Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/dwxmvJyntICUhQehoAhwgpB_j8c.roa
File: dwxmvJyntICUhQehoAhwgpB_j8c.roa (raw, json)
Hash identifier: OFVIBLvAt/HZlAjky+5D7HnNuX6h+FqLckmRwIsBRHE=
Subject key identifier: 77:0C:66:BC:9C:A7:B4:80:94:85:07:A1:A0:08:70:82:90:7F:8F:C7
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 06A5F927
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/dwxmvJyntICUhQehoAhwgpB_j8c.roa
Signing time: Sat 01 Jan 2022 07:59:29 +0000
ROA not before: Sat 01 Jan 2022 07:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 192.47.244.0/22 maxlen: 22
192.47.248.0/23 maxlen: 23
134.21.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111540519 (0x6a5f927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Jan 1 07:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=770c66bc9ca7b480948507a1a0087082907f8fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:78:53:80:4a:45:14:51:75:d7:0c:91:e7:
3a:f5:8f:6d:37:06:0e:03:e9:8f:66:48:d9:5f:b6:
e0:7c:31:72:3b:93:5b:b8:c5:cb:ce:85:0c:56:c3:
c4:4a:73:a0:34:d4:ab:0f:bf:8a:29:0d:2c:33:20:
31:ff:aa:8b:06:12:3a:95:6c:bc:2c:0d:d2:81:80:
58:0d:37:71:0f:da:58:74:64:5e:dd:f4:89:72:f4:
a9:d5:57:f7:66:8b:8b:dc:34:75:25:63:f9:4a:25:
53:9f:54:1b:ae:eb:dc:85:17:4d:2b:42:b6:a1:7d:
28:2d:3a:b6:0a:66:b3:ee:d4:9a:e0:fc:66:b1:33:
50:c8:a7:d6:b7:67:af:37:3b:b9:be:c5:9a:d2:d1:
7c:32:dc:5a:bc:8a:80:f0:b3:f1:1c:08:10:49:b1:
c7:8c:10:d9:b9:83:3a:45:80:42:5e:0b:b6:30:c2:
e4:20:4a:cc:59:17:7e:de:81:96:a0:11:c0:d4:1a:
e4:79:38:69:66:10:b4:26:49:fe:f4:3a:60:1a:af:
8c:4a:16:30:82:42:82:fc:f3:45:72:4b:aa:5f:45:
2a:7b:87:2e:33:91:07:a6:87:5b:03:36:02:7a:37:
31:76:6e:98:42:bd:21:16:94:26:ce:df:90:70:e5:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0C:66:BC:9C:A7:B4:80:94:85:07:A1:A0:08:70:82:90:7F:8F:C7
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/dwxmvJyntICUhQehoAhwgpB_j8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.21.0.0/16
192.47.244.0-192.47.249.255
Signature Algorithm: sha256WithRSAEncryption
4d:e6:b4:50:56:c6:9b:e4:30:41:27:4f:6b:a8:69:57:67:14:
c6:3b:9a:b4:32:20:8a:33:cc:09:18:8a:57:f9:92:f9:70:a4:
2b:bb:83:c7:bf:a4:d6:b3:ec:82:d0:9e:ba:73:15:c5:0c:47:
cc:2f:de:79:9d:fe:09:cf:87:11:67:f8:78:fa:13:70:9d:c3:
91:1a:e2:17:ff:6d:6d:53:be:b5:da:ec:48:e3:b9:47:70:9b:
7f:26:c8:16:48:83:39:16:a2:fc:98:0a:2e:8c:8e:86:47:07:
44:de:cb:86:66:2d:2b:ba:43:54:4a:b8:ab:01:a3:95:b9:71:
fb:d3:d5:65:f7:c9:46:bb:b2:ef:6d:85:e2:62:3a:c7:58:f4:
81:35:1e:54:0e:32:a6:ce:b3:34:90:ca:d3:d7:30:d7:32:87:
43:ea:fa:24:39:e9:b5:6c:a9:80:c3:31:69:6a:df:3c:d6:6c:
01:50:15:4e:29:8c:4c:5e:35:8e:b9:d8:f7:62:8f:f3:eb:4d:
5c:8b:f8:b8:5d:1f:53:e9:e6:62:53:37:8d:c3:aa:83:3b:ff:
09:db:f5:0d:fc:f5:70:12:ae:ae:6e:a7:9b:f8:6e:41:43:f2:
f9:e7:7d:f2:93:25:e6:1d:1b:59:8a:d9:38:d1:fe:45:81:fb:
ac:49:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:01 2023 by rpki-client on console.sobornost.net