Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/flR6bSWImzSQuDKf5tAWS_pDQmc.roa
File: flR6bSWImzSQuDKf5tAWS_pDQmc.roa (raw, json)
Hash identifier: VMLn55vCKq/kf3Clq+3Vad/Q83JbSxVmnZay6P4k8aE=
Subject key identifier: 7E:54:7A:6D:25:88:9B:34:90:B8:32:9F:E6:D0:16:4B:FA:43:42:67
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FE0D8FA
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/flR6bSWImzSQuDKf5tAWS_pDQmc.roa
Signing time: Sat 01 Jan 2022 12:59:41 +0000
ROA not before: Sat 01 Jan 2022 12:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48748
IP address blocks: 91.211.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266393850 (0xfe0d8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e547a6d25889b3490b8329fe6d0164bfa434267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:cc:dd:52:9a:ce:2d:de:8b:78:ad:7b:d0:
51:e8:2a:9a:69:d2:7b:ee:90:48:c0:0d:31:10:48:
72:28:98:99:be:e2:9b:59:e9:e6:1a:9c:34:3a:a3:
39:c3:84:14:8b:f1:d8:09:e7:1d:0e:13:f7:0f:17:
c6:da:98:67:8c:33:72:59:3a:98:24:64:6e:e3:b5:
56:4e:7f:7a:98:90:93:3d:ed:58:81:57:1e:60:27:
1b:fb:0a:21:89:52:9c:b4:2d:08:15:4d:86:07:83:
38:7c:86:21:1b:f1:68:79:67:a9:b3:25:a7:74:84:
6c:be:a5:cd:62:f0:02:dd:4d:2f:b7:f7:fd:45:8a:
6b:93:55:d4:94:1c:c0:ae:2f:da:28:df:ea:2a:45:
62:19:3e:93:f5:ab:13:69:9e:0a:9f:19:f4:84:0e:
aa:f3:e6:3f:2d:55:07:9a:f0:f5:8c:9f:3a:90:8e:
5c:eb:f1:e2:43:98:46:99:52:7b:9a:18:4d:1c:89:
79:f4:82:f0:37:e1:17:63:69:38:d0:1d:d0:cf:94:
3b:3d:7a:cf:11:90:6f:2a:2b:f5:9f:1c:f5:68:6f:
49:43:d8:fb:75:6e:23:57:67:9d:7b:da:fa:8d:e5:
32:8e:8c:3b:db:a8:db:aa:f0:cc:94:3d:4d:54:23:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:7A:6D:25:88:9B:34:90:B8:32:9F:E6:D0:16:4B:FA:43:42:67
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/flR6bSWImzSQuDKf5tAWS_pDQmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:32:81:a3:7c:aa:27:a2:77:e3:9e:e4:b8:72:a8:63:7b:29:
15:7d:58:4e:92:35:43:53:72:68:f6:b4:2e:af:61:bb:14:7a:
ad:d7:4b:46:b9:84:78:07:14:c8:e9:40:d7:e3:19:ee:30:00:
66:78:0b:41:2d:7a:4c:b4:4b:4b:3c:24:b8:8d:95:9d:90:97:
bd:10:6e:87:01:50:12:d2:ad:c3:85:1f:15:db:72:69:ab:26:
98:a5:ef:10:5b:7c:ef:67:31:c8:5b:d5:eb:84:ed:49:16:c6:
82:41:0c:b9:ad:4f:27:4f:89:f2:be:27:44:eb:48:bf:8a:5c:
de:29:bb:bb:33:b3:01:40:f8:ed:82:6a:8b:0b:39:b4:d5:c4:
31:09:af:75:4d:51:81:94:5d:71:7f:cd:95:d8:c0:e8:32:f3:
f1:1f:1e:03:fe:b0:08:14:f5:f8:b6:7e:35:e8:ba:fd:dd:19:
55:52:8a:72:06:80:8d:64:bb:04:4f:64:a1:f5:cb:57:ec:ce:
ff:5b:bd:1c:15:47:5e:54:a1:d5:1a:bf:84:73:31:1f:8c:55:
15:4f:36:4f:d3:d8:09:99:aa:66:95:d9:35:f9:69:65:6a:a1:
8f:c1:a6:99:1d:1a:c0:70:9a:01:2e:3b:8d:c3:2f:43:ae:3c:
82:1b:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:38 2023 by rpki-client on console.sobornost.net