Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/4RIsDw4FvCW4lUkZLbjca2TifN8.roa
File: 4RIsDw4FvCW4lUkZLbjca2TifN8.roa (raw, json)
Hash identifier: /yeD9BWxa93UXn6N4m/J6mYzUDg/iJdqJSAExl61OS8=
Subject key identifier: E1:12:2C:0F:0E:05:BC:25:B8:95:49:19:2D:B8:DC:6B:64:E2:7C:DF
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 0B234B
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/4RIsDw4FvCW4lUkZLbjca2TifN8.roa
Signing time: Sat 01 Jan 2022 00:54:51 +0000
ROA not before: Sat 01 Jan 2022 00:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50647
IP address blocks: 185.181.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729931 (0xb234b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Jan 1 00:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1122c0f0e05bc25b89549192db8dc6b64e27cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:c7:3a:58:dd:f9:6c:61:f4:43:7c:b1:85:
22:7d:4b:4c:1f:94:2c:a6:cb:7b:d7:b5:e9:22:52:
73:75:86:fe:d8:b9:71:bd:13:48:25:c4:e2:64:7f:
39:fa:d8:5e:00:d8:c8:ad:d3:9a:ac:62:fb:0f:01:
eb:e5:6e:1c:f0:9e:27:7f:5b:0f:9b:2a:06:75:bd:
5e:1a:1e:4b:f0:78:e7:4d:e8:70:63:f5:63:fa:1a:
83:16:9a:99:cb:a7:e6:98:b0:4e:d3:45:a6:5c:40:
9c:ce:07:9c:d0:ff:ea:65:4b:cb:bb:f3:98:14:11:
6e:3d:b2:5d:91:72:d2:fd:40:49:e1:fc:53:27:24:
98:d8:23:9e:e9:60:0f:a6:ad:7a:40:44:e8:39:97:
21:3a:28:9d:6e:71:5c:57:6e:c7:0a:c7:62:84:f4:
49:db:12:0f:7d:85:01:30:5b:5f:fe:1e:a3:9a:86:
cc:c9:fb:87:c7:9b:b2:c0:20:a3:d0:ba:8d:71:8b:
15:4d:06:1d:37:a1:57:a0:7a:e3:9c:18:5b:a6:de:
ba:ac:13:23:a9:b5:8f:da:c0:de:0c:e8:be:84:be:
ad:76:f4:97:79:7d:1d:79:40:d5:66:00:de:a7:fc:
48:df:50:bb:17:0c:25:1b:a7:68:2b:b7:40:23:be:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:12:2C:0F:0E:05:BC:25:B8:95:49:19:2D:B8:DC:6B:64:E2:7C:DF
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/4RIsDw4FvCW4lUkZLbjca2TifN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.248.0/22
Signature Algorithm: sha256WithRSAEncryption
81:4c:7e:ad:7f:f9:08:ce:57:fc:28:8e:79:00:0d:11:4b:16:
60:8d:be:dd:9b:44:11:95:c2:d6:66:c2:8d:75:46:25:8d:bd:
9d:4f:96:06:74:5e:ba:0c:ea:f0:4a:c9:85:e5:44:be:41:02:
74:42:15:dc:26:bb:6f:6c:46:9a:b9:7d:73:c2:c6:05:c1:41:
5a:27:bc:c0:80:05:ab:ba:da:64:c0:fd:b0:a9:85:56:43:4f:
ea:9a:8c:f7:03:20:7b:46:81:d9:b0:f3:a9:f3:63:81:3b:55:
59:2a:6b:40:d8:be:32:be:04:39:7f:d6:60:85:20:60:4d:ca:
9b:80:c6:8d:cd:d0:94:9c:ab:64:57:a6:f1:a5:0b:28:29:2d:
34:ce:d5:83:a3:20:a1:0a:4e:83:0f:a7:f0:78:e7:b5:22:27:
17:2e:4a:4e:15:9c:48:e0:98:b5:09:3e:11:b2:41:d4:53:8f:
7f:64:2d:9e:5d:ea:59:29:01:a4:9a:5d:ed:e3:64:15:57:e0:
d5:82:b4:ec:9c:12:11:88:0d:a0:b2:2c:bd:10:32:74:eb:2a:
7e:22:02:1f:3b:b2:cb:77:04:b6:0b:55:9c:fd:b4:f1:f9:51:
ed:c6:df:38:b7:6b:64:ec:d9:d0:15:0a:6a:a2:9b:c7:90:00:
0b:82:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:53 2023 by rpki-client on console.sobornost.net