Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/tr9L5_sWodAI2DGMtmM6_kJZ0bU.roa
File: tr9L5_sWodAI2DGMtmM6_kJZ0bU.roa (raw, json)
Hash identifier: iw0Zpp6wwuCjC6ZiuiZVavr4X24xp5O/MyLqFsOabJE=
Subject key identifier: B6:BF:4B:E7:FB:16:A1:D0:08:D8:31:8C:B6:63:3A:FE:42:59:D1:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 0F996BDA
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/tr9L5_sWodAI2DGMtmM6_kJZ0bU.roa
Signing time: Sat 01 Jan 2022 06:56:27 +0000
ROA not before: Sat 01 Jan 2022 06:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29353
IP address blocks: 195.167.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261712858 (0xf996bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 06:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6bf4be7fb16a1d008d8318cb6633afe4259d1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:89:32:4f:b6:d2:cb:ea:f3:43:33:19:4a:
e9:01:c3:db:82:7c:7b:45:cc:e0:03:1c:b4:34:07:
fa:3f:be:b2:07:66:90:39:81:c4:4d:18:dc:a8:ab:
96:aa:f7:11:4b:fc:33:24:cb:20:ee:d0:db:44:e9:
a6:58:ca:58:c2:a0:b4:d6:bb:8b:dc:08:c0:a5:4e:
d5:0e:7f:f2:8b:89:32:29:10:b8:9f:6d:1b:c2:f8:
3a:27:43:34:25:9e:ae:20:f5:f2:ab:3d:be:c2:d4:
35:4e:3f:66:bf:eb:49:bc:57:60:47:03:8d:63:7a:
99:0a:9e:bc:4a:10:ae:98:e3:30:00:44:64:47:cf:
eb:ea:54:2a:8a:5c:c9:fb:c5:84:e5:b5:c4:70:dc:
9f:2a:13:7f:7b:94:a7:13:f7:83:54:2a:b1:99:ab:
ea:1d:1f:ec:68:89:65:8f:2e:58:df:45:1b:c3:81:
88:59:b0:d1:c4:22:b6:de:e1:7a:24:f1:60:1f:c1:
ed:ab:20:08:84:c6:ea:76:b0:e2:ed:22:c7:41:77:
59:0a:3c:cf:2c:d8:a5:82:44:b0:cf:29:c9:92:33:
67:a6:6c:18:7a:45:cb:94:5d:56:2f:1a:b1:1c:b2:
19:e0:d4:a5:1e:bd:31:41:5e:e0:88:71:45:d7:3e:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:4B:E7:FB:16:A1:D0:08:D8:31:8C:B6:63:3A:FE:42:59:D1:B5
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/tr9L5_sWodAI2DGMtmM6_kJZ0bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.41.0/24
Signature Algorithm: sha256WithRSAEncryption
40:45:0c:ba:0d:ee:f0:99:a1:f2:75:75:e8:7b:b3:9d:ed:e4:
e4:5f:47:54:ac:4d:01:f3:95:8b:08:14:bf:4f:f5:8d:f1:f4:
c9:6a:58:28:14:e2:e0:fb:8a:a4:e4:80:1d:f9:f5:a9:f4:a2:
74:32:05:ae:21:b9:c0:96:00:9c:7a:44:a8:e5:d3:00:b4:3d:
73:2d:6f:9f:b6:3d:bd:e2:41:31:16:34:54:6d:85:f5:b5:c6:
6d:f4:2a:8b:61:59:e1:d9:f2:c2:46:9b:c1:9c:fd:7b:2c:43:
94:34:7f:87:d6:74:d0:ca:56:54:27:91:22:1b:da:b3:ee:e3:
80:93:c6:d0:40:14:02:27:88:53:d5:49:88:65:03:d6:2e:f3:
23:59:60:59:a0:d5:4d:fb:7b:fe:f2:b8:d8:7a:fc:10:5d:ba:
42:50:8f:5f:36:af:d1:6a:4e:5d:8f:cf:47:cd:d9:97:e2:5c:
13:5d:ad:68:2a:8f:16:b2:01:9d:9d:e7:27:4f:c8:ac:22:12:
f5:db:2c:25:62:91:20:75:75:a1:41:a2:69:48:f4:a9:14:df:
0b:0d:79:d8:a9:07:9a:f6:0a:3f:33:65:c5:76:48:45:80:94:
5a:ee:c3:1a:af:c1:c6:b7:b9:f7:f2:65:b5:9b:2d:3a:bc:52:
28:d0:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net