Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/xJ3A7-Ubos_5_ekm6IBHw9L6oNo.roa
File: xJ3A7-Ubos_5_ekm6IBHw9L6oNo.roa (raw, json)
Hash identifier: zGr+ibMHrpPflG/74sH9UCNh3SA6m9c0crwT/eE17f8=
Subject key identifier: C4:9D:C0:EF:E5:1B:A2:CF:F9:FD:E9:26:E8:80:47:C3:D2:FA:A0:DA
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 07B04527
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/xJ3A7-Ubos_5_ekm6IBHw9L6oNo.roa
Signing time: Sat 01 Jan 2022 15:57:18 +0000
ROA not before: Sat 01 Jan 2022 15:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212890
IP address blocks: 45.134.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128992551 (0x7b04527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: Jan 1 15:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c49dc0efe51ba2cff9fde926e88047c3d2faa0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:3a:bb:4c:4f:21:59:28:bc:3e:cd:87:47:
7b:84:fb:34:8a:28:9d:4c:9d:9e:3f:76:36:ce:2a:
50:61:54:be:98:99:e1:c8:74:32:9a:ea:13:85:ca:
94:c5:ea:34:a7:9f:18:cc:e7:bb:53:a7:40:56:09:
07:8f:8e:ae:f1:35:bb:e8:a7:c0:56:f1:04:ec:db:
0d:f2:a3:14:74:72:b2:9b:c5:46:ce:15:99:a8:9b:
67:45:29:89:23:f3:7b:d0:d0:bb:99:34:85:dc:47:
c4:34:b3:92:89:8c:53:42:57:fb:ab:28:9e:a3:c6:
1c:86:3c:14:30:ab:80:36:b6:7b:7d:79:58:0b:10:
80:a1:d7:3f:9e:dc:50:f3:a0:96:b8:f4:48:e8:3a:
22:b7:87:24:9f:6a:ba:a8:40:c6:bf:ef:5e:cc:93:
76:e9:e0:7b:07:e9:e4:db:80:8c:37:92:26:58:26:
f0:33:9e:7d:c1:33:23:5c:83:2f:77:80:d4:ae:e6:
6e:7f:e5:32:c9:28:3f:b7:40:a3:b6:89:ee:3a:2d:
2b:99:40:2c:33:2b:ff:cc:b1:9e:b4:90:a3:77:d0:
7a:21:1f:30:1b:dd:3f:b5:b8:0b:57:6e:33:02:ac:
ee:e0:04:4d:0e:eb:e0:e2:38:f4:9b:2a:cc:70:9a:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:C0:EF:E5:1B:A2:CF:F9:FD:E9:26:E8:80:47:C3:D2:FA:A0:DA
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/xJ3A7-Ubos_5_ekm6IBHw9L6oNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:68:bc:4f:89:8b:ec:65:5a:41:14:36:98:34:4d:b2:87:10:
77:6d:d7:d7:bb:e2:95:fd:69:b9:9a:57:0c:cb:07:52:68:9a:
b3:8b:de:0a:12:a3:dc:34:0c:e2:0e:bf:4a:81:c7:41:13:12:
1e:ac:f0:9f:14:d1:5b:57:dc:b6:92:38:02:b9:14:d5:85:40:
94:6b:13:99:de:ef:20:cc:b1:27:80:c1:28:64:d9:04:39:47:
8e:62:5b:ee:62:f1:f0:f7:3b:e8:22:66:a0:a8:0a:65:37:79:
ab:55:55:55:d8:b6:98:c6:d0:b5:ea:70:c5:5e:1a:02:33:1c:
f4:c7:0a:5f:18:43:76:36:aa:c8:34:4d:16:12:b0:7b:9a:8f:
78:bc:e0:52:3a:19:e0:93:5c:1f:9e:68:9b:5a:cb:3f:68:08:
0a:70:20:a0:86:bf:76:5a:a7:21:01:aa:6a:92:19:6d:1e:f8:
40:25:5b:be:24:0c:db:65:fc:5d:b9:35:67:4c:2c:f7:9a:b8:
2b:0e:cc:20:2e:e0:4c:f1:0a:5b:73:b2:76:df:9a:9f:fb:f7:
67:cc:57:40:44:8f:49:45:b2:b3:cc:82:8b:03:91:94:67:cc:
44:5d:29:60:50:f6:29:e8:5e:3b:f8:75:23:eb:c9:9e:78:9b:
4c:7b:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:41 2023 by rpki-client on console.sobornost.net