Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/fzecu8CSdd0iIsSFGwRlvXO7kw8.roa
File: fzecu8CSdd0iIsSFGwRlvXO7kw8.roa (raw, json)
Hash identifier: XSppQqflnfWpEUylFBSd2Dxks59jRfcBO/KVesBxjd8=
Subject key identifier: 7F:37:9C:BB:C0:92:75:DD:22:22:C4:85:1B:04:65:BD:73:BB:93:0F
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 0621789E
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/fzecu8CSdd0iIsSFGwRlvXO7kw8.roa
Signing time: Sat 01 Jan 2022 01:55:32 +0000
ROA not before: Sat 01 Jan 2022 01:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41000
IP address blocks: 176.124.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102856862 (0x621789e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Jan 1 01:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f379cbbc09275dd2222c4851b0465bd73bb930f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:bf:f1:fa:7d:28:92:c0:0a:99:89:7c:ba:
20:17:2d:45:dd:19:ec:5f:35:a3:40:2a:e5:f0:a8:
cd:a6:6f:b7:bf:8c:b5:9d:3c:5b:db:4f:58:e6:ae:
c7:e8:77:15:9f:9c:aa:38:39:6a:96:76:9f:47:29:
9a:69:0c:b3:51:dc:b7:f9:d6:22:2d:73:14:c4:34:
0c:88:71:1c:9a:5f:de:7d:22:92:31:6c:0d:e9:12:
5e:a7:e6:45:2a:38:87:87:23:c6:49:1c:f6:25:93:
13:0c:59:75:47:b0:86:bb:32:94:54:fd:65:f5:f4:
70:eb:65:5c:fe:27:0e:a6:5d:de:6f:d3:03:e8:06:
2a:5a:1d:a5:2f:b8:7d:6a:75:83:ae:2c:02:dd:52:
f8:2f:3f:5d:06:23:1c:4f:3b:7f:43:68:3a:fb:ec:
47:e8:86:19:39:fd:22:92:15:7c:e9:b7:fa:71:93:
ac:18:28:7c:40:f2:4a:6d:7b:c1:06:42:ef:7c:7c:
05:3e:b6:26:2c:b3:6a:24:b2:9c:23:4c:c9:66:00:
96:17:4f:13:c6:34:60:75:0c:d2:db:ec:a1:9a:95:
6a:07:79:cb:a9:c4:ed:c9:9e:78:3a:f0:09:05:d2:
13:6c:91:43:2a:6a:e2:93:f8:03:9d:8e:2e:f3:c5:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:9C:BB:C0:92:75:DD:22:22:C4:85:1B:04:65:BD:73:BB:93:0F
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/fzecu8CSdd0iIsSFGwRlvXO7kw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:db:b5:00:37:58:eb:f6:fc:fd:a0:15:c8:a1:6b:b2:9d:e1:
7d:bb:90:03:80:a8:c5:b0:a7:db:f5:91:4f:ae:3d:33:04:c1:
81:31:3a:a1:33:61:1b:63:ab:82:9b:16:14:50:05:fd:e4:31:
f7:28:30:b6:f4:4f:2b:10:d2:a4:98:64:24:b7:30:61:e2:6b:
08:11:e4:40:0f:fa:79:4f:9f:9f:ad:a3:a3:85:43:8f:01:ee:
98:26:6a:57:a3:45:35:54:b8:0d:16:53:2d:5c:f1:da:9c:37:
08:29:bd:d6:4a:03:8d:d5:af:ee:49:9f:85:a4:8f:46:9d:68:
2a:32:7a:b1:3d:73:5c:8f:d3:0a:e2:b9:36:eb:54:31:64:8e:
cc:b4:1a:55:6c:8a:13:d4:56:00:64:ab:1e:18:e5:14:a3:79:
e2:2d:8c:35:e0:af:60:92:2b:62:14:55:5e:31:93:d3:5a:7b:
50:0f:1c:19:17:74:44:a2:19:40:1e:83:7e:6a:56:a7:af:70:
c0:55:c4:f9:9d:6b:10:68:7f:4e:27:eb:05:cc:4e:10:f4:b4:
7e:cd:6e:90:be:93:af:6b:05:54:72:55:7e:74:02:2b:e1:10:
ba:f0:45:ec:08:b3:a6:9f:89:7e:42:48:72:0a:da:88:ff:60:
6d:44:e7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:22 2023 by rpki-client on console.sobornost.net