Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/X5NnDDoiSsfvFylFYlB01yq8bbw.roa
File: X5NnDDoiSsfvFylFYlB01yq8bbw.roa (raw, json)
Hash identifier: EsCf2P9BuFkutS30vfi2aQxTds9d50vrpnurjzl4i/s=
Subject key identifier: 5F:93:67:0C:3A:22:4A:C7:EF:17:29:45:62:50:74:D7:2A:BC:6D:BC
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 0181FBEA5FB0FCEFEAD24DF53566978D093E
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/X5NnDDoiSsfvFylFYlB01yq8bbw.roa
Signing time: Thu 14 Jul 2022 08:54:09 +0000
ROA not before: Thu 14 Jul 2022 08:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29374
IP address blocks: 195.149.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:ea:5f:b0:fc:ef:ea:d2:4d:f5:35:66:97:8d:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jul 14 08:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f93670c3a224ac7ef172945625074d72abc6dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:9e:b7:9e:a7:25:8a:44:64:f7:fa:8a:6c:
dd:a6:ae:cc:9f:56:1e:98:68:7c:f8:02:c1:99:0a:
54:52:ac:12:13:af:8c:b0:1c:83:a5:32:d0:27:d0:
92:f5:a0:50:9a:c9:92:b9:31:85:ed:e0:ff:04:dd:
e5:58:4e:07:bb:20:b3:62:59:09:4e:6b:58:1b:39:
15:1a:53:bf:92:14:06:8a:63:75:98:fe:34:9c:80:
49:94:59:8b:46:9f:a1:ff:c7:8c:71:cf:50:7a:1c:
49:91:f9:14:40:17:f9:89:3e:cd:c4:10:6d:dc:00:
df:b8:19:c1:20:9b:98:3d:82:a4:09:3c:9c:a7:4a:
98:c1:a6:91:d4:d2:7c:be:24:b4:4a:17:2c:bf:39:
af:ab:33:32:e8:3a:13:76:74:d2:fc:d6:02:42:8c:
99:5e:fa:65:ea:31:57:f3:cc:1e:c1:f6:3c:4c:38:
57:49:e3:c9:81:ac:4c:39:71:7d:f6:e3:47:b2:72:
4b:d6:7b:6c:7b:bb:b7:52:fd:c0:32:3a:1a:87:6a:
db:c6:4a:d1:8b:cc:15:6d:36:5e:85:48:7c:31:11:
e3:04:27:e5:48:37:7f:8d:68:bd:00:c3:4d:eb:ee:
48:b9:cf:04:ad:de:aa:8e:d7:0f:2c:a8:03:92:d9:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:67:0C:3A:22:4A:C7:EF:17:29:45:62:50:74:D7:2A:BC:6D:BC
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/X5NnDDoiSsfvFylFYlB01yq8bbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
57:12:4a:c7:ca:4d:f5:75:1f:93:d4:d6:a4:96:12:3d:4a:6b:
77:b6:1c:5e:4a:88:80:33:f2:5a:af:0d:c6:c1:ca:3d:2e:4d:
c1:21:36:51:12:2b:63:e8:b4:a3:79:df:8a:e7:ff:53:32:89:
ef:b8:69:ef:3a:df:cf:67:46:c5:69:38:9c:8c:f1:09:aa:05:
59:62:de:76:0c:a3:1c:a1:2d:60:99:49:7a:eb:45:c2:c8:e8:
b8:97:03:86:b8:68:2b:7d:56:19:03:27:56:33:1c:88:a6:3a:
e7:98:7f:04:73:89:8d:b3:86:a5:d2:6f:f6:86:b7:50:77:40:
51:ee:b1:2e:81:a1:4c:c9:4e:12:27:4f:45:44:c1:5c:95:db:
28:0f:f0:85:ae:68:07:dc:29:b5:b2:3a:b6:b7:25:9e:20:7f:
6d:4d:f8:d3:d3:bd:1a:b0:c5:f4:40:34:b7:4e:fa:5e:f2:aa:
69:e2:5d:49:8e:03:d1:cc:45:1f:70:e6:17:ae:6f:04:5e:60:
ed:17:75:29:bc:44:67:2b:70:f8:93:50:80:5a:11:58:7b:08:
d6:94:95:14:29:4a:6c:5c:3f:c8:45:bc:55:ee:5c:a5:39:21:
a3:5c:b4:7c:ae:dc:81:17:0a:4c:b8:cd:0c:ee:69:ca:26:0d:
7b:f2:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net