Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/EXzVosQiibZqEcr734MMUBWZOCc.roa
File: EXzVosQiibZqEcr734MMUBWZOCc.roa (raw, json)
Hash identifier: UqYAzxbUrKXNkAPNMxhSZtZnyEDXFJBPcpM0TsJ4Egc=
Subject key identifier: 11:7C:D5:A2:C4:22:89:B6:6A:11:CA:FB:DF:83:0C:50:15:99:38:27
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 0183AC6D14A595D2ABEF25FBDD1BA01A03EA
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/EXzVosQiibZqEcr734MMUBWZOCc.roa
Signing time: Thu 06 Oct 2022 08:32:53 +0000
ROA not before: Thu 06 Oct 2022 08:32:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35800
IP address blocks: 194.88.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:6d:14:a5:95:d2:ab:ef:25:fb:dd:1b:a0:1a:03:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Oct 6 08:32:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=117cd5a2c42289b66a11cafbdf830c5015993827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:7b:8a:f9:d3:97:7c:c5:c5:b1:25:4d:be:
6a:66:3e:4a:54:87:45:5d:4f:f4:4a:a8:3f:ba:5a:
16:03:92:b6:58:2e:08:2c:d3:c7:da:eb:17:d2:87:
0a:32:f3:16:a5:b8:c5:79:1a:1a:53:cd:3b:cf:a1:
58:2b:0f:71:d7:c3:56:3d:28:47:0b:51:c3:d6:ce:
72:ea:ce:61:fe:c6:a8:04:93:32:f6:46:c5:40:e2:
c5:70:a2:2b:4f:10:e2:98:89:68:72:79:cf:5c:40:
58:67:2c:74:fa:1a:2e:8c:ae:9d:04:00:ed:99:70:
69:18:28:0c:c7:d2:d2:9a:d4:48:37:49:b5:92:d6:
65:68:42:fa:1d:8f:fe:2b:96:b9:b3:b3:48:19:ce:
fb:fb:21:9e:e3:e6:51:5e:7d:83:0d:01:9a:fd:10:
06:63:a4:85:ac:58:34:9a:8c:de:ec:4b:14:78:60:
3a:f6:a1:65:de:74:6b:09:b7:41:3f:64:5f:91:2e:
c7:cd:8a:e6:b4:8d:19:01:8f:98:e2:d9:ec:d4:ba:
74:d3:b9:db:a0:17:e0:5a:cd:8b:17:26:a4:71:d2:
f5:35:7f:ee:f7:9e:e9:a6:d4:05:d5:9c:4e:f7:c9:
10:0a:bf:c2:a9:71:20:89:56:c0:52:a2:fa:7c:e8:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7C:D5:A2:C4:22:89:B6:6A:11:CA:FB:DF:83:0C:50:15:99:38:27
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/EXzVosQiibZqEcr734MMUBWZOCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.152.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:e7:a1:d0:29:3b:56:38:50:f4:1b:9c:0f:2b:dd:06:34:2f:
bf:24:ee:17:18:62:25:8f:5d:83:c3:cd:5c:44:34:63:13:eb:
20:ec:7f:fc:24:40:bf:50:60:d9:fa:91:ee:af:ea:f0:40:68:
a1:a6:28:5b:e0:5e:9b:e3:10:72:42:6b:80:9d:ef:5c:5e:07:
23:96:a0:0f:65:b0:9c:09:00:f3:d3:95:a4:ef:59:07:1e:5c:
3c:a5:84:13:b1:a9:e2:5b:5b:0a:46:ca:e8:b1:ec:1c:95:c9:
c3:77:74:3a:67:6d:77:4e:5a:eb:34:ec:2b:d5:27:34:41:e9:
f3:4e:74:79:34:18:da:92:f6:f9:c1:37:a6:83:0b:e8:aa:cd:
72:96:c4:c2:26:3d:ca:40:f5:6c:aa:e0:9d:e0:f6:c1:ee:78:
dc:66:9a:af:cc:c6:5c:b6:7c:a1:84:21:d7:3b:06:31:99:ac:
be:be:c5:eb:75:ca:76:e1:11:59:02:31:09:f6:46:df:f0:3c:
60:22:ae:9c:ee:70:82:6b:93:ed:05:a6:02:8a:c7:3a:77:e7:
1c:77:14:17:0d:8c:f8:d3:83:a4:e0:85:e2:83:0f:fe:c3:dc:
0a:b0:04:7a:a0:0f:a8:8e:d0:1a:b1:01:a5:7b:bc:89:bf:f8:
02:55:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net