Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/WrvNpiyNnZTEsB0WOqGknq2j5cs.roa
File: WrvNpiyNnZTEsB0WOqGknq2j5cs.roa (raw, json)
Hash identifier: UXJIEFhs597/TZzliYajqp5BxcqPMvLiaYhoXTxM2rI=
Subject key identifier: 5A:BB:CD:A6:2C:8D:9D:94:C4:B0:1D:16:3A:A1:A4:9E:AD:A3:E5:CB
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 6A0893
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/WrvNpiyNnZTEsB0WOqGknq2j5cs.roa
Signing time: Sat 01 Jan 2022 01:58:55 +0000
ROA not before: Sat 01 Jan 2022 01:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210588
IP address blocks: 37.200.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6949011 (0x6a0893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Jan 1 01:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5abbcda62c8d9d94c4b01d163aa1a49eada3e5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bb:c3:a0:f8:88:17:3a:aa:8e:74:44:2c:f5:
a7:a7:1b:5a:39:d2:a9:9f:50:f7:f1:55:d1:22:ac:
7d:a2:44:14:d4:b3:be:b3:e2:33:83:aa:a7:a0:38:
06:b3:48:95:57:4c:83:9e:ce:f9:90:69:80:75:61:
4b:50:c2:76:f6:9b:f9:72:70:75:df:33:ae:2d:bd:
e1:24:c2:da:6a:c1:2b:f8:77:a0:4f:ea:88:4d:88:
ee:a3:e2:90:37:56:98:b1:6e:e5:c9:a3:a3:31:4d:
b4:f0:e8:be:02:6d:7e:e5:84:54:a2:fa:e0:9b:74:
ec:05:a2:38:01:e5:f4:53:4e:b5:d1:98:d8:71:7b:
0c:7d:d1:81:ac:54:e8:4a:ac:4d:96:d1:8e:c0:17:
79:f9:65:07:de:41:db:13:c9:af:d5:cc:dd:be:52:
12:e5:05:01:bb:b1:35:ff:82:51:b2:be:50:12:e5:
0c:7d:64:b3:5b:a0:7c:1e:17:df:f2:33:93:5d:cb:
dc:e1:2f:81:4f:5a:08:55:46:b8:86:c7:f5:64:7f:
b7:56:17:50:a8:e4:e0:ad:9c:4d:f7:28:c5:67:94:
57:56:fb:9d:16:9a:f5:97:0a:8a:69:3b:03:63:32:
74:51:76:88:cc:c4:71:de:64:38:db:7f:7d:30:59:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:CD:A6:2C:8D:9D:94:C4:B0:1D:16:3A:A1:A4:9E:AD:A3:E5:CB
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/WrvNpiyNnZTEsB0WOqGknq2j5cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:09:b1:af:6a:b4:b9:77:15:28:ae:a3:67:e0:b0:b6:dc:a5:
62:f8:2b:ac:5e:a2:7e:e1:9c:29:ef:bf:14:f7:40:4d:01:21:
74:c4:e3:68:cd:d6:cb:20:87:19:74:48:2e:82:dd:78:14:4a:
57:ae:4c:78:32:c5:c7:a0:1e:11:45:71:b4:20:c2:9d:9e:e5:
7d:05:9f:78:8a:6f:b4:9d:87:f7:60:a9:46:3e:a8:35:be:27:
90:c7:13:68:42:d9:04:e4:6d:a2:0c:70:c5:d0:a7:7c:ca:e0:
06:59:60:12:04:a4:e8:5a:4c:90:d6:35:14:78:e3:8a:7c:c3:
e5:47:1f:7c:81:e0:f0:cb:f8:e1:0b:16:45:89:89:5d:34:ec:
cd:d8:27:fd:c6:6c:d5:f9:95:93:c9:86:3f:27:5e:1b:64:5e:
69:2b:7c:04:88:4b:7b:70:47:37:c7:93:54:b0:8a:a1:d5:6b:
91:ea:4e:ad:6d:01:a1:20:35:e3:e9:70:9d:1e:c5:ad:31:be:
59:4d:df:9f:6d:5d:03:58:99:1c:ba:59:89:d0:44:7a:a8:71:
6d:2d:97:59:59:57:93:80:8b:0f:8f:98:79:f0:c9:fb:e8:ab:
1f:41:3e:71:06:b5:81:83:54:0c:b2:bb:1f:18:8f:08:1a:3a:
e5:9c:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net