Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/inHlKec9INYGchN6WhtopEAk0R0.roa
File: inHlKec9INYGchN6WhtopEAk0R0.roa (raw, json)
Hash identifier: kZA4kCgXddi1xwxGxxUxVkOGSxOqla+Jyi0ioxsOLrg=
Subject key identifier: 8A:71:E5:29:E7:3D:20:D6:06:72:13:7A:5A:1B:68:A4:40:24:D1:1D
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0666799B
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/inHlKec9INYGchN6WhtopEAk0R0.roa
Signing time: Tue 19 Apr 2022 14:14:23 +0000
ROA not before: Tue 19 Apr 2022 14:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211716
IP address blocks: 79.133.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107379099 (0x666799b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a71e529e73d20d60672137a5a1b68a44024d11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:46:21:07:99:40:ae:55:70:79:fb:b2:f4:
59:2f:b4:af:1a:8b:76:a4:00:e7:fa:89:78:15:eb:
13:ab:41:eb:6e:c8:44:c3:18:a9:76:60:8b:e1:c4:
df:f7:98:b6:01:59:49:f1:63:0e:ed:c8:6c:42:7c:
2e:07:c6:cd:48:76:1b:b1:4d:48:ba:78:94:38:0f:
81:48:e0:36:0b:97:31:17:6e:32:3e:56:44:eb:04:
67:bb:6b:38:2e:f6:03:de:09:82:73:3c:ad:68:ca:
a9:0f:20:d8:a8:85:7f:bc:18:18:53:9e:22:ae:fe:
7f:3b:30:cb:bf:3f:48:b2:0a:0c:53:77:5e:33:e1:
20:e3:b7:f8:bb:c6:aa:02:e5:5d:a5:b0:31:27:11:
8b:1f:27:60:01:c1:df:9b:d3:60:10:2c:2b:de:02:
2f:d0:b9:d7:29:00:0f:29:03:dc:64:87:19:b9:21:
8a:e4:09:de:73:87:2e:1f:31:40:2d:ea:f7:c9:91:
11:e9:a8:19:22:13:d7:ec:9f:b9:e1:0b:49:fc:6d:
f2:6c:fa:c3:ef:0e:ae:9a:a1:02:2a:f5:e1:2c:2a:
ce:73:9d:54:d2:ec:75:a9:9c:70:c8:d6:e2:71:ba:
66:0a:49:6a:4c:94:44:f3:ae:2e:63:13:53:6f:ec:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:71:E5:29:E7:3D:20:D6:06:72:13:7A:5A:1B:68:A4:40:24:D1:1D
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/inHlKec9INYGchN6WhtopEAk0R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.96.0/24
Signature Algorithm: sha256WithRSAEncryption
88:97:00:3a:1e:d6:5c:ad:3f:89:80:9e:83:51:31:e1:f0:be:
f8:bb:64:ee:f5:16:df:36:a6:ed:88:24:49:31:e8:7b:6e:52:
2a:5f:b1:1d:28:57:5f:d9:f2:2e:7c:ce:ea:f8:da:9c:53:b2:
c4:fd:ae:45:dd:58:71:38:86:60:4e:0d:cf:ee:3c:8a:cf:1b:
45:2f:74:68:0c:ea:78:12:bb:43:3c:7a:80:46:c4:2c:1d:d7:
e8:1e:9b:ad:8e:8e:e2:38:73:68:72:d7:67:3f:fb:67:00:14:
e0:74:40:66:f7:a6:34:3d:21:ea:e7:f1:38:5d:0e:1e:17:f7:
75:4d:fd:76:2e:11:be:6c:96:7b:4a:a7:28:a2:02:66:1e:ca:
bc:54:c6:c0:62:1e:df:00:25:bb:db:ec:6f:76:ef:59:59:1e:
4b:0f:6f:9c:83:84:9e:b9:f2:d6:4f:17:ae:e5:a6:d4:b6:f3:
6b:1e:38:2a:1b:57:2e:d9:8a:ea:39:08:33:d4:d5:0f:1e:6a:
23:f9:d3:b5:31:bd:74:6b:5b:7c:a3:9e:b0:dc:f0:cd:73:16:
13:14:6d:06:1d:a1:1c:57:16:59:c6:90:c9:02:c4:f4:b3:40:
41:81:11:aa:c9:1c:14:e2:46:d9:d6:80:e0:85:3d:5a:fc:a4:
aa:e4:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net