Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0l6e7ME2BExP74nqzLrRGoQFv_U.roa
File: 0l6e7ME2BExP74nqzLrRGoQFv_U.roa (raw, json)
Hash identifier: C9pMvUGNueyBzU3Z4MBCkoZh8oa9EJjeslAFJv3YP4s=
Subject key identifier: D2:5E:9E:EC:C1:36:04:4C:4F:EF:89:EA:CC:BA:D1:1A:84:05:BF:F5
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0184C7C44A108323D2419E4A0E85E3E5E526
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0l6e7ME2BExP74nqzLrRGoQFv_U.roa
Signing time: Wed 30 Nov 2022 09:00:40 +0000
ROA not before: Wed 30 Nov 2022 09:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 141.226.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:c4:4a:10:83:23:d2:41:9e:4a:0e:85:e3:e5:e5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Nov 30 09:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d25e9eecc136044c4fef89eaccbad11a8405bff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:e6:8a:9c:2d:a0:d8:ee:f3:b0:7a:86:53:
7a:8c:b2:5f:28:0e:42:4c:8b:bd:ed:fc:ef:73:40:
19:48:15:32:82:1e:bc:47:76:0e:37:cc:15:5c:a7:
2e:16:94:66:b2:36:b6:64:e0:8d:73:dd:14:1f:b0:
46:d6:33:88:2e:d3:d7:2f:16:40:0d:a6:dd:e7:bc:
3c:90:a9:0c:03:0b:2a:4c:f1:96:40:db:79:1f:df:
a7:ba:ff:cc:4a:a6:f3:36:e3:b5:f6:43:82:87:dd:
37:95:b2:98:79:65:6d:24:aa:f3:77:09:c0:45:ae:
50:cf:9a:b1:97:e9:bf:2b:05:bf:83:4f:a4:fb:7f:
a0:51:07:21:6e:d4:02:12:4f:7d:29:ea:ea:14:a7:
9b:7e:9d:4f:8a:1a:5d:b1:c8:79:f1:41:48:02:de:
4b:5b:87:d6:6d:0d:77:83:46:b5:12:2b:cf:73:5d:
27:ab:ea:1c:f6:d3:5b:59:eb:e1:76:e9:fa:1a:45:
53:7c:6f:76:78:81:1b:73:59:2a:ed:d3:a4:74:49:
91:73:44:59:50:aa:20:a7:c4:be:e1:42:15:ab:32:
d9:9f:95:f9:51:2c:be:44:46:d3:67:55:f7:03:79:
99:2e:65:cc:f5:f3:d1:2e:d7:cf:6f:c5:25:fd:26:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5E:9E:EC:C1:36:04:4C:4F:EF:89:EA:CC:BA:D1:1A:84:05:BF:F5
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0l6e7ME2BExP74nqzLrRGoQFv_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:33:2d:e9:b1:f1:16:cb:39:d0:73:93:fb:65:7b:c7:bd:d6:
76:9d:7c:6a:e6:02:3b:7f:2a:43:5f:34:a4:31:29:24:5e:27:
ea:b5:a2:38:f5:53:ce:46:23:42:ac:e3:87:dc:4a:4b:8f:05:
78:5c:24:c1:28:f9:6f:0b:39:0c:fc:97:84:ee:0f:71:65:34:
eb:e0:d2:50:ff:76:a9:eb:8a:7d:5a:7d:6b:09:5d:51:83:27:
93:db:d3:86:21:5d:72:34:fb:57:59:06:9b:d8:7c:c2:63:3b:
dc:a1:c9:60:12:cd:be:cd:69:ed:6d:94:c8:5d:7b:47:b7:b2:
f1:05:b3:27:e1:3a:87:44:02:7e:3c:a9:40:29:af:46:7e:26:
78:14:43:fe:d0:95:ed:a3:86:09:0c:96:97:18:1f:41:df:26:
41:31:e3:af:1a:fa:11:14:07:bb:ae:20:00:b2:21:82:7b:19:
4f:44:f3:2e:be:04:2f:2a:10:a3:bc:0c:17:d0:af:ca:3f:4f:
c5:2d:1b:9f:ad:9f:19:66:04:c5:09:1d:74:0a:7a:ec:ee:bf:
04:c6:f5:38:74:17:2e:bc:0d:cb:9c:9d:68:dc:8e:b0:de:6b:
16:c6:8d:9e:83:e2:3a:85:13:fd:3f:3b:f6:c4:a1:c7:e5:08:
c8:72:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net