Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/Fsde1z0JZ_PxmD_w9sElX1YoCFg.roa
File: Fsde1z0JZ_PxmD_w9sElX1YoCFg.roa (raw, json)
Hash identifier: XEODXhbiaDhiQUJB8G1wgH3ZFqC6FmXV8ovQpJ7b/p8=
Subject key identifier: 16:C7:5E:D7:3D:09:67:F3:F1:98:3F:F0:F6:C1:25:5F:56:28:08:58
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 01821BB3C79BAD52E9DE60AE98A12A94CCB9
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/Fsde1z0JZ_PxmD_w9sElX1YoCFg.roa
Signing time: Wed 20 Jul 2022 13:02:23 +0000
ROA not before: Wed 20 Jul 2022 13:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21382
IP address blocks: 193.189.158.0/24 maxlen: 24
193.189.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:b3:c7:9b:ad:52:e9:de:60:ae:98:a1:2a:94:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Jul 20 13:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16c75ed73d0967f3f1983ff0f6c1255f56280858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:a2:e3:80:d0:6f:f6:6c:00:70:92:00:7c:
fc:77:70:bf:ac:29:25:86:5c:01:3e:e3:f8:4d:2a:
5c:b8:46:07:99:67:f9:09:ef:ea:e6:2e:61:8b:62:
25:c0:68:22:46:9f:3d:6f:f4:3c:f6:74:0e:94:3a:
97:9d:26:82:f0:05:e3:9d:52:4e:7e:22:70:cf:a6:
41:cd:3c:9c:c5:91:b2:54:4f:e7:68:ad:50:1d:06:
c8:ce:b8:64:b8:ad:7c:47:de:73:d5:d0:60:9e:51:
da:a1:db:85:2a:ad:1d:74:1c:bc:ea:86:f4:aa:29:
60:cf:62:26:a5:7a:66:90:1c:a1:31:35:5a:21:70:
22:5b:5d:94:f5:f9:4d:98:1b:e5:3f:37:b6:3a:2a:
6e:52:a5:90:f7:1c:20:6f:8a:f4:b5:63:d6:28:4f:
e1:29:b7:37:e9:7e:64:8b:69:7a:38:2a:55:ae:93:
58:aa:04:bb:ef:a8:d2:2d:72:c2:d0:a4:6f:72:25:
fc:9b:06:04:d3:66:fb:e2:bf:35:bd:65:6b:83:8d:
c4:e1:ed:fc:52:62:cc:40:52:e7:af:80:8a:9c:ae:
db:8c:0d:e2:81:73:69:f6:1e:44:4f:be:d8:3d:a7:
4b:8f:87:82:9c:de:5f:42:67:1d:ff:e9:24:1c:c0:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:5E:D7:3D:09:67:F3:F1:98:3F:F0:F6:C1:25:5F:56:28:08:58
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/Fsde1z0JZ_PxmD_w9sElX1YoCFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.157.0-193.189.158.255
Signature Algorithm: sha256WithRSAEncryption
75:5c:b8:69:81:cf:d8:95:77:77:08:7d:5f:2a:48:64:2e:93:
d4:67:38:4d:7e:0a:78:8f:f2:ee:cc:40:50:ef:2c:7d:be:e1:
29:08:a3:66:60:71:8a:2c:c6:80:58:6d:c3:ef:f7:64:2c:f9:
dc:00:54:6c:cb:26:3d:1f:5c:bb:36:ea:ac:fe:86:c7:3f:5d:
0a:75:d4:9b:2d:4a:78:42:4e:f5:91:bb:fe:cf:31:98:14:f8:
7b:55:40:f6:e6:dc:e1:f2:f0:1f:08:bf:ab:f4:b9:38:22:aa:
b2:63:62:15:a1:47:b4:62:10:f0:09:74:13:b9:53:5a:68:30:
5b:44:85:fd:9e:e7:9b:ca:36:74:dd:7b:de:b4:45:ac:0d:bb:
88:e4:3f:d7:14:46:81:32:64:83:60:78:15:b9:cc:89:f5:3d:
d0:63:cd:fc:7a:ba:87:34:4e:9f:fe:89:e3:3e:e5:e7:1a:73:
cf:db:e7:63:27:93:5c:b9:58:25:82:d6:ee:fc:98:8a:ce:10:
3b:be:76:d0:de:e6:d0:3d:75:9d:f3:37:3e:49:72:30:1d:30:
09:c8:cf:e5:02:e8:15:3e:99:c6:c1:8d:e7:47:f5:14:e0:3f:
ae:43:ec:75:89:1a:c9:d5:39:6e:b0:e2:48:72:f1:c6:22:b6:
2d:e0:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net