Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/G60Vseox9VHl1PxMZDvH3EYMu04.roa
File: G60Vseox9VHl1PxMZDvH3EYMu04.roa (raw, json)
Hash identifier: rs9M3S7Wb5IHeBTgjMLzcdJAXLxW/h+IRfwXWV9UUsI=
Subject key identifier: 1B:AD:15:B1:EA:31:F5:51:E5:D4:FC:4C:64:3B:C7:DC:46:0C:BB:4E
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 045C8695
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/G60Vseox9VHl1PxMZDvH3EYMu04.roa
Signing time: Sat 01 Jan 2022 02:01:22 +0000
ROA not before: Sat 01 Jan 2022 02:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 188.72.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73172629 (0x45c8695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jan 1 02:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bad15b1ea31f551e5d4fc4c643bc7dc460cbb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:5a:89:74:0b:0c:3e:96:4b:1e:f6:d0:24:
98:1e:27:cd:65:19:74:e4:75:bd:f6:6a:48:b8:09:
a2:83:c6:f4:6c:56:b5:01:06:12:99:71:2e:09:f0:
ae:bb:5b:40:9e:52:af:ab:71:91:b6:76:9c:1b:d3:
56:81:24:31:94:c3:87:20:ed:aa:a9:32:c9:ba:22:
83:f3:df:dd:3c:15:d9:79:4e:9b:88:82:1d:af:db:
7a:53:4c:97:cf:fb:df:04:ac:90:98:e4:fa:7c:33:
20:6e:c6:cf:05:1f:1e:83:4d:19:08:0b:15:18:63:
15:9b:04:21:9a:61:5f:56:1b:8c:1b:36:a9:f4:43:
c2:04:37:9c:0a:05:56:4f:92:47:e5:da:ef:ea:d4:
25:8c:98:a6:56:ed:46:1c:3b:e4:24:8f:9a:bc:53:
37:34:6e:a4:55:18:f3:46:ef:46:e6:a7:54:63:d3:
2d:de:0e:47:7d:dd:7b:a7:49:c9:f8:a4:81:65:d9:
22:85:42:43:c3:a5:0a:a5:0c:8f:e4:20:b3:fa:bc:
b3:c3:3f:af:3a:d2:af:4e:5a:1e:8d:e6:b1:a0:94:
f7:31:e5:cb:e3:fa:81:91:30:d4:74:73:68:d4:9b:
ec:49:8a:96:67:a0:41:d0:79:d9:64:84:31:26:cc:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:15:B1:EA:31:F5:51:E5:D4:FC:4C:64:3B:C7:DC:46:0C:BB:4E
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/G60Vseox9VHl1PxMZDvH3EYMu04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.17.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5d:20:3d:9d:f4:0d:43:74:1d:ab:58:92:59:b4:df:bb:85:
b2:fd:f2:cc:71:22:54:c3:33:22:27:fd:d6:b9:a6:c0:87:46:
7f:49:c9:96:bf:4e:bc:6e:80:56:4e:cb:94:14:7c:bf:93:af:
db:6a:6b:43:09:0c:c6:dd:16:28:9a:5f:b9:8c:90:7d:db:8e:
b1:0f:8c:5f:8d:15:6c:dc:83:97:54:69:94:4a:05:b9:9d:f0:
06:f9:dc:57:50:5e:b9:3a:bb:0f:d7:ba:4c:d8:03:49:c3:b2:
e7:da:0d:5a:1e:a2:d4:97:4e:fe:89:35:0b:0a:11:13:f0:5a:
cc:36:7a:fe:6f:b5:d6:9a:02:a4:53:7d:be:9f:bc:c4:58:54:
b8:87:6a:c6:83:d6:02:45:18:3f:72:02:4f:e2:51:1e:0d:01:
44:d0:ec:c2:7b:41:45:9e:2e:9e:43:62:c2:87:8a:ee:bc:97:
d0:bb:8e:36:0c:94:0e:82:e2:a5:49:fa:b8:b4:d6:de:20:33:
92:ce:8c:e7:e3:73:b3:11:ef:46:6c:e7:8f:36:e5:37:f8:e9:
45:14:c8:e3:9b:a9:9c:cc:fb:6d:91:bf:91:e6:51:c3:00:e7:
08:ef:d2:2a:25:06:40:36:b7:6f:22:dc:ca:2b:b0:86:fa:ba:
ce:66:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net