Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/tTIi2xfli4x9njb4ZePaO7O-G04.roa
File: tTIi2xfli4x9njb4ZePaO7O-G04.roa (raw, json)
Hash identifier: /n/1jrk9NDKab8pZvPQzAkW5CUSmxDngUGuJrXpI+L4=
Subject key identifier: B5:32:22:DB:17:E5:8B:8C:7D:9E:36:F8:65:E3:DA:3B:B3:BE:1B:4E
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 03DF6AF0
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/tTIi2xfli4x9njb4ZePaO7O-G04.roa
Signing time: Sat 01 Jan 2022 04:56:45 +0000
ROA not before: Sat 01 Jan 2022 04:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28840
IP address blocks: 151.236.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64973552 (0x3df6af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 1 04:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b53222db17e58b8c7d9e36f865e3da3bb3be1b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:5a:02:df:34:f5:c4:08:fb:73:b0:03:41:
53:b6:84:d2:1c:31:e8:81:b7:71:4d:21:7b:b0:b4:
64:45:36:34:78:c0:3a:98:4d:a1:17:06:6e:b2:91:
7d:9e:39:f6:1f:15:f0:d0:74:94:fc:30:19:f0:53:
59:56:2b:bf:fd:15:0c:68:a5:51:5c:02:fa:23:3a:
e2:66:9a:04:71:ea:3a:d7:bf:97:72:0c:20:a0:38:
3d:d5:33:b0:a1:9a:dc:ee:ec:a5:23:db:d8:20:f3:
7d:8f:8b:38:2e:5a:4d:3a:53:27:6f:8f:75:03:5a:
b6:00:db:21:7f:c2:a5:a8:26:45:31:e4:e7:b5:29:
3a:5c:b6:c6:32:44:f0:a8:50:b4:fd:89:05:15:a1:
c0:d7:ef:c7:3e:67:2a:68:98:10:91:06:ce:73:2d:
33:d1:92:1c:fd:d9:77:56:57:54:66:cb:72:6d:53:
e6:34:b4:8b:cf:5b:f5:9c:d3:8d:3f:0c:e2:bb:95:
d9:6c:c2:50:aa:1f:ed:4d:17:fb:7d:16:6f:8c:e1:
ba:ce:bf:33:89:0d:bd:2e:e3:69:3e:59:59:82:ed:
e0:b8:a5:85:dd:bc:48:bb:af:5a:75:eb:c4:d3:20:
42:e5:c9:36:cf:07:93:20:34:38:96:e6:08:44:2f:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:22:DB:17:E5:8B:8C:7D:9E:36:F8:65:E3:DA:3B:B3:BE:1B:4E
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/tTIi2xfli4x9njb4ZePaO7O-G04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.104.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7d:79:1a:b3:99:50:9f:9d:92:d2:72:fd:d5:89:0f:22:19:
5f:6a:97:d3:0f:50:a6:64:00:a6:a1:94:66:4b:93:6e:44:07:
9c:0b:66:35:bf:2b:6f:cc:a6:0a:1e:b6:e9:75:2e:99:49:3f:
a5:1c:70:dd:3e:33:aa:95:2d:0d:d0:51:30:49:0f:a6:95:3a:
46:6e:7b:3b:86:b4:22:58:ed:48:d1:e2:c7:7a:54:0e:63:d7:
50:08:21:6c:bc:b6:f4:c7:63:84:c4:c0:e1:e7:ef:b1:19:46:
e5:8e:84:32:8d:aa:b5:e7:dc:7b:4d:a8:c2:7a:fc:7b:89:b2:
e3:ff:3b:9f:b0:8d:16:b4:0b:70:dc:ad:b2:b6:96:50:2c:1d:
56:c8:42:e0:bb:25:cd:e1:b3:7f:0d:0e:19:4f:fb:db:35:1a:
1b:6d:7f:e2:e5:cf:b1:d0:2d:2e:00:6a:bb:9b:fb:ac:64:4c:
97:d6:ed:fa:7b:da:14:f9:62:9c:b1:94:e7:d9:b6:7e:e8:b1:
94:7f:18:37:d1:d1:81:09:87:db:b9:de:9d:84:66:4f:d5:5d:
ef:67:45:c1:65:62:05:10:3b:a4:48:14:8b:1a:15:27:c9:59:
5c:e6:29:3d:64:9a:36:2a:df:c0:1d:17:95:b9:73:8e:f8:3d:
5c:83:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net