Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/KdIT9Kb87mnN--kwnMNaY-2piL0.roa
File: KdIT9Kb87mnN--kwnMNaY-2piL0.roa (raw, json)
Hash identifier: qyUh7y8d2GNG/t9Hx2qLGe4RbT2/I8xQJ6K4PY+XzFQ=
Subject key identifier: 29:D2:13:F4:A6:FC:EE:69:CD:FB:E9:30:9C:C3:5A:63:ED:A9:88:BD
Certificate issuer: /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial: 0182A77D2DF09E6BEA4E109B20632B484F04
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/KdIT9Kb87mnN--kwnMNaY-2piL0.roa
Signing time: Tue 16 Aug 2022 16:29:34 +0000
ROA not before: Tue 16 Aug 2022 16:29:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50083
IP address blocks: 185.77.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:7d:2d:f0:9e:6b:ea:4e:10:9b:20:63:2b:48:4f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
Validity
Not Before: Aug 16 16:29:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29d213f4a6fcee69cdfbe9309cc35a63eda988bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:29:dd:c4:c3:1e:48:ba:69:32:0e:e1:9a:
26:49:3a:0d:95:43:38:dd:aa:43:ba:51:e5:cd:26:
fd:6f:d9:a3:e2:7b:ad:d8:15:15:a4:b0:ed:04:c3:
94:46:85:76:7c:e2:00:3c:d4:5e:f3:86:59:1b:c8:
29:22:61:43:34:60:60:5f:71:4d:6a:14:77:a5:87:
d2:f9:c4:f9:94:da:e0:69:49:e2:7c:5d:56:89:24:
ee:8a:30:95:c2:5c:8a:03:60:8e:00:e4:83:ea:ad:
49:39:a0:cf:72:ce:1f:12:87:71:b2:8f:65:3b:c5:
a0:ea:bb:e5:fe:22:1e:71:76:13:02:8f:26:f2:ae:
06:d9:b5:1a:55:43:03:0f:bf:37:42:f7:3c:63:39:
47:18:d5:8b:ab:31:28:74:8b:d4:d3:fd:1d:e7:8f:
ef:16:4d:c1:af:8d:70:73:31:fb:f1:ec:ce:0a:b8:
e8:e0:c4:b5:de:57:f4:43:cf:09:ed:cb:e6:d6:dd:
04:4e:94:30:58:9f:24:d1:f7:a2:2d:ff:54:53:27:
ca:87:9b:68:18:8d:11:be:58:60:b7:8d:bf:e7:fd:
94:b8:d2:47:f7:17:ce:2f:dc:cc:c7:d1:66:ab:e0:
c0:8a:a3:ee:d8:e6:90:48:92:3a:c2:9b:71:d3:43:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:13:F4:A6:FC:EE:69:CD:FB:E9:30:9C:C3:5A:63:ED:A9:88:BD
X509v3 Authority Key Identifier:
keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/KdIT9Kb87mnN--kwnMNaY-2piL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.15.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a7:ff:18:a3:87:14:cb:2c:d7:56:bf:a9:90:01:47:bb:4e:
4c:2e:d5:30:4c:08:a0:25:d9:c0:ab:da:22:4c:dd:44:28:5c:
6e:35:77:62:70:bd:86:e5:8d:3b:4b:8f:c5:b3:54:9f:8a:ba:
ab:df:c3:31:69:a7:f4:69:be:00:db:d9:91:b8:11:81:27:51:
66:be:24:32:df:14:01:2e:56:37:16:4b:c1:90:6f:bb:bc:84:
25:94:c6:a2:3d:64:70:0a:49:cc:0f:55:ec:49:d8:f4:35:c6:
03:4f:95:7e:b6:07:ed:7b:2d:c2:60:93:37:00:e7:0b:97:5c:
27:ff:64:0d:65:41:6d:71:1a:7f:9e:05:7f:51:d9:c4:e6:ff:
d2:2f:f9:ba:ff:de:37:21:62:2b:34:12:38:6b:0d:0f:c6:a1:
88:54:cc:82:4c:f3:8e:47:23:2c:2d:e8:7e:e9:30:97:9b:7a:
3d:54:e1:0e:3e:d4:5d:7e:b3:20:c9:68:1a:d5:f9:10:6e:1a:
3c:10:ab:a4:f7:9c:d9:73:3c:4c:31:4d:e4:d5:f1:fd:ea:bb:
65:ad:e2:0e:21:42:67:37:c6:77:bb:66:46:7c:c2:13:d1:c5:
6f:88:4c:e5:30:7e:8f:ee:e7:c2:2d:23:6f:ac:a0:8a:ff:6e:
49:71:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net