Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/V4CnqLHHfVHJ9gf3xsxuJv65RDc.roa
File: V4CnqLHHfVHJ9gf3xsxuJv65RDc.roa (raw, json)
Hash identifier: hsO5qgTJrOvmcA3CtmPPbc7CMK9fuqfO5FF4IRVeZM4=
Subject key identifier: 57:80:A7:A8:B1:C7:7D:51:C9:F6:07:F7:C6:CC:6E:26:FE:B9:44:37
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 122A74AB
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/V4CnqLHHfVHJ9gf3xsxuJv65RDc.roa
Signing time: Sat 01 Jan 2022 04:59:22 +0000
ROA not before: Sat 01 Jan 2022 04:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49957
IP address blocks: 91.206.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304772267 (0x122a74ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Jan 1 04:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5780a7a8b1c77d51c9f607f7c6cc6e26feb94437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:71:1e:ce:99:57:44:98:a3:b9:d2:d3:f5:
49:cd:10:39:f6:7c:9c:f6:e5:65:b5:4b:5c:c3:df:
f2:40:89:8a:32:2e:36:f6:67:8c:a3:5d:60:00:69:
c2:2e:f4:4e:f5:1a:85:3c:fa:2b:3d:81:94:90:c2:
c2:a3:02:ee:7e:24:99:ff:1c:dd:db:ec:61:38:72:
3e:7b:3a:01:7f:74:09:22:10:c4:f5:9d:87:0d:35:
10:e1:a1:37:7f:96:e8:76:db:5d:92:83:54:81:40:
52:8a:cf:7b:3c:b6:1c:10:c2:75:ab:36:c3:b6:20:
56:e2:a0:ed:3f:9a:67:47:30:b8:c8:bf:1c:97:49:
36:c5:16:d3:7a:23:bb:a0:f3:f0:db:3b:60:40:34:
a6:f6:11:85:d4:cc:6c:ef:c4:ea:15:8a:09:90:c2:
f9:d9:7c:14:b6:c3:14:c1:b1:67:57:d9:fe:75:87:
4b:90:92:b0:00:78:f5:d2:c6:78:52:8a:33:f0:bc:
98:22:40:0d:62:0b:17:9e:a3:d2:cb:0c:ba:6c:51:
64:35:5a:17:78:a5:34:eb:17:a4:61:eb:c1:21:3b:
ac:b0:83:fc:75:f9:1b:7f:f5:53:51:1c:60:5f:ae:
2a:2c:03:da:61:12:d6:7c:eb:27:9f:2d:62:da:d6:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:80:A7:A8:B1:C7:7D:51:C9:F6:07:F7:C6:CC:6E:26:FE:B9:44:37
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/V4CnqLHHfVHJ9gf3xsxuJv65RDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.184.0/23
Signature Algorithm: sha256WithRSAEncryption
88:de:d9:9f:f0:fe:d5:65:e2:52:28:2b:b9:ee:ea:63:4e:92:
19:a9:24:62:d0:2b:cb:3e:e9:ce:d7:80:33:17:81:80:e3:26:
36:ef:66:4f:27:39:6e:55:c4:6d:05:4f:b4:76:95:44:0f:74:
6a:1c:56:de:e5:57:fe:00:0f:b4:3d:73:3f:b6:ac:90:1e:9c:
4b:06:af:a4:12:96:b0:13:ec:7d:83:24:da:f5:99:01:17:6a:
e1:1b:e0:81:67:27:14:f2:a7:c6:13:96:ce:96:16:be:8f:32:
e4:6a:59:56:ca:2d:32:19:dd:90:db:d2:ea:2f:a2:d6:6b:6f:
f1:44:1c:c8:e0:45:fc:4f:0b:85:c5:ca:15:44:11:0e:b0:4b:
85:5b:ae:cd:6e:da:b1:ea:e0:b4:ee:f8:9d:03:76:71:4a:15:
31:9b:76:04:54:0a:a4:7c:f3:bb:ad:ca:4e:36:bc:b3:01:e3:
52:19:35:92:fb:c5:49:05:37:48:fa:13:55:80:05:6f:f4:49:
12:d9:71:71:94:4a:66:38:ae:4e:14:b0:d6:b6:39:f0:cd:a5:
23:7b:2a:34:1a:82:54:2b:d5:7c:ca:67:de:e4:fd:61:83:83:
8f:e8:94:9c:e4:d2:a7:86:17:cd:d3:89:ad:a8:c2:a7:5b:42:
bd:66:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:54 2023 by rpki-client on console.sobornost.net