Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/B8hbMEHZeR1YxAlkZpL1MrjfP7U.roa
File: B8hbMEHZeR1YxAlkZpL1MrjfP7U.roa (raw, json)
Hash identifier: t3HmAA/GgUL2Dm9t8plueNFX+w0ZfJ4WEJmaxpsS9to=
Subject key identifier: 07:C8:5B:30:41:D9:79:1D:58:C4:09:64:66:92:F5:32:B8:DF:3F:B5
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 0185627BDA0E99B3BDF402D66B8B1C3BADC4
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/B8hbMEHZeR1YxAlkZpL1MrjfP7U.roa
Signing time: Fri 30 Dec 2022 10:02:41 +0000
ROA not before: Fri 30 Dec 2022 10:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56505
IP address blocks: 91.223.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:7b:da:0e:99:b3:bd:f4:02:d6:6b:8b:1c:3b:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Dec 30 10:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07c85b3041d9791d58c409646692f532b8df3fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:47:f9:fb:35:1e:56:c0:af:9c:82:b5:0e:
a3:de:7b:a1:e8:e9:14:ab:df:25:bd:de:11:53:8d:
bc:bb:86:d4:f0:77:b9:89:30:c8:f0:f3:30:42:dc:
9e:df:5b:c3:59:1c:37:b8:2d:f1:50:09:82:2b:2c:
16:29:52:da:97:39:4a:b7:0c:be:82:d7:76:39:3d:
e2:93:dd:6e:63:c6:50:52:a1:68:f7:e9:9a:0c:e3:
a5:82:90:f5:c0:2f:6c:d8:bd:0b:6c:bd:3b:dd:d6:
f3:1b:39:c2:c4:86:99:93:b1:ab:5e:a6:35:7b:70:
b9:26:25:a0:8b:b5:5f:1e:a4:3f:b3:33:36:ea:cb:
a9:5e:38:2e:a0:5a:fd:63:4a:81:1e:49:71:bf:a6:
74:11:bb:95:37:f2:ba:de:c3:e1:df:e1:3a:b8:53:
91:53:e0:c4:d0:f3:c7:f0:71:13:52:64:3b:2b:3a:
31:01:97:cf:29:fc:c8:c6:24:f8:a8:92:16:38:f3:
28:6a:fc:52:f9:26:fb:dd:70:23:93:6e:e1:3f:e1:
b5:d3:35:9b:31:55:6b:e9:73:32:9d:56:b8:a9:c4:
62:04:06:eb:82:47:94:3e:51:50:77:46:67:31:11:
cd:e3:81:66:03:8a:c0:d1:6d:f0:1d:25:ba:a8:fd:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C8:5B:30:41:D9:79:1D:58:C4:09:64:66:92:F5:32:B8:DF:3F:B5
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/B8hbMEHZeR1YxAlkZpL1MrjfP7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.198.0/24
Signature Algorithm: sha256WithRSAEncryption
51:78:41:b9:13:a1:f7:58:3a:7a:00:be:5d:1f:9a:36:a6:e2:
21:85:23:6b:35:0a:72:8b:91:b0:41:12:07:a2:cc:d9:c8:02:
08:e9:97:23:a1:90:c3:9f:d0:63:e6:3e:8a:2c:de:c9:05:35:
1b:68:00:57:58:cf:d2:bc:56:39:fd:01:a3:27:cf:55:c4:9f:
39:fa:b0:c0:6c:7b:b7:c3:34:4c:16:94:8c:9d:0d:bb:17:73:
1e:81:f5:72:3e:7f:82:82:06:44:83:b0:d4:69:17:dc:e8:b2:
2c:38:47:81:aa:7f:3a:f8:7a:aa:c9:8b:07:1a:c0:a2:92:eb:
bf:bb:9a:a2:fa:de:80:1c:50:e1:f7:86:19:2b:88:0e:e5:de:
0b:53:8e:74:4b:62:12:43:c7:21:20:fd:5e:9c:27:8b:05:9c:
7f:68:a1:b9:c3:d5:da:db:93:0b:62:18:4b:cc:37:17:fd:23:
90:47:66:71:9d:83:d3:ed:45:c9:5a:ef:55:db:41:c8:a2:a7:
14:57:0c:51:29:eb:1a:fd:e7:81:ee:03:c6:d0:2e:c0:2e:49:
e7:bb:02:28:8d:86:4f:74:f3:08:8b:d7:02:d3:b5:60:d4:2d:
50:5d:fb:98:1d:67:1d:a0:39:bb:84:9b:25:9a:7c:c2:aa:28:
25:99:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net