Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/FIkbSTHe5amSJfY_ytePkA8ESt0.roa
File: FIkbSTHe5amSJfY_ytePkA8ESt0.roa (raw, json)
Hash identifier: onMKa2vKfUsOVFXEdecBQBYI6ragp31E07TcBC8g1ss=
Subject key identifier: 14:89:1B:49:31:DE:E5:A9:92:25:F6:3F:CA:D7:8F:90:0F:04:4A:DD
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 04E39570
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/FIkbSTHe5amSJfY_ytePkA8ESt0.roa
Signing time: Mon 31 Jan 2022 06:02:17 +0000
ROA not before: Mon 31 Jan 2022 06:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49382
IP address blocks: 134.255.248.0/24 maxlen: 24
185.233.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82023792 (0x4e39570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Jan 31 06:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14891b4931dee5a99225f63fcad78f900f044add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:6e:e0:df:93:27:e2:2b:d5:17:b8:4e:3b:
94:48:cc:1c:ff:00:6f:78:84:e1:51:1e:6c:fd:f1:
36:e6:a7:e8:d1:4c:6e:f5:33:b9:b2:03:d8:bc:c0:
b9:45:74:c9:0c:bf:9e:c7:ad:a7:f3:0e:9e:13:0d:
1f:a7:21:3a:8e:2f:40:d8:ae:3a:64:cc:89:be:20:
28:ff:a4:c4:88:22:bc:02:2d:3b:94:1c:0a:87:24:
4c:50:ec:5c:72:73:d6:77:56:cf:74:2f:e7:06:db:
70:60:c7:8b:d9:8e:42:68:c1:c5:f8:2f:1b:61:e8:
f1:d7:72:72:41:8b:3a:f1:78:49:2d:55:05:b6:55:
00:d2:5b:36:bf:9c:a2:95:05:cf:0b:26:ca:67:e7:
ee:5c:46:e6:05:10:ef:8d:91:29:07:76:51:cf:5a:
02:53:d4:a1:95:2f:10:5b:e7:ec:4e:61:d8:18:28:
ed:81:40:c5:d5:0b:c8:6b:37:ab:57:6b:da:11:cb:
3f:8e:7e:9d:32:f4:c9:71:f7:93:ef:3c:01:09:bc:
72:bc:ec:61:9e:94:d8:1d:33:6b:6d:27:8a:5a:d0:
86:20:b4:d7:08:dc:66:64:22:da:f5:50:78:6b:03:
a8:4d:b4:a8:c9:0b:cc:61:39:f3:cc:52:80:66:ab:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:1B:49:31:DE:E5:A9:92:25:F6:3F:CA:D7:8F:90:0F:04:4A:DD
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/FIkbSTHe5amSJfY_ytePkA8ESt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.248.0/24
185.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
33:3c:71:1b:96:2c:7f:2d:f0:fd:b9:7e:6a:94:f7:dc:b0:58:
d6:8d:2f:9b:94:73:7b:ae:21:18:6c:7f:01:57:27:e1:7e:46:
e5:8e:65:47:23:e9:10:06:6d:ad:fe:e4:d6:75:6c:88:5a:ce:
24:1e:8d:13:43:91:50:00:36:f0:fd:ab:d2:b6:5a:12:db:7d:
4e:f9:9a:fd:1d:34:5c:26:68:09:d8:c2:b2:09:9a:a0:bf:69:
20:f6:bf:dd:aa:18:bb:10:36:9e:64:b7:e2:d3:f2:23:9f:62:
66:6f:7d:a8:46:95:65:24:22:04:ac:19:87:95:6a:a4:81:fb:
46:50:23:55:67:20:11:e5:cd:8a:de:8d:70:e7:ad:e9:22:d5:
79:4c:9d:06:29:34:10:0e:a2:9d:5e:e4:f6:a9:4c:7e:bc:1a:
dc:1b:ec:fb:26:fd:aa:38:4a:c5:fb:cd:3b:85:fe:f5:3b:b9:
f4:5e:32:41:d2:70:0d:ba:0e:d4:d6:11:11:c7:3f:61:b6:76:
ce:08:7d:c4:35:b2:89:7a:b7:d3:23:12:33:da:ff:07:4a:ea:
06:86:a8:4d:05:ae:c6:11:6f:49:e0:3d:9f:ba:a8:13:b7:f3:
c1:bd:22:3b:8a:be:78:51:ad:21:1c:b0:b8:c8:f0:c0:72:08:
41:ec:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net