e8:d9:a5:f1:
13:78:16:0e:7f:59:ae:54:6d:8e:f6:49:84:40:34:13:1f:f2:
93:fe:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net