Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/9COX0eBByNUaPFNCm9oqcIurGis.roa
File: 9COX0eBByNUaPFNCm9oqcIurGis.roa (raw, json)
Hash identifier: M4Uc3ZG4ew1e9Wo3bDzeDMq4v16Bv0QAxMYFCVxS07k=
Subject key identifier: F4:23:97:D1:E0:41:C8:D5:1A:3C:53:42:9B:DA:2A:70:8B:AB:1A:2B
Certificate issuer: /CN=51a91a65f97b7c11ca2e4ede863f517b195b494f
Certificate serial: C6A9
Authority key identifier: 51:A9:1A:65:F9:7B:7C:11:CA:2E:4E:DE:86:3F:51:7B:19:5B:49:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UakaZfl7fBHKLk7ehj9RexlbSU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/9COX0eBByNUaPFNCm9oqcIurGis.roa
Signing time: Mon 17 Jan 2022 14:01:06 +0000
ROA not before: Mon 17 Jan 2022 14:01:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62048
IP address blocks: 45.86.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50857 (0xc6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a91a65f97b7c11ca2e4ede863f517b195b494f
Validity
Not Before: Jan 17 14:01:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f42397d1e041c8d51a3c53429bda2a708bab1a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:8e:89:a8:19:85:78:cc:b3:7b:14:bb:f7:
ea:4e:f0:e8:6b:be:d6:38:62:bf:ba:28:c8:f2:79:
32:ec:ff:29:20:fb:96:84:75:04:af:f6:cd:94:be:
15:ee:49:90:0f:f6:7a:b4:14:dc:b2:ae:1a:fd:5b:
e9:a9:bf:92:8c:95:e2:67:fe:96:7b:1b:8d:e7:d6:
ad:14:d5:50:1d:23:92:fd:7c:fc:1e:8b:3e:e0:a8:
9a:ff:cd:9d:fd:73:34:d5:65:d3:8b:a7:98:06:54:
9f:a3:28:e5:d9:77:8c:a5:9e:b8:1b:27:aa:d4:a6:
51:fd:c2:65:42:a5:23:41:d5:5d:ab:46:6b:ff:1a:
77:86:bb:57:c4:48:75:71:b2:37:af:f8:d0:91:7c:
50:1d:bc:de:8a:a5:28:a2:e1:2e:ef:6a:8b:60:f2:
ef:b3:93:a1:d1:e6:f9:d3:0b:1d:5c:3f:d8:1f:d5:
34:d5:0e:c3:1f:ab:a8:63:80:d6:ba:e1:d3:0e:90:
88:ad:84:21:67:7c:54:0c:18:d2:e6:c1:5c:3f:76:
d4:0f:a4:1f:85:40:c9:85:90:d5:6a:24:00:ec:61:
6f:a0:b7:d8:6d:80:61:a9:d7:71:ad:6b:ac:35:a4:
2a:ef:5f:e8:3d:83:d5:b8:be:69:0f:2b:f4:d0:5d:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:23:97:D1:E0:41:C8:D5:1A:3C:53:42:9B:DA:2A:70:8B:AB:1A:2B
X509v3 Authority Key Identifier:
keyid:51:A9:1A:65:F9:7B:7C:11:CA:2E:4E:DE:86:3F:51:7B:19:5B:49:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UakaZfl7fBHKLk7ehj9RexlbSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/9COX0eBByNUaPFNCm9oqcIurGis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/UakaZfl7fBHKLk7ehj9RexlbSU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:19:01:40:bf:97:7b:91:0e:fd:85:0c:39:a1:59:06:02:8c:
91:0d:6b:3a:28:43:63:b1:35:1a:31:0c:9a:d5:ef:41:0a:15:
4e:2a:78:6d:41:3e:b2:b1:c5:0b:09:a7:68:21:27:1e:b5:b7:
49:b1:e1:9e:0c:43:cf:33:f9:ac:f1:3b:c8:f9:ad:f2:e1:1a:
18:2c:ac:44:88:f2:5d:ac:2c:6b:02:87:07:21:3d:10:30:b7:
6f:f3:c9:20:36:e9:9f:98:45:7e:c1:74:13:2b:04:31:2e:fb:
5f:72:a6:f3:42:51:23:88:26:ba:ff:df:3b:3c:37:7a:9f:0a:
6b:91:43:48:eb:1c:c0:60:0f:d6:dc:8a:84:bc:66:74:d2:34:
b4:cc:be:d1:f9:e4:9d:8a:22:ba:8b:09:9c:0e:a9:d7:2d:cc:
dc:77:d8:8d:47:8b:31:9d:18:55:a7:54:65:13:a5:1a:0e:a7:
b8:57:11:f9:ad:36:b9:2a:a2:2a:fa:07:12:40:08:9c:0d:87:
75:0e:41:07:b2:d5:a8:db:c5:fa:16:8c:d5:33:f0:7e:fd:dc:
b1:27:b0:ee:a9:44:86:98:ed:17:ab:5e:8e:96:08:6f:8f:f9:
ff:fe:ff:14:ac:b0:d2:3a:6a:69:7d:2a:67:6d:b3:45:45:9b:
59:a8:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net