Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/6il1Z9rNTOpM8aaBS9BHGPqSmh0.roa
File: 6il1Z9rNTOpM8aaBS9BHGPqSmh0.roa (raw, json)
Hash identifier: uTHqJm7CjKEqlBmyVqrDPuLOVW71ungGnIoDyKAtbzI=
Subject key identifier: EA:29:75:67:DA:CD:4C:EA:4C:F1:A6:81:4B:D0:47:18:FA:92:9A:1D
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 0A47CEA6
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/6il1Z9rNTOpM8aaBS9BHGPqSmh0.roa
Signing time: Sat 01 Jan 2022 01:01:28 +0000
ROA not before: Sat 01 Jan 2022 01:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35262
IP address blocks: 193.27.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172478118 (0xa47cea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Jan 1 01:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea297567dacd4cea4cf1a6814bd04718fa929a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:59:50:2a:a2:b8:b1:4e:5e:7e:db:63:83:
14:b0:e7:9b:34:f4:9c:06:d0:c3:f8:1b:13:0d:1e:
b2:62:eb:fb:51:e0:3b:c0:16:ba:0e:a3:af:31:f3:
67:d3:5d:4b:ec:85:23:c3:22:58:d7:3f:4a:d0:ce:
45:b6:a9:7d:84:ad:f2:15:34:dd:d6:40:1d:21:5f:
83:d6:44:bc:b6:7f:c9:d4:e7:98:eb:d8:95:08:2c:
eb:fa:34:65:d8:c2:56:f8:55:90:22:b2:56:e9:db:
07:f9:ec:d6:5a:70:9f:c4:97:0b:6f:9d:10:a1:67:
f4:e3:06:4a:28:6e:2e:8c:55:1e:df:f9:59:5a:62:
b2:ee:a2:b2:79:0d:a3:53:3b:e7:8d:44:be:3e:0d:
c2:f6:77:b9:e4:8b:d2:f7:66:e8:6d:64:f8:00:98:
ce:74:c9:2d:71:b7:4e:81:c2:bf:ee:5e:06:a6:23:
6b:b2:c2:e6:b5:38:a8:76:95:5d:02:64:6a:e3:8a:
7c:d6:42:41:28:87:1c:ca:8b:28:34:7c:bf:15:ab:
af:60:41:83:ef:8d:c1:89:5f:1b:31:c7:b8:a9:43:
4e:f3:06:84:89:56:8e:93:ba:c4:25:c9:0f:1f:c6:
4c:09:c3:23:0e:ff:f7:ac:09:d0:64:d9:b3:71:cb:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:75:67:DA:CD:4C:EA:4C:F1:A6:81:4B:D0:47:18:FA:92:9A:1D
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/6il1Z9rNTOpM8aaBS9BHGPqSmh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f4:be:9c:19:38:23:39:1a:63:5d:28:5e:b9:5d:dd:f0:fe:
ae:d2:f7:b2:3e:c1:b6:c0:54:b3:10:06:a3:b5:75:9f:ee:76:
9b:36:f2:78:f1:5d:f9:c9:9e:e1:6c:d2:0e:28:75:89:38:cd:
1f:5e:e2:f7:26:cc:f0:dd:e9:49:63:70:fd:68:01:e5:c3:a0:
71:24:ff:8e:72:f4:3f:83:01:c2:5f:b4:b5:8b:95:e8:46:c1:
35:c5:13:bb:4f:db:69:fe:ad:10:24:e7:d3:f3:a0:74:25:ed:
6d:d5:9e:69:39:fa:aa:06:a2:c6:74:9f:12:65:79:b6:bf:d9:
2a:49:c6:7e:df:ea:ba:e2:3b:5e:2a:bb:3c:02:db:b5:63:02:
3d:b9:3a:2e:01:78:a7:77:89:49:52:fc:60:6c:52:46:95:4c:
d6:36:86:60:28:e2:ff:c5:82:d7:3e:cf:f3:94:b8:2c:82:ba:
d6:0a:0e:37:f0:6c:b4:df:f7:32:99:79:10:cf:3a:ac:36:6c:
6c:ab:85:b1:69:99:4b:6b:e1:56:6e:d7:79:87:91:43:df:48:
f2:85:a6:ed:c4:91:44:42:88:0b:a4:33:67:c8:8a:28:26:e0:
43:c3:4c:96:d5:66:da:50:7b:82:48:7f:87:4a:09:99:fc:6c:
ad:3f:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:59 2023 by rpki-client on console.sobornost.net