Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/sRxJxuAhB7APAcpH5RhbEqKt2kk.roa
File: sRxJxuAhB7APAcpH5RhbEqKt2kk.roa (raw, json)
Hash identifier: iEKvqzCZqBbslcVj1uTCcO2ttPEnvDBmEC9MJDrwVhQ=
Subject key identifier: B1:1C:49:C6:E0:21:07:B0:0F:01:CA:47:E5:18:5B:12:A2:AD:DA:49
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 03EA2B1D
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/sRxJxuAhB7APAcpH5RhbEqKt2kk.roa
Signing time: Sat 01 Jan 2022 15:07:27 +0000
ROA not before: Sat 01 Jan 2022 15:07:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 216671
IP address blocks: 193.163.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65678109 (0x3ea2b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jan 1 15:07:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b11c49c6e02107b00f01ca47e5185b12a2adda49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:de:e1:2e:68:f8:54:fe:ab:90:be:80:16:
b6:c9:e9:2e:3f:4b:a7:11:37:a9:ab:61:5b:ea:6c:
cd:e9:50:3f:9e:cd:0c:52:a9:36:16:e3:56:af:35:
6f:7e:b0:45:fd:19:60:a7:c0:10:70:a2:95:91:dd:
3e:84:ae:8e:d4:3d:14:74:c6:80:20:50:e8:b1:04:
62:4c:4c:61:4e:b2:36:c9:f2:36:87:0b:0e:a5:f5:
a5:e4:ba:1e:31:ef:b4:14:8a:86:7d:02:c9:42:a1:
f7:54:be:51:d7:57:07:a2:76:fc:9a:d8:11:dd:47:
d6:0f:af:37:9d:13:ea:62:70:63:9e:97:c9:4d:fe:
e7:78:b7:5b:ab:3d:76:bb:3f:64:d6:96:1e:e2:63:
5c:4a:54:30:c2:f0:f8:71:e2:c3:97:73:03:04:77:
63:e1:27:92:de:40:67:95:eb:6a:fb:d5:aa:4f:62:
32:12:5c:b1:3c:9a:47:ca:1e:66:a6:7b:e8:f7:bb:
49:97:21:1a:a3:75:d4:6d:78:89:c6:5b:88:de:72:
f1:d0:d3:47:a3:8a:e0:46:0f:a5:e5:5d:8b:8f:b6:
05:43:a3:d8:0f:72:6b:51:14:2e:72:16:c4:d1:45:
99:57:5c:9f:fe:35:58:45:19:77:b6:bf:c1:64:6f:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:49:C6:E0:21:07:B0:0F:01:CA:47:E5:18:5B:12:A2:AD:DA:49
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/sRxJxuAhB7APAcpH5RhbEqKt2kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7c:3a:2a:79:2f:17:6d:37:86:0f:19:ae:77:2e:c5:97:95:
18:e1:fb:42:7b:b4:38:ef:b3:6a:b8:51:eb:8a:cc:e5:14:75:
71:66:7b:a8:9a:7a:d2:f7:b2:d5:4f:a6:d8:e3:7d:d1:ce:a7:
b0:a3:a5:f3:f0:17:de:64:45:b4:17:dc:10:a5:bf:be:c4:75:
1f:79:bb:67:6f:34:2a:d4:52:fc:24:af:30:16:3a:af:df:f6:
2f:1c:d9:f1:58:dd:72:c2:ce:73:d6:a0:d0:c2:0a:03:52:3e:
91:7b:e1:09:90:62:0f:45:9f:0c:72:1f:03:28:9b:99:36:ae:
e8:af:7a:03:0f:06:e1:3f:e9:e7:04:2e:1b:61:52:42:3e:cf:
39:fc:aa:a3:bb:5f:1b:97:dc:9e:3e:14:f3:e9:68:44:c3:31:
cd:8a:3c:2b:a4:e1:14:47:e3:ba:fd:de:45:99:aa:0c:62:fe:
98:d9:f2:0e:74:b7:8a:4c:8e:84:45:44:c1:22:8a:d9:0e:7b:
54:89:b9:43:93:22:69:df:5a:8c:89:80:04:8b:57:78:fc:ee:
12:e3:f4:be:6c:9d:fb:96:e1:70:bf:ad:3a:6f:c1:bb:48:3f:
01:be:7d:86:54:f5:c1:99:81:a3:97:31:dc:58:12:1b:13:6c:
c4:e6:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net