Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_vv7IehIskfl_osROy8p3FlNRLo.roa
File: _vv7IehIskfl_osROy8p3FlNRLo.roa (raw, json)
Hash identifier: z4pkKf3oNvIr4C7MZwqtYwqb3adK84zeoYwsdXuQiDc=
Subject key identifier: FE:FB:FB:21:E8:48:B2:47:E5:FE:8B:11:3B:2F:29:DC:59:4D:44:BA
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03FE9494
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_vv7IehIskfl_osROy8p3FlNRLo.roa
Signing time: Sat 01 Jan 2022 01:52:27 +0000
ROA not before: Sat 01 Jan 2022 01:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47697
IP address blocks: 87.118.141.0/24 maxlen: 24
212.116.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67015828 (0x3fe9494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fefbfb21e848b247e5fe8b113b2f29dc594d44ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:77:da:a4:2f:51:dc:ce:f4:67:ec:ec:af:41:
e9:ba:c6:18:3b:50:a6:3a:51:08:4d:5d:13:9c:36:
2f:05:4e:e9:bc:8d:0b:53:da:11:d5:04:30:e4:18:
91:ce:dd:a7:7d:4f:40:39:20:9f:18:e5:7d:65:2f:
f0:5a:1a:74:46:0c:83:f3:c6:6d:4d:75:db:a8:ca:
98:1f:ed:cb:04:e4:3b:a3:5f:e1:c4:a0:6c:32:ee:
59:67:69:60:62:ac:8c:02:76:02:7f:a2:74:9a:e8:
df:9d:dc:25:ac:ca:65:0c:b9:a8:54:cb:5f:a8:8d:
20:e8:11:13:41:52:f3:dd:9a:d3:01:d2:aa:11:9d:
e5:eb:80:b9:1a:a1:25:43:66:be:11:5b:a0:95:7f:
fc:32:dd:05:61:a0:0c:ae:6d:f4:53:0b:b3:e3:0b:
f8:78:5c:3f:5e:fe:e1:7b:e4:52:dd:e7:d3:59:6f:
15:7b:f1:e6:38:e3:2c:dd:2d:5f:2e:41:07:44:40:
19:e1:dd:d7:b2:bf:b0:19:b1:24:f5:9b:12:78:db:
cf:29:9e:15:fa:8b:b8:0a:fe:05:48:d9:62:d1:e0:
38:5e:d3:19:17:a7:27:dc:b3:cc:b9:b1:6c:c6:d3:
9e:db:19:20:22:ed:48:32:2f:04:58:b2:0d:dc:90:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:FB:21:E8:48:B2:47:E5:FE:8B:11:3B:2F:29:DC:59:4D:44:BA
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_vv7IehIskfl_osROy8p3FlNRLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.141.0/24
212.116.131.0/24
Signature Algorithm: sha256WithRSAEncryption
69:15:df:57:f0:01:24:31:e8:9f:0f:70:18:46:8b:6c:bd:a9:
22:30:e8:d1:42:ed:1d:39:0e:4d:6b:1a:2e:12:c9:a6:99:0f:
a8:f4:18:e7:94:55:f1:6f:74:27:76:fe:d1:2f:9f:fa:98:18:
22:b4:bb:13:8e:ee:54:d0:b4:be:72:07:19:2a:73:e5:57:43:
81:ea:1a:45:6c:85:b0:4e:cb:55:3f:ef:0d:89:11:ec:3a:ee:
e3:5e:c3:f0:5d:88:fc:c2:72:50:0d:d4:be:ca:ba:e4:45:f5:
87:4a:44:14:a9:bf:17:64:d1:cb:92:60:3d:38:4c:53:3a:48:
45:50:db:b5:ba:0e:66:4f:3d:c5:cf:7e:7c:3c:0b:ce:ef:95:
1e:69:46:14:a3:a9:7e:f5:4a:1e:5d:c1:7b:fd:77:f8:c5:12:
92:b8:d6:79:d3:73:c3:01:cd:44:e5:b1:5e:13:f5:26:c0:ae:
d8:8b:28:f5:8c:6b:88:29:8b:33:17:1f:c3:9a:4d:dd:d7:c3:
8f:7d:ef:ee:d3:6a:3e:17:1d:c6:6d:3b:bd:4e:f2:de:ea:50:
27:f1:62:e7:b0:8d:c4:0a:96:09:10:32:d1:ca:41:89:1b:13:
a5:cc:5b:10:3a:4c:02:9f:f7:de:b0:da:57:25:17:06:a6:1d:
97:af:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net