Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/tLfk20tnwoY1Z1ve9tC0G-U8On8.roa
File: tLfk20tnwoY1Z1ve9tC0G-U8On8.roa (raw, json)
Hash identifier: kUcENl766dkwpsdxdiph3smUYv1dX/QCL0fdc6t4zQI=
Subject key identifier: B4:B7:E4:DB:4B:67:C2:86:35:67:5B:DE:F6:D0:B4:1B:E5:3C:3A:7F
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0AAB75D3
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/tLfk20tnwoY1Z1ve9tC0G-U8On8.roa
Signing time: Sat 01 Jan 2022 12:00:17 +0000
ROA not before: Sat 01 Jan 2022 12:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44766
IP address blocks: 92.45.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179008979 (0xaab75d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 12:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4b7e4db4b67c28635675bdef6d0b41be53c3a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:7e:fa:05:60:4b:3f:cf:ed:eb:15:f0:af:
0d:de:d2:d4:5c:90:bb:cc:91:d4:00:a4:f3:c1:31:
ab:fa:42:52:d4:9f:62:76:00:e7:7a:16:02:93:d8:
99:a8:af:08:42:62:12:ff:19:40:65:41:b8:1b:55:
28:00:df:85:62:e0:60:7c:99:6b:d9:95:a0:a0:9f:
95:f6:eb:8f:5c:7e:69:91:0e:0f:f4:d3:a0:3d:f1:
45:f6:8f:19:81:0e:a2:01:4f:49:7f:6b:fd:d1:c2:
07:f3:91:8b:07:71:03:0a:6e:63:86:88:19:19:09:
3e:36:d0:f3:02:b7:37:db:85:ef:b5:17:d8:a4:b0:
77:00:2b:73:7f:bc:d5:e2:8b:8e:1f:17:ea:5a:6e:
82:50:42:81:03:ce:69:0a:58:a9:05:c3:70:b8:61:
1f:03:23:86:8f:c0:42:27:8b:f0:d7:07:68:4f:19:
cb:4d:2a:ea:8a:34:65:c1:f4:a8:ee:46:70:af:94:
ff:b5:5b:ee:5d:70:6d:12:d8:54:6c:c7:f8:7f:fb:
6f:08:b9:77:d3:15:fc:32:61:39:88:97:d3:ab:a8:
59:c3:6f:4b:f8:34:ac:e7:57:24:20:a3:9b:4b:09:
32:88:42:19:00:4c:59:ba:80:b8:5d:c0:7d:4f:01:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:E4:DB:4B:67:C2:86:35:67:5B:DE:F6:D0:B4:1B:E5:3C:3A:7F
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/tLfk20tnwoY1Z1ve9tC0G-U8On8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e4:5a:59:8e:1d:b2:16:02:23:b1:b0:33:48:d4:5b:c7:bd:
80:41:ea:1e:d7:e2:36:11:46:d0:90:a2:e1:e8:94:34:23:78:
2d:ed:5e:65:d5:f7:6d:94:5c:7e:a4:aa:9d:31:d3:90:0b:cd:
e4:8f:79:18:26:f5:92:e8:81:4e:0c:5e:7b:12:6d:f2:0e:5f:
4f:20:f9:e5:04:16:1f:70:f4:63:20:80:d9:f1:7a:7a:ff:49:
bd:02:ab:26:a0:81:1c:a5:23:b6:8d:cc:e7:bf:23:0f:63:42:
4a:ca:c0:6f:4e:b8:f8:06:5a:e5:e0:51:4d:a3:8d:6a:94:31:
27:41:c1:89:d4:49:f5:ab:07:9f:2c:e9:9c:1a:87:68:50:c3:
06:b6:78:5d:e5:4c:75:fe:49:79:63:c9:af:ed:3e:f1:8b:da:
e9:7d:af:05:a7:d6:72:a6:49:b6:46:f0:e1:38:38:f9:4f:69:
0b:d8:ea:bf:26:37:2e:f9:6c:f2:fa:8b:5b:4a:c7:dd:33:20:
0e:84:26:17:ac:af:70:fe:95:21:3e:7d:b2:21:1a:2d:5b:8e:
35:fd:f1:0d:01:2e:b0:d8:c0:f4:ac:96:27:25:62:6d:e6:c6:
a1:08:78:bf:e8:60:2e:53:fe:cf:c6:40:15:2f:80:ea:74:08:
bb:f3:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:57 2023 by rpki-client on console.sobornost.net