Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/Zc4vsFqWRml3xXrXRhbCnnmn2-k.roa
File: Zc4vsFqWRml3xXrXRhbCnnmn2-k.roa (raw, json)
Hash identifier: FaKQt2hLGNsp1z3xWbelSUjVXpWE06/wx9FyddfY4nQ=
Subject key identifier: 65:CE:2F:B0:5A:96:46:69:77:C5:7A:D7:46:16:C2:9E:79:A7:DB:E9
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 04D6F0D9
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/Zc4vsFqWRml3xXrXRhbCnnmn2-k.roa
Signing time: Wed 26 Jan 2022 09:11:00 +0000
ROA not before: Wed 26 Jan 2022 09:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49382
IP address blocks: 134.255.248.0/24 maxlen: 24
185.233.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81195225 (0x4d6f0d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Jan 26 09:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65ce2fb05a96466977c57ad74616c29e79a7dbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:71:e3:33:92:09:f6:ec:a8:c1:8c:c8:d5:
cd:1d:af:ce:cc:57:b7:f6:fb:39:02:a1:e4:e8:17:
35:09:c2:f7:eb:be:6c:61:55:11:b9:f8:a0:d6:33:
a5:19:04:64:05:1b:60:76:c5:cf:04:74:e8:78:c2:
63:72:61:6b:02:6a:02:fc:70:e4:cd:c3:6f:fb:c1:
9e:ef:c7:e7:ff:48:6a:0c:87:8a:c5:2a:6e:40:60:
b1:d3:fe:85:ae:0b:c7:0b:ba:13:2e:f9:f2:4b:ca:
1d:d8:8d:a1:87:47:1d:f9:96:fb:b3:6e:2e:34:a3:
41:04:d8:88:b4:99:d8:ab:12:c3:9b:e5:86:59:69:
02:f9:f9:16:80:0e:12:0c:a9:ab:85:6b:b7:3b:28:
0d:bf:4e:9e:11:5d:22:f0:e9:68:18:5e:d9:d9:22:
21:13:31:d6:fb:1c:26:b8:5e:91:12:ec:a6:de:a9:
30:41:17:5d:f1:f7:bc:e4:20:4e:a1:b8:53:22:ad:
a7:a7:78:68:72:40:70:01:70:02:23:5b:2e:a5:0c:
8e:a0:ff:28:52:9b:dc:11:a9:e3:1e:b0:ee:c7:74:
67:cb:f6:31:a1:b9:ef:90:9b:77:35:16:7e:1f:ba:
dc:e8:06:84:ae:d6:88:5f:b4:45:a3:94:13:5a:c9:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:2F:B0:5A:96:46:69:77:C5:7A:D7:46:16:C2:9E:79:A7:DB:E9
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/Zc4vsFqWRml3xXrXRhbCnnmn2-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.248.0/24
185.233.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f1:7a:03:cf:cd:03:d4:1d:bb:33:d1:28:ba:cf:32:ec:93:
70:e8:b1:a9:ba:25:c2:15:26:fa:5b:a6:a3:de:61:50:90:16:
cd:30:9d:ec:25:4a:f0:1c:dc:5d:42:12:a8:c6:8c:28:37:33:
82:7e:22:6c:47:85:4c:c6:a6:95:77:10:07:7c:db:20:9a:83:
3d:74:cb:21:69:c9:c6:7a:83:0a:18:00:1a:d0:d2:3b:e2:e8:
b8:6f:0f:87:fe:c0:c0:54:39:5b:9b:70:12:e9:62:b7:6f:e3:
65:0d:ca:8d:bc:ef:e9:32:96:df:ad:57:40:51:f0:c6:c7:1c:
e7:38:f0:68:0c:0c:af:86:0e:ea:42:c7:a3:8d:ca:c1:63:75:
45:09:51:1f:c9:66:31:0f:ad:ff:57:a3:05:52:9e:eb:27:50:
a3:c8:71:a3:9e:fe:de:b3:44:41:1a:86:11:78:59:77:f7:4f:
9a:6b:f8:bf:93:47:a5:41:4f:b9:6b:aa:f3:f9:54:d1:9b:9d:
06:19:dc:90:cc:17:f5:df:90:db:40:e7:1f:5e:0a:03:7c:26:
0a:9b:d0:90:25:59:a1:87:39:19:52:8e:f2:9f:6c:ef:b0:19:
39:a6:29:5b:ae:61:8d:5f:ac:c3:4a:40:99:33:04:e5:79:34:
ec:36:9f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net