Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/SX7LjPQr5uli3T_shn6pZ7BCE4A.roa
File: SX7LjPQr5uli3T_shn6pZ7BCE4A.roa (raw, json)
Hash identifier: ZVNuUNS3QOpIUYRQIGh0/egklWcUoz+lcgSfjkQDfLw=
Subject key identifier: 49:7E:CB:8C:F4:2B:E6:E9:62:DD:3F:EC:86:7E:A9:67:B0:42:13:80
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 01B8AB38
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/SX7LjPQr5uli3T_shn6pZ7BCE4A.roa
Signing time: Fri 13 May 2022 13:11:41 +0000
ROA not before: Fri 13 May 2022 13:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48737
IP address blocks: 5.181.17.0/24 maxlen: 24
5.181.18.0/24 maxlen: 24
146.19.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28879672 (0x1b8ab38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: May 13 13:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=497ecb8cf42be6e962dd3fec867ea967b0421380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:70:d3:1e:12:b2:4e:07:f1:8a:f4:7d:09:
1a:1d:1a:e6:58:1b:97:51:76:28:f6:d0:6c:ab:6a:
ad:ed:7d:85:f1:ce:61:75:27:25:2c:b0:d6:30:e0:
22:96:be:8e:f0:74:04:63:32:23:e9:e3:8f:64:88:
20:ed:85:df:29:88:4e:e6:8e:74:a4:23:20:fd:f7:
ed:aa:c4:e2:2a:2e:6a:0a:62:a7:92:71:76:d2:fe:
e9:a0:a2:cb:6f:3a:0d:7b:66:5d:b1:db:b0:f8:b0:
9a:22:b6:9a:d8:de:15:63:52:b5:be:2f:91:e7:9a:
5b:e7:8b:71:b1:41:34:18:54:9e:34:fd:a3:8e:e3:
99:da:cc:f6:45:a9:a8:e5:73:89:b8:16:ad:a3:fb:
65:ee:bb:ca:5d:13:cb:e2:59:ca:24:96:0d:00:16:
d6:73:c1:3c:92:ae:ec:fa:77:5c:df:24:05:16:13:
1a:71:74:95:9c:2c:fb:83:df:12:ed:04:71:95:7a:
9d:5a:86:05:f6:f1:a1:75:d3:ed:6b:47:82:03:cc:
8c:fb:69:a1:72:8f:98:de:eb:b3:15:fa:09:fd:29:
7d:42:2b:29:9d:56:08:31:a4:a2:05:96:c7:53:53:
bd:81:d2:c0:72:9d:8a:0c:c6:61:de:28:7e:75:bd:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7E:CB:8C:F4:2B:E6:E9:62:DD:3F:EC:86:7E:A9:67:B0:42:13:80
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/SX7LjPQr5uli3T_shn6pZ7BCE4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.17.0-5.181.18.255
146.19.12.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c1:9a:87:6f:79:13:2c:15:9e:16:85:8d:a3:28:e2:e2:c4:
1a:b2:e1:56:00:4f:17:4c:41:9c:6b:3c:c4:ab:b0:eb:cd:18:
ab:2c:d4:30:bf:27:9b:54:42:5b:9c:1d:91:73:23:e3:dc:ad:
9b:b1:d7:82:94:f3:df:09:64:dc:a0:6f:82:19:7b:be:b6:97:
c0:04:7a:05:68:8a:7e:34:d2:a0:1d:1f:15:06:28:b7:5c:e4:
45:ed:85:f8:3f:1d:41:7d:ae:a7:b1:55:54:c5:fc:e8:6e:a2:
15:6b:37:99:4c:5e:ca:af:4e:74:51:aa:71:82:5d:95:5b:d5:
7f:09:44:24:7a:bb:09:c8:78:4d:d8:f3:0a:b5:8b:c2:36:44:
56:57:63:f9:e8:35:de:09:7f:e3:c4:76:9d:2a:04:1c:db:d1:
9f:91:76:96:39:91:06:12:c4:5e:01:27:5e:ff:1b:83:7a:08:
dc:ac:3a:bb:e4:1e:1f:2f:73:2e:6e:8f:e7:82:61:91:83:a6:
18:bf:d4:26:00:3e:eb:c5:81:7f:ef:b9:7f:7b:16:9b:ad:6d:
9c:44:16:f4:a0:fb:f2:5b:e7:58:b5:2a:fe:24:ef:0c:8a:63:
5b:fe:1e:c0:92:9b:3f:37:91:d3:0f:47:4d:a9:41:89:7f:81:
a6:ca:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net