Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/vYvfrPBbnF16oq65NOCi83bAVE0.roa
File: vYvfrPBbnF16oq65NOCi83bAVE0.roa (raw, json)
Hash identifier: t3pMcXrAOm5kDP1r/d4VxK52B1yir9uFg2DCs4XE2yY=
Subject key identifier: BD:8B:DF:AC:F0:5B:9C:5D:7A:A2:AE:B9:34:E0:A2:F3:76:C0:54:4D
Certificate issuer: /CN=16ec858faa2fc7816eb22903d909f9a3fbbc1660
Certificate serial: 07F83E87
Authority key identifier: 16:EC:85:8F:AA:2F:C7:81:6E:B2:29:03:D9:09:F9:A3:FB:BC:16:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuyFj6ovx4FusikD2Qn5o_u8FmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/vYvfrPBbnF16oq65NOCi83bAVE0.roa
Signing time: Sat 01 Jan 2022 07:58:38 +0000
ROA not before: Sat 01 Jan 2022 07:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 45.128.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133709447 (0x7f83e87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ec858faa2fc7816eb22903d909f9a3fbbc1660
Validity
Not Before: Jan 1 07:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd8bdfacf05b9c5d7aa2aeb934e0a2f376c0544d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:95:19:b6:c6:86:82:36:b3:b5:ba:4f:bb:
1d:98:05:3f:bf:a6:31:38:d0:6b:1b:78:32:7c:f1:
6b:c1:df:99:a8:d8:5a:ca:6d:9a:1d:38:09:ef:63:
92:8c:31:ef:8d:8b:79:75:fa:01:bf:e6:e5:da:ad:
c8:1c:f1:ee:b8:5f:93:6d:ff:40:61:f4:06:25:ee:
9f:b4:bc:b6:ec:77:c0:e7:13:54:f8:82:b4:8d:89:
40:a8:4e:c5:0f:e2:88:ca:f1:56:49:6f:0a:bf:71:
40:90:5a:af:3b:5c:5f:71:df:69:c1:fe:19:3f:af:
cb:6b:3d:3e:88:7f:4c:2b:d0:5b:cb:42:25:d8:75:
7d:03:e9:53:82:6d:09:e5:f8:1b:80:0b:07:53:5c:
fa:21:9f:69:7f:1c:ed:a3:61:a6:dc:ce:0c:ab:7e:
eb:37:f2:3c:9d:48:bc:18:86:42:ed:15:33:8f:05:
4a:ea:5f:a0:ba:09:7e:9a:1c:d4:c3:d6:fd:aa:c3:
8a:26:f6:1f:eb:ad:29:6b:46:f3:ca:6a:2a:a5:4e:
c2:d2:96:d3:dd:8c:57:3d:3d:79:92:0a:8c:2a:b6:
ff:e5:e9:5a:bb:62:a5:5e:a5:05:ec:2d:f2:df:37:
3e:33:a1:e8:19:44:01:fb:54:90:d6:d8:4f:24:2e:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:DF:AC:F0:5B:9C:5D:7A:A2:AE:B9:34:E0:A2:F3:76:C0:54:4D
X509v3 Authority Key Identifier:
keyid:16:EC:85:8F:AA:2F:C7:81:6E:B2:29:03:D9:09:F9:A3:FB:BC:16:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuyFj6ovx4FusikD2Qn5o_u8FmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/vYvfrPBbnF16oq65NOCi83bAVE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fb5cde-9e0e-4586-aff1-9552d54afffe/1/FuyFj6ovx4FusikD2Qn5o_u8FmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:e0:6c:a0:93:73:42:43:9c:3d:19:13:c5:2d:08:21:a3:34:
3c:66:d5:ae:4d:18:65:f7:95:e2:e3:26:ef:57:7d:5a:d9:b4:
8e:58:9a:e2:fb:1e:f9:f8:51:29:ed:38:48:40:d4:23:ed:2a:
32:fc:72:ba:5d:f4:1a:fa:ed:5a:fe:2b:d1:bf:9d:68:49:c5:
0a:b8:ae:72:73:d4:3c:56:6a:1d:db:1d:83:fb:8a:98:c0:7d:
d4:95:eb:91:05:c4:1a:4b:e3:5f:b9:96:c9:90:ec:8a:76:9f:
6c:98:bc:5c:51:26:5c:3e:16:cb:12:36:9b:c7:22:a7:47:94:
dd:a6:7c:91:0b:dd:0a:5d:a5:c0:3f:11:af:02:e7:b6:09:68:
06:a1:cb:a9:8c:6d:a4:dc:dd:23:6a:a1:8b:62:a6:e8:b0:27:
6b:39:34:84:dc:c3:08:f2:ed:d9:fe:e3:03:f9:5d:2b:3b:06:
7b:ef:32:5c:a7:bb:06:09:02:d8:50:d3:67:6b:62:8b:02:dc:
0d:c9:e1:3c:ef:01:15:a6:09:8b:5c:2e:09:7b:2d:61:50:69:
d4:d4:88:fe:bc:63:33:fa:8f:a8:bb:7e:2b:ba:f5:6a:cb:c7:
9e:ab:e2:19:eb:dd:37:e2:8d:d4:4f:48:bc:8a:ed:91:3e:9d:
80:fc:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net