Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/kKEse4ERHND15TSFNC9fEajv37I.roa
File: kKEse4ERHND15TSFNC9fEajv37I.roa (raw, json)
Hash identifier: judc3nrl00gd5EB2urMZP8hu4MlNi+FIhWYzPxS7lwM=
Subject key identifier: 90:A1:2C:7B:81:11:1C:D0:F5:E5:34:85:34:2F:5F:11:A8:EF:DF:B2
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 013DC660
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/kKEse4ERHND15TSFNC9fEajv37I.roa
Signing time: Sat 01 Jan 2022 00:58:30 +0000
ROA not before: Sat 01 Jan 2022 00:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212140
IP address blocks: 185.226.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20825696 (0x13dc660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Jan 1 00:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90a12c7b81111cd0f5e53485342f5f11a8efdfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:51:ff:10:1b:3c:42:8a:09:fc:43:6b:cd:
f5:e9:7f:28:d2:14:fd:d0:8a:b4:9d:53:53:37:a8:
f3:c6:ff:b2:f0:a6:18:7b:95:2f:85:0e:db:63:06:
03:a6:90:52:dc:81:0d:ef:9f:40:d9:da:1b:5f:5a:
be:49:74:13:e0:4d:91:f4:fb:c0:83:48:ed:eb:84:
af:80:51:1c:7f:de:aa:aa:65:bd:ff:0a:2c:ad:ed:
83:29:3d:74:18:24:12:96:7e:78:d3:16:ae:56:5a:
f7:c6:4d:61:62:bd:c9:be:ff:9b:f6:53:f0:7a:9a:
c3:47:b8:94:33:ec:37:2a:c5:ee:75:ec:fa:a6:56:
c2:50:20:2e:73:5e:64:d0:58:f1:2c:cc:4e:01:5e:
55:03:e3:76:31:e1:dc:98:5a:ed:56:37:c2:dc:29:
f6:e6:13:3b:a0:d9:aa:49:97:b5:04:05:91:d5:b2:
c6:fd:a5:fa:f4:ff:6a:60:b1:75:08:f4:5f:2e:61:
98:36:c9:fb:9e:1c:00:f4:f2:db:27:22:50:a0:7e:
ef:a4:03:8a:17:67:d9:ae:fd:ab:25:9c:c2:b5:e5:
fc:d9:2d:90:b5:bd:01:7b:f6:e9:76:2f:59:ed:1b:
3f:68:37:a3:ab:6f:9c:91:22:46:02:93:fe:54:01:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:2C:7B:81:11:1C:D0:F5:E5:34:85:34:2F:5F:11:A8:EF:DF:B2
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/kKEse4ERHND15TSFNC9fEajv37I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e7:71:f1:fe:13:dc:ab:e5:7d:25:cd:c3:82:de:c2:a2:b6:
4b:b3:24:85:f6:52:10:bf:62:ab:d8:6f:8b:62:1e:99:e3:e8:
7f:ef:2f:e5:fb:51:03:b6:e0:ef:48:6b:79:8d:5b:1b:01:fe:
d5:40:86:9f:64:fd:09:eb:64:6b:6a:7f:28:c2:34:ed:3d:5e:
8a:b6:d9:54:b4:e9:53:d0:ec:0d:17:a6:67:57:3a:29:e0:17:
70:b0:ef:0b:b1:e8:1c:41:5d:70:3f:78:a8:b6:d0:7f:aa:e7:
e8:70:3e:ea:c2:c2:fa:7d:d1:79:ba:c9:e5:ee:64:76:cc:32:
58:1a:1d:d3:ad:86:56:67:ec:0d:58:ea:9e:bc:38:f4:4c:cd:
17:ea:de:e7:3e:3a:ed:a5:84:1b:95:77:4d:fb:ba:72:4d:f5:
fc:b6:f2:71:17:f2:12:fc:96:79:ac:51:c2:ce:01:62:25:b9:
79:c4:12:2c:1f:fa:d2:77:a6:e3:5c:b0:1f:55:ac:b3:b3:8f:
68:05:e1:3f:55:36:68:75:d2:63:0e:f5:fd:2b:b9:7a:eb:dc:
31:da:2f:a9:5c:92:91:88:da:2f:24:c5:ab:6e:67:ed:c6:9d:
ee:aa:6b:1b:89:ac:1f:ee:94:22:3e:c5:ae:41:98:b9:be:a8:
e8:45:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net