Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/KMFjg--QD4tDEYBVj753W5IiIL0.roa
File: KMFjg--QD4tDEYBVj753W5IiIL0.roa (raw, json)
Hash identifier: DAOU9KQM2wDxXnmvIRD9qotx6YpFigOevo+ZHBHIH9s=
Subject key identifier: 28:C1:63:83:EF:90:0F:8B:43:11:80:55:8F:BE:77:5B:92:22:20:BD
Certificate issuer: /CN=70f8b2dbb03cecc4f214564709149614c48d7085
Certificate serial: 048D4D
Authority key identifier: 70:F8:B2:DB:B0:3C:EC:C4:F2:14:56:47:09:14:96:14:C4:8D:70:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPiy27A87MTyFFZHCRSWFMSNcIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/KMFjg--QD4tDEYBVj753W5IiIL0.roa
Signing time: Thu 27 Jan 2022 09:26:27 +0000
ROA not before: Thu 27 Jan 2022 09:26:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 80.68.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298317 (0x48d4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f8b2dbb03cecc4f214564709149614c48d7085
Validity
Not Before: Jan 27 09:26:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28c16383ef900f8b431180558fbe775b922220bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:c6:67:b6:c9:94:ff:35:b8:49:b5:22:e3:
54:ab:00:0c:06:1d:0a:1b:83:fe:f9:48:3e:dd:3d:
12:a0:d8:3a:d9:1c:7f:b1:b2:0d:27:96:56:66:9d:
58:f6:ea:56:26:fb:0a:e8:ee:4c:99:ef:a0:21:3f:
ed:68:4b:09:38:d2:0d:73:5b:71:92:fe:a4:86:a5:
01:d6:53:1d:99:93:5d:2b:bd:e5:91:62:2e:ce:5a:
57:5e:45:d5:04:59:a0:f8:d5:66:62:fe:58:fa:9a:
99:f1:25:ff:82:1a:95:fd:ea:74:f4:c5:1d:b6:04:
44:5c:50:d8:3c:aa:e2:47:bb:14:e5:c9:2e:f3:d7:
55:bf:af:92:a3:30:7c:59:8c:6d:f1:9c:34:28:58:
25:60:e3:a0:7b:93:87:da:c2:77:f1:e2:1a:59:97:
de:89:b1:06:48:ce:1d:94:ca:97:b5:ea:8e:74:1f:
fa:db:b2:60:ba:ad:be:40:cf:f7:c1:0d:71:6b:b2:
5a:3a:d3:ca:7a:48:80:0e:b6:2c:5c:c1:b5:f6:15:
2e:eb:da:f9:a3:80:7e:f4:ca:13:81:ad:b4:bd:d6:
90:cf:be:fb:dd:e2:1b:d1:83:94:15:dc:4f:6f:74:
05:13:43:34:01:2f:aa:cc:fa:41:44:58:d7:2e:76:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:63:83:EF:90:0F:8B:43:11:80:55:8F:BE:77:5B:92:22:20:BD
X509v3 Authority Key Identifier:
keyid:70:F8:B2:DB:B0:3C:EC:C4:F2:14:56:47:09:14:96:14:C4:8D:70:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPiy27A87MTyFFZHCRSWFMSNcIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/KMFjg--QD4tDEYBVj753W5IiIL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/cPiy27A87MTyFFZHCRSWFMSNcIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.145.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b1:a7:e3:b2:f5:f9:a9:4c:7d:50:f8:83:58:61:a1:99:dc:
46:b5:58:73:7b:1d:8b:99:6a:cf:9d:1f:b1:13:58:be:9a:c1:
e5:2d:ad:80:85:8c:c1:40:f3:34:23:8c:b9:fb:89:fa:5f:49:
40:59:47:5a:38:cd:91:03:e5:5c:9e:a7:1e:f3:53:fb:77:7b:
c8:f4:e4:09:92:3c:dc:c0:22:54:6a:bd:ac:91:91:b7:93:4a:
0a:99:71:30:58:50:94:f1:11:7d:97:25:72:10:1e:dd:6f:76:
5c:4d:cd:a3:75:cb:7e:13:40:ef:eb:48:54:e2:a0:30:79:b0:
ce:c9:b9:2f:d0:ad:5a:43:65:d3:4c:42:87:81:77:ac:e0:64:
7d:6b:75:e3:7d:f9:ae:24:b8:c3:09:4a:e7:9d:99:e9:2b:a7:
9f:54:de:68:ad:0c:78:90:81:8b:95:1e:43:98:a9:e6:66:c2:
47:2e:01:b8:5d:e8:e3:3e:ac:bf:79:d3:ef:6b:c7:65:f4:35:
b6:eb:25:5e:7f:83:53:40:55:51:d1:8d:1c:1b:78:00:23:48:
5b:e4:76:56:41:10:47:7f:3a:e3:42:1d:19:c3:af:4e:1d:ef:
b5:63:c0:8a:84:f4:44:4b:4b:e5:eb:00:bd:6f:25:45:16:ac:
d1:4f:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net