Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/pWzktyf9KTFfv7lXDRhL3rttq8o.roa
File: pWzktyf9KTFfv7lXDRhL3rttq8o.roa (raw, json)
Hash identifier: HQCbYKNjHd1YgjOASbMIQC4SXFVvfgSyXILZ6CBrOiw=
Subject key identifier: A5:6C:E4:B7:27:FD:29:31:5F:BF:B9:57:0D:18:4B:DE:BB:6D:AB:CA
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 375478AD
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/pWzktyf9KTFfv7lXDRhL3rttq8o.roa
Signing time: Sat 01 Jan 2022 04:59:27 +0000
ROA not before: Sat 01 Jan 2022 04:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39071
IP address blocks: 80.72.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928282797 (0x375478ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Jan 1 04:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a56ce4b727fd29315fbfb9570d184bdebb6dabca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:59:42:58:48:24:43:08:42:8b:af:7d:1b:
e1:ac:ed:6d:47:0d:1b:bd:9f:e0:26:39:27:07:ea:
81:75:2b:aa:41:bf:9b:c3:5e:24:64:07:8d:0f:50:
38:de:2a:3a:25:1b:d5:ac:44:ee:39:2b:53:e4:fa:
36:fb:97:6f:67:7c:2c:0a:88:70:15:6e:16:68:8e:
9a:b9:45:24:f2:0a:62:5a:6e:46:cd:86:48:48:b4:
93:06:86:02:ca:93:92:50:cd:f2:5b:77:e2:aa:69:
1d:8a:9a:ec:ed:67:d1:4c:21:db:30:51:55:15:74:
49:1e:0d:2a:60:03:20:67:da:90:ef:d9:b0:f6:a4:
83:28:34:7e:05:52:c6:44:0d:33:f4:60:b6:ed:9a:
aa:04:7b:47:b1:14:1a:36:12:21:4f:38:50:4c:84:
8f:8e:2b:db:b0:e7:ef:0d:a5:d4:24:59:75:f5:e5:
25:2f:c1:2f:f7:e2:1f:0a:5d:57:11:e6:9a:a8:8b:
c8:94:54:86:28:1e:75:9e:5c:1c:5e:c9:e3:89:5a:
59:1e:97:73:c8:13:15:2c:c3:6d:b0:ff:95:b8:03:
48:d9:e8:d5:19:e9:bd:d9:f6:4b:25:5c:42:26:49:
47:8c:15:ea:aa:f0:03:9d:5c:55:c1:da:b9:7b:d8:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:E4:B7:27:FD:29:31:5F:BF:B9:57:0D:18:4B:DE:BB:6D:AB:CA
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/pWzktyf9KTFfv7lXDRhL3rttq8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:40:4b:1d:1a:72:21:88:d6:b9:b7:db:6a:19:c1:31:83:66:
39:d2:0f:98:da:19:58:35:ae:0b:8f:a8:46:64:2d:ab:71:a7:
6d:2b:1f:e8:fe:2c:cf:58:c2:12:73:ac:d7:ec:21:be:7f:36:
ec:c2:c2:02:cc:74:69:1c:15:41:e5:9f:bb:ac:bc:8e:f2:71:
c0:d4:ac:4a:eb:22:77:ed:db:06:75:bd:6b:1b:21:7c:ed:03:
57:7b:ee:73:63:4d:36:a6:9d:a3:94:75:50:71:f7:74:dc:ff:
ba:b7:9a:b6:1e:2c:d2:6a:ed:52:49:5b:7d:57:db:e7:1b:11:
3b:43:f9:4a:08:0b:f3:73:ab:9f:12:e9:22:ce:79:df:ec:d0:
9e:b5:b0:94:e3:aa:14:99:d3:d5:2a:30:3d:33:ba:b4:4e:da:
17:1b:67:49:46:00:3a:10:d4:98:6e:33:a3:3c:e5:5e:86:1d:
51:76:04:43:3a:4e:54:16:f6:03:64:1d:bd:8b:a8:86:4c:83:
50:75:0a:41:b2:38:11:70:9c:14:d0:f7:20:0e:82:ab:3f:e1:
87:5c:c6:30:e2:81:da:2f:74:b3:47:6c:8c:ff:66:7f:9e:d5:
48:ee:fe:d0:c5:49:fe:b9:14:e0:77:2f:87:57:de:39:ea:9d:
c7:13:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:58 2023 by rpki-client on console.sobornost.net