Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/K9wIoSirSscb6ZIAiae71j2p5LM.roa
File: K9wIoSirSscb6ZIAiae71j2p5LM.roa (raw, json)
Hash identifier: A2J37kTReVBoszw/KWwObKD3/gtq0Q5ykrIhGFYiSys=
Subject key identifier: 2B:DC:08:A1:28:AB:4A:C7:1B:E9:92:00:89:A7:BB:D6:3D:A9:E4:B3
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 01832254C3589F85554A4633BEF42B1C51D6
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/K9wIoSirSscb6ZIAiae71j2p5LM.roa
Signing time: Fri 09 Sep 2022 12:58:43 +0000
ROA not before: Fri 09 Sep 2022 12:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 45.11.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:54:c3:58:9f:85:55:4a:46:33:be:f4:2b:1c:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Sep 9 12:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bdc08a128ab4ac71be9920089a7bbd63da9e4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:9c:73:8e:3d:68:1c:66:4b:68:6a:2f:d4:
41:e9:72:f4:97:a0:55:79:de:7f:3d:de:34:cb:53:
91:4e:12:9f:5f:8e:75:c7:96:00:ef:c0:46:c6:56:
9c:0b:3b:8b:03:09:e7:dc:a3:4a:e4:d5:b1:9a:78:
36:02:d8:2d:8b:12:5a:05:6c:08:cf:86:60:bd:4b:
30:31:26:17:13:d1:19:df:b7:68:28:6f:2f:00:5f:
07:d0:98:37:28:1f:37:51:37:1b:ae:0d:67:b9:f8:
b0:96:22:ab:57:8f:3e:b1:10:4b:37:92:29:3c:f9:
6a:d9:2c:74:07:72:94:c4:ae:74:99:22:da:2c:c4:
d2:84:eb:52:27:0f:31:7f:2f:2d:57:ee:ee:29:88:
bb:5b:ff:03:14:ba:03:3f:5c:a6:c2:b5:9d:36:10:
1c:01:22:fd:02:2f:e1:27:28:86:e8:d6:12:58:43:
a2:db:44:b6:dc:69:e5:f6:5f:f8:1c:98:a4:6c:da:
bc:f9:36:a0:c2:5f:2c:97:f0:1d:47:2f:94:c8:3f:
30:14:a2:58:97:cd:af:8b:e7:98:ec:9a:c0:c6:75:
26:60:c6:6d:e3:b7:f7:86:7f:f5:3d:ad:67:94:3e:
4a:05:cf:62:5f:42:bd:26:54:95:6c:2b:b8:86:8e:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:08:A1:28:AB:4A:C7:1B:E9:92:00:89:A7:BB:D6:3D:A9:E4:B3
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/K9wIoSirSscb6ZIAiae71j2p5LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.172.0/24
Signature Algorithm: sha256WithRSAEncryption
61:58:a9:da:57:84:c9:03:6f:be:d5:16:c0:b2:d8:f1:f6:ff:
48:0b:3f:09:27:ca:d5:cc:60:cf:ac:93:57:8c:9f:11:fb:8d:
eb:c1:de:62:b9:0e:40:6a:bb:30:85:ae:48:41:68:f7:2f:93:
21:2e:c7:b4:19:f3:e1:1a:d6:e0:c8:ca:bd:64:1d:bb:34:f0:
26:6f:23:08:7e:00:61:da:ea:9c:1f:67:e1:3a:fa:b8:99:f9:
c0:ba:3d:35:2c:dc:c0:30:94:90:64:bc:e7:0c:bc:e2:dd:5d:
34:62:72:e6:d2:b7:a9:0b:f2:f4:1a:92:c4:33:e0:ba:a4:66:
63:67:90:51:38:5d:bb:54:47:53:72:d7:d8:97:84:da:91:93:
70:11:52:20:15:f1:f9:fa:d6:81:b8:f9:c2:06:a0:42:19:67:
7f:66:32:47:4a:e1:8d:d2:3a:a7:41:eb:3d:b9:ef:c0:e1:4e:
17:04:43:69:1e:d6:6c:cd:d2:0c:d7:a7:ea:8f:41:33:3d:0d:
58:c6:4c:6c:3c:45:54:ab:34:dd:e7:fd:3b:d9:d2:be:95:e3:
ea:bd:74:54:34:d9:13:04:87:5e:bc:95:08:65:a9:df:b7:4c:
6c:1c:ed:05:81:e4:06:c3:13:2f:bc:1e:18:75:f4:ed:9b:3d:
75:c2:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:19 2023 by rpki-client on console.sobornost.net