Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/Fr0kP70o_7RLCdUrl45Gu0sGW7o.roa
File: Fr0kP70o_7RLCdUrl45Gu0sGW7o.roa (raw, json)
Hash identifier: sFZId652m8XE+xrEph9ONdD3pDY8TKWSv6AUWsIIKlo=
Subject key identifier: 16:BD:24:3F:BD:28:FF:B4:4B:09:D5:2B:97:8E:46:BB:4B:06:5B:BA
Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial: 0592E126
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/Fr0kP70o_7RLCdUrl45Gu0sGW7o.roa
Signing time: Sat 01 Jan 2022 15:59:57 +0000
ROA not before: Sat 01 Jan 2022 15:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48152
IP address blocks: 91.198.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93511974 (0x592e126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Validity
Not Before: Jan 1 15:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16bd243fbd28ffb44b09d52b978e46bb4b065bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:83:89:04:8b:96:65:02:5b:09:0a:4b:36:
23:5a:aa:7d:56:a5:e5:dd:7b:e1:7d:1f:eb:3c:72:
a3:48:c3:9d:ac:ec:65:57:3f:3d:01:22:21:08:eb:
e9:c3:ae:08:fc:29:18:a5:98:9b:c4:57:16:f7:a2:
92:74:c4:5d:bf:3a:30:bb:74:27:f6:35:39:3b:35:
f9:b7:f5:3f:59:bf:8c:cc:4b:a8:44:d9:86:d0:89:
78:f9:32:24:3e:68:1b:c7:9f:0f:71:ad:79:76:37:
5d:45:7a:5e:0b:0c:bb:74:e9:c5:53:5c:31:b6:ba:
06:eb:e9:1f:84:7f:c7:91:45:60:a4:33:5f:ba:b9:
ff:a2:a3:fc:49:d1:c5:56:27:64:12:b0:b5:88:b2:
02:af:96:30:f1:5b:2a:25:d2:2b:ef:8e:4d:70:09:
c1:13:68:03:04:7d:fc:3f:e2:32:5a:3e:1f:2d:24:
f6:1f:bd:9e:9f:b9:2c:0a:3a:79:57:9e:51:5b:92:
ca:e2:4d:75:7d:32:b0:64:72:01:59:92:6e:8e:17:
bc:65:5a:ca:30:5d:f4:0f:b5:93:c8:ed:b3:98:98:
65:99:0c:93:f8:3f:28:35:b7:fe:94:6b:cc:f7:33:
56:68:d0:c5:aa:3a:77:c4:ec:bf:0a:99:c6:67:7a:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:24:3F:BD:28:FF:B4:4B:09:D5:2B:97:8E:46:BB:4B:06:5B:BA
X509v3 Authority Key Identifier:
keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/Fr0kP70o_7RLCdUrl45Gu0sGW7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.43.0/24
Signature Algorithm: sha256WithRSAEncryption
83:21:0a:ee:d7:b2:2a:46:14:47:3c:91:37:51:2a:7a:0e:3b:
b1:9f:91:c6:c2:6f:14:66:39:7d:32:d1:7b:df:6a:03:cc:74:
48:ea:d4:b8:28:98:a9:ff:6a:08:5c:e0:fe:2f:54:ac:2c:22:
47:c3:71:cf:1b:84:0e:32:52:18:fc:d6:70:a6:81:7f:9f:13:
a5:af:cd:3e:7c:0a:87:72:3d:b0:d5:73:4d:dc:0f:33:77:59:
91:ea:d2:65:7e:c3:1c:bd:ce:ba:14:24:69:8d:ee:19:dc:b2:
2e:8c:09:83:b5:23:95:c8:0e:6e:ce:fd:41:b0:00:6f:4b:e3:
42:2e:9d:b0:e0:65:6f:46:5b:95:99:4b:31:fd:a5:76:6e:98:
93:93:10:4e:1f:ac:90:4a:03:96:0b:88:1e:96:cd:05:aa:82:
33:e3:1e:b4:fa:86:2e:c5:65:1b:b6:7d:67:39:82:44:66:2c:
d8:0d:9e:43:40:a3:91:0f:16:93:ae:75:69:c0:f4:43:89:59:
08:4a:2b:3f:31:55:13:3a:09:4f:5b:62:12:1f:9e:c8:8a:e0:
5a:8d:2d:0d:26:3b:12:80:38:a7:67:4e:d0:73:c1:4d:29:3e:
69:a9:85:ba:02:02:71:1d:1d:44:86:0d:81:28:8d:a6:b9:f9:
34:6c:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net