Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/xnrctoIn4nL2n38nErqxrWznAmE.roa
File: xnrctoIn4nL2n38nErqxrWznAmE.roa (raw, json)
Hash identifier: 5j1gYo5TFOFDyr26QB63GMZJTXOFNpn/zWrDbg02qC4=
Subject key identifier: C6:7A:DC:B6:82:27:E2:72:F6:9F:7F:27:12:BA:B1:AD:6C:E7:02:61
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 04F8842E
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/xnrctoIn4nL2n38nErqxrWznAmE.roa
Signing time: Sat 01 Jan 2022 12:06:25 +0000
ROA not before: Sat 01 Jan 2022 12:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42814
IP address blocks: 193.8.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83395630 (0x4f8842e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Jan 1 12:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c67adcb68227e272f69f7f2712bab1ad6ce70261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:01:ba:1f:5c:39:71:5c:b9:bb:e3:af:9c:
b3:a2:49:0a:ed:ac:a9:a4:9a:d9:13:12:c1:e8:f2:
65:f1:90:0d:d3:9a:1e:bd:1f:66:c0:6d:0c:33:6a:
61:c3:8f:12:68:b9:5b:04:95:79:8e:c2:85:b7:11:
42:43:6b:f7:c6:be:31:e2:2d:b0:31:7a:40:4b:68:
07:40:24:cd:80:e0:ca:af:cd:16:79:b6:cd:8e:e6:
f2:cb:5e:63:af:ae:ba:4b:33:3b:de:d0:54:f0:d8:
08:22:58:19:b1:60:4e:a0:fe:00:f1:dd:0a:3f:80:
34:2f:ec:06:29:50:ee:0a:c3:25:c3:b1:4a:6b:fd:
7e:ce:12:29:c2:02:1f:8e:29:c4:32:41:5b:e3:8d:
8c:b1:b2:42:8a:22:d6:42:bf:9b:17:9c:19:19:43:
71:ef:a8:90:e6:a6:49:70:c3:42:3f:14:6e:8c:a8:
f9:af:06:8f:68:b1:ab:cd:33:a2:b9:36:e5:8e:94:
2f:4b:49:0a:57:83:83:11:89:0b:45:4f:21:6f:55:
b9:eb:fc:73:f9:c2:d5:86:ae:32:17:9c:bc:84:e0:
7c:66:35:c6:62:7a:a3:41:fd:2c:37:30:d3:59:7e:
57:20:8a:70:8e:c6:b7:70:98:46:7f:b4:16:e3:3e:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7A:DC:B6:82:27:E2:72:F6:9F:7F:27:12:BA:B1:AD:6C:E7:02:61
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/xnrctoIn4nL2n38nErqxrWznAmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0a:37:a1:72:29:9e:62:0f:c2:17:6f:d1:29:3a:d8:0f:98:
c5:99:39:83:46:bc:c5:c2:2e:0b:d1:22:17:04:e7:6e:f5:19:
fb:a6:dc:32:83:99:fa:6b:5f:1f:80:14:09:f1:e2:32:4f:ec:
3e:be:a1:4d:e0:19:95:e8:af:c5:97:1d:0e:e6:b5:15:0d:83:
f3:9a:78:09:33:50:6c:cc:be:b6:c4:cb:f7:38:53:21:77:f9:
1e:3d:48:08:57:c0:c0:ad:58:eb:04:24:38:2d:16:b2:f3:b3:
62:d4:13:48:f0:6f:f4:ef:35:a8:6a:bf:11:38:77:cc:80:78:
4a:3d:a1:4d:c3:b6:25:79:89:b7:2f:35:2e:c3:fe:72:21:be:
f6:75:f7:6b:a4:93:68:45:f1:b5:c7:27:df:f7:97:ab:08:e9:
de:a7:b6:18:d8:ec:92:5b:32:a6:eb:19:b6:56:62:f9:b9:69:
95:2e:c8:a0:53:76:42:9b:07:d8:d9:d6:ca:f3:4e:c2:4c:63:
49:1c:2f:3c:48:a5:90:a5:2d:5c:bd:0f:0f:ef:0e:43:18:6d:
77:99:01:78:4b:ef:b7:ab:f1:ae:cc:27:41:c2:aa:a3:10:09:
f2:53:cb:41:fe:d7:52:98:ee:78:3d:9e:e2:5d:50:ab:85:2e:
76:48:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net