Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/Hk2WMAePz0L-ivBN7be-FdLgiIc.roa
File: Hk2WMAePz0L-ivBN7be-FdLgiIc.roa (raw, json)
Hash identifier: 1uYPtYKGh7LImTIM/maTNDZIItThKGc9X+vyu/wZsSc=
Subject key identifier: 1E:4D:96:30:07:8F:CF:42:FE:8A:F0:4D:ED:B7:BE:15:D2:E0:88:87
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 345DCF39
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/Hk2WMAePz0L-ivBN7be-FdLgiIc.roa
Signing time: Sat 01 Jan 2022 15:57:40 +0000
ROA not before: Sat 01 Jan 2022 15:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39351
IP address blocks: 85.208.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878563129 (0x345dcf39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jan 1 15:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e4d9630078fcf42fe8af04dedb7be15d2e08887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:e9:ac:0a:22:a0:54:b1:17:9e:14:a4:bb:
5f:35:50:28:ea:a5:ed:cf:ab:4b:da:88:1d:78:31:
2b:aa:a3:e5:cd:18:4b:8e:47:35:ef:09:d4:19:22:
19:af:0f:2b:df:1b:c4:3d:78:84:ce:cf:28:5d:bb:
7b:86:13:a1:b2:23:b2:30:48:45:e1:a1:52:37:fa:
db:d6:4e:4a:85:81:f7:12:3b:4f:d2:c7:a3:84:14:
5c:06:fa:56:90:e2:83:e8:13:e7:5f:49:d2:c5:7d:
25:12:f2:fc:5c:68:90:ab:5f:80:8b:5b:64:1e:43:
c9:f1:64:9b:86:bf:17:9e:4e:a9:95:d1:d6:76:34:
ce:64:04:e8:bc:fa:aa:24:97:09:43:10:d1:cc:e8:
26:64:ce:94:b4:93:a9:55:40:86:8f:a4:46:30:82:
e4:e0:99:0e:5f:47:a5:18:28:16:ab:12:0a:e1:80:
86:c6:e5:dc:02:70:b5:27:aa:80:e5:d2:ae:a3:d7:
be:53:79:f0:6a:f3:d9:bf:8c:3b:f6:39:94:38:a1:
ac:8a:42:b1:8c:f6:b3:47:d2:89:41:d3:74:3c:6f:
84:bd:05:a7:9b:22:9d:9b:7d:ea:ab:1f:d4:50:59:
f7:ca:4d:1e:9e:ad:f6:d4:d2:ee:10:50:80:7e:8c:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:96:30:07:8F:CF:42:FE:8A:F0:4D:ED:B7:BE:15:D2:E0:88:87
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/Hk2WMAePz0L-ivBN7be-FdLgiIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.164.0/24
Signature Algorithm: sha256WithRSAEncryption
50:24:d5:56:8a:d4:48:39:6f:ff:03:af:5c:f3:0f:0c:29:cb:
60:29:dd:d1:c5:f8:93:7a:5c:a7:8b:20:92:20:8d:8c:ff:f4:
e4:f7:be:64:3f:28:24:48:08:44:2d:18:b8:25:94:9d:d9:6c:
22:77:33:26:99:11:6e:0a:a8:b1:e8:5a:49:73:21:4d:4e:b8:
e9:b7:ee:ba:f4:1b:e3:40:3c:48:00:aa:47:d5:ea:56:09:3f:
43:f6:ee:82:39:2f:0a:b1:68:04:0c:45:da:4c:5d:c6:94:76:
46:97:63:9e:01:9e:06:9a:c8:97:a5:95:1d:61:d5:9a:24:9d:
fc:36:9a:7e:4e:27:28:36:db:03:98:2a:fd:18:c3:4f:a4:62:
3d:7d:3d:d0:c2:a5:44:32:b9:c8:30:5c:cb:12:af:6f:a4:b4:
e6:66:18:c1:6f:a3:78:83:45:38:96:12:14:9e:b7:fd:fa:e7:
7f:a1:b0:57:77:9e:a3:fe:2c:af:07:1f:db:fe:f2:8b:19:ff:
03:0c:b6:f1:8c:c5:1f:c4:84:0c:4f:5a:b0:7d:ca:18:55:01:
aa:58:78:ba:a1:79:0b:fe:e2:29:d0:b3:51:8c:6e:a8:c5:56:
8b:3e:71:d2:78:b7:d0:e6:96:d5:1c:4b:f5:3b:6a:02:9b:ba:
95:6c:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net