Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/PXi66B0m6-TGtBDOFY-ZGo7SRrA.roa
File: PXi66B0m6-TGtBDOFY-ZGo7SRrA.roa (raw, json)
Hash identifier: qP+FVBWun4G+uKk0+kq2A/I/eBJwq3jSSDqoWPFLzjM=
Subject key identifier: 3D:78:BA:E8:1D:26:EB:E4:C6:B4:10:CE:15:8F:99:1A:8E:D2:46:B0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 63E1EB
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/PXi66B0m6-TGtBDOFY-ZGo7SRrA.roa
Signing time: Sat 01 Jan 2022 02:53:44 +0000
ROA not before: Sat 01 Jan 2022 02:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205578
IP address blocks: 185.12.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6545899 (0x63e1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jan 1 02:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d78bae81d26ebe4c6b410ce158f991a8ed246b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:d5:8e:1d:a7:7c:f5:fb:ac:ac:d0:e3:62:
4a:06:f9:04:82:e3:3f:36:e6:e7:c5:17:b5:23:1a:
bb:41:ef:92:de:dd:8c:2c:73:da:4d:e6:67:2e:4a:
9c:c4:ec:7d:d7:dd:1c:64:9f:90:bb:b9:55:d9:fa:
ab:31:3d:63:c3:fa:51:b3:7f:2b:04:24:59:ba:ef:
b1:32:60:ec:a4:b7:b2:c4:4a:84:23:51:36:a6:c7:
b1:8f:13:9a:7a:0d:3c:67:45:c3:13:ea:49:53:60:
9e:88:4d:5e:8a:de:56:70:3d:6b:93:50:22:b1:72:
86:6e:c6:30:27:f5:fe:f7:2a:23:f8:af:ad:54:03:
e1:25:0d:cc:93:96:2d:af:e0:da:f8:e5:6d:07:9e:
c5:b6:0d:79:8a:ab:c6:49:48:5e:1b:07:0e:a1:23:
53:f4:0b:31:bb:5e:c0:6b:a3:5c:24:92:c7:e9:6c:
85:88:82:78:29:ce:cc:34:23:c7:dc:12:5f:f2:f7:
39:6b:17:9a:fc:b7:ce:68:20:8e:c0:db:4b:ec:69:
5b:73:7a:84:22:cb:cb:3d:72:c0:4c:82:bb:a3:29:
5e:ca:c3:c1:69:b9:c4:e0:81:58:c2:48:24:32:eb:
73:76:ce:18:9e:43:80:f2:62:16:41:f1:a2:de:49:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:BA:E8:1D:26:EB:E4:C6:B4:10:CE:15:8F:99:1A:8E:D2:46:B0
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/PXi66B0m6-TGtBDOFY-ZGo7SRrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.220.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a9:0b:7f:ba:0e:1b:18:4b:0e:67:f0:93:37:a5:41:2f:1b:
c5:a2:34:1c:12:88:15:ca:6d:ea:cd:37:b4:83:b4:0b:9b:ff:
99:aa:93:68:92:cb:dc:91:35:cc:73:01:24:9f:3e:a5:a3:c6:
f5:06:74:1f:8f:77:58:47:d2:65:e5:a7:be:13:1e:88:62:78:
05:17:63:3e:32:5e:38:6a:07:29:06:89:fa:2d:69:6d:68:f0:
99:73:19:0f:f3:5b:9c:21:ee:aa:02:d5:ac:a4:9c:89:0b:3e:
a0:1d:7e:e7:4c:b7:c7:13:0c:94:a6:20:41:22:67:6c:b4:ca:
cb:86:c5:d3:c4:e3:d5:cb:b8:92:00:5e:41:03:fb:9b:b4:ba:
cf:34:3e:ab:72:05:e8:2c:44:a4:45:bc:af:d8:93:cb:ad:44:
ac:f3:0d:aa:fb:d0:51:70:ae:79:af:b8:49:98:df:8e:40:5c:
21:17:38:f0:c0:d5:74:7f:3c:f9:1f:f1:11:ed:b3:e4:8d:e7:
5d:b2:57:9f:84:7e:10:63:77:79:ab:44:79:18:f8:a3:76:e7:
46:b2:df:88:8f:e6:2a:50:81:35:c3:25:f4:e8:7e:b4:7e:9f:
72:f3:03:e5:5e:e0:0b:78:8d:7b:72:a1:8c:50:1b:9b:95:c3:
0c:d4:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:45 2023 by rpki-client on console.sobornost.net