Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/li1nIwxPGNJpE5r3F8GZ5X80_oc.roa
File: li1nIwxPGNJpE5r3F8GZ5X80_oc.roa (raw, json)
Hash identifier: 6zVgH/pST+oMHJTeaEDxyIN3bfUU+EANOgo3vU2eF2k=
Subject key identifier: 96:2D:67:23:0C:4F:18:D2:69:13:9A:F7:17:C1:99:E5:7F:34:FE:87
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 5F3BC3
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/li1nIwxPGNJpE5r3F8GZ5X80_oc.roa
Signing time: Sat 01 Jan 2022 02:58:14 +0000
ROA not before: Sat 01 Jan 2022 02:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211611
IP address blocks: 91.244.247.0/24 maxlen: 24
45.86.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6241219 (0x5f3bc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jan 1 02:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=962d67230c4f18d269139af717c199e57f34fe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:5f:80:4d:ba:37:8f:e8:54:5c:3a:c8:8b:
f9:b0:80:40:a6:c6:0e:7b:45:eb:50:25:74:62:15:
6a:68:bf:3c:53:80:8d:76:49:b9:83:44:89:34:6a:
e0:9b:a0:bd:38:00:5e:ba:ac:5f:ed:e1:1c:b2:75:
c6:2b:17:53:2b:ab:bf:78:cd:78:35:c2:83:1f:5b:
78:4a:9b:68:88:b2:a6:69:b2:40:1a:63:72:ac:4e:
f8:e1:ed:71:f9:9f:8d:2b:b9:91:60:35:51:ac:c4:
eb:6d:88:98:db:04:70:a9:47:24:b2:7e:1c:17:7f:
bf:c9:23:7d:1c:e2:41:9a:5f:23:62:d6:89:da:86:
e8:d2:40:71:70:e2:d9:71:06:3c:f2:e8:4f:68:cd:
19:28:00:59:a2:9a:5e:b2:43:fc:42:f3:57:2a:8c:
80:ce:b9:c2:04:17:1f:26:de:dd:d0:9d:f8:7f:4c:
f4:2f:1f:6f:c8:be:77:a3:f8:fc:7c:13:59:bd:af:
ab:d0:ca:2f:74:96:d0:a6:78:8d:9d:54:4a:91:31:
5d:d7:5a:b5:96:ea:dc:05:ce:d1:c2:b6:11:d3:1e:
fc:28:aa:80:a5:ef:71:07:22:ab:d8:e7:29:0f:11:
06:96:0d:eb:bd:75:fb:3e:d6:3d:a4:e3:c5:45:1b:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:67:23:0C:4F:18:D2:69:13:9A:F7:17:C1:99:E5:7F:34:FE:87
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/li1nIwxPGNJpE5r3F8GZ5X80_oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.220.0/24
91.244.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:be:9c:b1:d0:53:d4:99:a7:67:01:01:e2:07:a8:6d:e9:4e:
f5:23:d1:c1:47:cb:bc:71:5d:6f:3c:e4:57:4a:62:29:18:01:
c9:a3:86:0f:2e:c1:97:83:91:38:88:4e:25:bb:b8:d6:0c:45:
30:d8:7c:12:e7:75:62:ea:09:f9:28:3b:88:1f:b8:df:b6:f9:
7e:f8:c5:72:5a:b0:95:e4:3e:8e:da:8e:cc:a2:d6:c0:44:d2:
d4:48:1f:e2:b6:d8:e7:5c:0f:f4:34:1f:67:7e:10:60:21:cb:
16:e3:e7:b7:32:6c:93:b7:43:fe:be:49:bb:46:0e:9e:35:6d:
15:0b:7e:87:fc:41:1b:d4:f6:db:81:5f:e8:1e:26:83:a0:4d:
53:21:84:30:78:16:a8:5e:1b:09:a1:ac:9e:46:03:93:85:e3:
9c:5d:0d:50:2d:29:c0:d9:cc:dd:31:57:e8:05:69:7d:ca:c2:
b9:fe:26:cb:de:82:b1:24:10:9a:ab:67:50:7c:69:0b:77:63:
c0:6e:68:ee:65:78:b7:f2:24:05:fc:26:30:85:79:d2:6b:37:
8a:b4:4c:f1:1f:5b:1f:3f:92:32:3f:84:af:13:13:ba:37:77:
38:a3:32:e7:c7:06:9f:13:5a:dd:4b:81:d4:77:5c:09:b0:b5:
34:db:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net