Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/vqPzwlN9M2wov0uTap-FGUHe02E.roa
File: vqPzwlN9M2wov0uTap-FGUHe02E.roa (raw, json)
Hash identifier: sUlFeJjR7MId4lJFPxNCtLivQefV6hZrXl9ZaD7O8JM=
Subject key identifier: BE:A3:F3:C2:53:7D:33:6C:28:BF:4B:93:6A:9F:85:19:41:DE:D3:61
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 062396B6
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/vqPzwlN9M2wov0uTap-FGUHe02E.roa
Signing time: Sat 01 Jan 2022 01:55:33 +0000
ROA not before: Sat 01 Jan 2022 01:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53667
IP address blocks: 176.124.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102995638 (0x62396b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Jan 1 01:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bea3f3c2537d336c28bf4b936a9f851941ded361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:99:fc:eb:32:db:b8:6c:c5:d6:59:09:40:
fb:36:25:22:a0:3b:d2:d0:92:46:47:a3:e9:9d:8e:
af:01:fe:d4:a9:01:6d:6d:8d:8d:71:75:11:53:92:
91:70:e8:e6:f7:13:0f:d5:4c:81:6c:91:f7:e6:2e:
05:b1:80:7d:ee:b0:0a:0b:e1:27:02:76:81:0e:5e:
25:7b:80:5d:a5:46:56:7c:be:9e:ce:56:77:10:e0:
14:64:81:ce:8e:15:99:14:76:32:20:77:07:6a:1f:
1c:c3:e4:a0:8e:e5:bd:41:70:54:6d:52:c3:8b:dd:
35:6d:0d:c0:52:41:10:b0:0b:29:5f:e2:1f:86:dd:
cb:7d:a9:4c:7f:02:48:2d:04:dc:c9:84:46:3e:ec:
cd:8b:a1:b1:1b:81:b5:6a:e8:98:a2:58:1d:13:1e:
5e:27:88:0c:a4:8c:e2:ac:df:2e:10:9d:77:6c:c1:
22:17:81:2b:6a:24:40:41:0f:e9:9e:dc:06:ab:be:
85:e5:b4:4d:2d:3c:b2:1f:84:ea:a1:fd:31:f2:e3:
60:df:02:4a:81:2d:38:60:6b:50:52:72:d9:26:b7:
d3:1f:71:f5:58:76:c0:0e:d8:b0:e8:10:42:56:9a:
12:bf:41:8d:4a:7e:45:a2:26:ca:8a:dd:db:10:4e:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:F3:C2:53:7D:33:6C:28:BF:4B:93:6A:9F:85:19:41:DE:D3:61
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/vqPzwlN9M2wov0uTap-FGUHe02E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.70.0/24
Signature Algorithm: sha256WithRSAEncryption
88:01:58:aa:bb:f5:3a:05:49:18:cf:49:df:e5:b4:d3:54:c8:
88:59:d6:fa:99:0d:49:e1:b6:ee:f3:51:2f:de:23:50:ec:0e:
0f:52:f8:42:3b:cb:f0:c8:df:14:97:f5:e5:97:77:4c:67:a8:
cf:79:1c:87:3d:e1:58:0d:b4:8d:5c:b5:64:95:38:9a:db:a0:
62:c7:9b:c0:9b:1c:14:be:18:6f:54:94:d9:e1:28:f4:79:fc:
e1:2e:24:05:35:0d:c1:1b:44:c9:10:dc:59:62:e7:4a:cf:c1:
f3:3b:29:48:c1:ab:8a:a7:6d:3f:ae:de:3b:ba:22:5b:58:f3:
47:dc:33:ca:94:7e:bd:49:97:49:0b:ee:7c:e3:c9:c9:57:a6:
5a:ff:b2:2a:79:20:c0:c7:78:b5:24:b0:9a:c0:4c:59:73:e5:
ec:e1:89:96:18:8c:79:2e:16:ec:83:a8:df:b3:9e:fb:09:39:
22:96:a8:da:db:fd:52:25:9d:f9:46:97:32:6b:3e:93:fe:49:
a2:68:f7:03:8e:43:9a:d4:05:1c:38:02:31:64:3f:a1:88:5e:
d0:94:31:fb:c1:f6:d4:4d:0c:e0:54:86:09:1b:4e:52:15:67:
30:dc:87:4f:35:26:0a:52:1a:ac:c1:b1:67:99:51:a3:12:ae:
1c:ab:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:23 2023 by rpki-client on console.sobornost.net