Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SqmnxRX13DTV4wxIYsotCjKU2fQ.roa
File: SqmnxRX13DTV4wxIYsotCjKU2fQ.roa (raw, json)
Hash identifier: 0xoGBlC/lbk8ipRQAJHkMjGmrSKh/7xuh709q0kWl/8=
Subject key identifier: 4A:A9:A7:C5:15:F5:DC:34:D5:E3:0C:48:62:CA:2D:0A:32:94:D9:F4
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018250CAC8ED80E7FFEEFD069B390B6022FC
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SqmnxRX13DTV4wxIYsotCjKU2fQ.roa
Signing time: Sat 30 Jul 2022 20:27:23 +0000
ROA not before: Sat 30 Jul 2022 20:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 194.146.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:ca:c8:ed:80:e7:ff:ee:fd:06:9b:39:0b:60:22:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 30 20:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4aa9a7c515f5dc34d5e30c4862ca2d0a3294d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:fb:9b:c8:94:32:11:42:2a:03:b4:28:c8:
55:54:75:75:d5:2d:8b:ae:58:3e:b4:7a:ee:64:58:
72:81:57:99:b3:0d:07:f5:1f:2c:c4:8b:33:2b:a7:
06:1c:04:f3:cc:b4:ca:43:16:86:bc:f2:9d:c8:7d:
6c:d0:cc:5b:9f:ba:60:1d:40:d7:87:8c:cb:0d:78:
d3:ec:fa:1f:d2:63:93:90:69:c5:86:46:25:64:75:
69:6c:e4:5c:09:7e:eb:af:ba:09:9f:38:ef:d5:ff:
64:8d:35:90:7d:be:e7:80:2e:2b:68:85:3a:44:f7:
87:5b:a7:bf:8e:a2:34:e6:24:8e:be:06:0e:d3:ce:
56:dc:9f:d3:27:fc:1b:e3:11:07:ba:0f:53:42:38:
86:84:c9:0f:78:63:37:00:16:45:6b:b6:ef:49:7c:
51:ae:e1:27:da:2b:05:66:c1:b6:ba:07:c5:07:0b:
28:b2:7d:b3:a8:f2:af:e1:27:ca:38:21:13:58:b5:
88:cf:d5:ec:bf:07:b4:1b:ec:33:30:ba:e6:04:a8:
9a:2a:ca:d6:c1:13:df:99:2f:29:35:a3:cb:9b:77:
e4:df:7e:70:17:e2:46:95:b9:6e:82:c0:1d:18:da:
ed:9b:73:1a:e7:af:41:d2:67:17:a9:77:c7:5c:7b:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:A7:C5:15:F5:DC:34:D5:E3:0C:48:62:CA:2D:0A:32:94:D9:F4
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SqmnxRX13DTV4wxIYsotCjKU2fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.50.0/24
Signature Algorithm: sha256WithRSAEncryption
67:62:39:78:4d:ab:05:3d:33:2b:1e:0b:f4:33:21:20:83:02:
97:0c:a6:3a:4e:85:0b:0a:78:6c:94:5d:cc:a3:11:c2:04:d8:
8e:ab:c0:ca:0b:08:91:8f:59:26:b9:a4:3c:7b:0c:da:e0:72:
79:61:ad:f6:75:74:5b:fd:7f:92:1a:7d:27:48:bb:07:7e:af:
27:ab:4f:a7:72:79:ee:08:d9:4b:eb:fa:2a:ac:42:cd:88:93:
13:78:ae:b9:05:e6:cb:a2:e9:d1:cf:78:6d:84:af:79:d2:77:
00:67:ff:6c:67:f4:75:9f:a9:d6:15:38:9b:c2:a7:c8:dc:1d:
e7:81:78:bf:23:04:7c:dc:8a:f8:fe:96:0b:16:d9:d0:90:ed:
a1:f6:e3:b4:70:fb:3c:2f:22:c1:a2:f6:87:ff:b2:93:08:75:
00:ee:e0:bd:a1:96:ef:7f:dc:98:e6:64:74:74:09:bb:18:f4:
2c:9b:ec:84:67:77:52:dc:ab:45:65:1d:91:30:e2:17:26:17:
d1:57:33:bc:b4:68:10:50:f4:0d:2c:7e:9d:cd:2a:33:7d:5f:
af:04:fc:0e:51:8d:c2:3d:ed:32:07:98:8b:fe:f4:09:59:49:
4f:e7:26:c1:61:77:00:97:37:59:36:35:10:d0:d5:66:6c:a1:
b7:31:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net