Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/YViIIk3TczoAmLJEA1PD0AZTOVo.roa
File: YViIIk3TczoAmLJEA1PD0AZTOVo.roa (raw, json)
Hash identifier: g3EqnLz4TOor4wDkWFOLxdIUa9HJeJKW1ilz6utOkA4=
Subject key identifier: 61:58:88:22:4D:D3:73:3A:00:98:B2:44:03:53:C3:D0:06:53:39:5A
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 084E0A25
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/YViIIk3TczoAmLJEA1PD0AZTOVo.roa
Signing time: Sat 01 Jan 2022 09:59:00 +0000
ROA not before: Sat 01 Jan 2022 09:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44684
IP address blocks: 45.13.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139332133 (0x84e0a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Jan 1 09:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=615888224dd3733a0098b2440353c3d00653395a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:15:34:d6:b6:95:63:e3:67:92:c8:54:8e:
16:19:7b:ef:dd:a1:3f:5f:06:d1:25:b0:27:eb:07:
6b:76:13:d2:86:38:74:7a:d4:e8:4d:b1:9e:ca:fb:
b6:92:b9:23:7d:1e:70:ef:38:70:13:16:10:00:fe:
c0:79:b9:1e:48:75:b5:4f:b5:5a:3a:66:9b:c5:26:
7e:3e:ff:d0:4e:ec:0c:67:56:17:11:67:1e:0b:3c:
69:27:72:18:de:55:50:86:5f:d4:a3:c3:3b:97:5f:
d6:a6:25:10:1a:bf:cf:f7:18:b2:5f:57:9a:a3:74:
c0:c0:8b:c6:fe:23:1b:7d:fb:93:58:db:31:ef:87:
47:64:3b:f4:59:74:d3:3f:6a:64:25:d0:ab:be:88:
af:20:a6:ba:c5:ac:26:33:1c:07:15:56:7a:bc:19:
3d:da:ff:f6:e2:7b:c9:82:e6:54:db:ce:e9:a7:34:
fa:d8:c1:3f:43:32:e4:73:c8:c8:9c:e7:f1:fc:49:
e9:11:bf:91:d3:3a:3c:ce:f8:23:58:eb:30:4f:58:
f6:b0:ec:08:8b:db:65:43:1a:5a:01:48:48:dc:d6:
ae:16:31:09:dd:07:af:37:81:8b:48:a2:0b:8f:01:
1f:a3:a4:4c:9e:e8:38:1e:9d:40:7e:73:64:dc:9b:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:88:22:4D:D3:73:3A:00:98:B2:44:03:53:C3:D0:06:53:39:5A
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/YViIIk3TczoAmLJEA1PD0AZTOVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.66.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0e:a3:53:61:0d:e1:81:0f:40:50:7d:c7:cb:de:92:ca:bd:
2f:65:46:df:e0:5c:bf:46:76:49:ce:31:03:81:82:3f:51:87:
48:15:81:b4:70:c4:71:70:4a:69:47:0e:69:10:65:0e:c4:57:
e5:a0:0c:ef:8f:74:bd:65:e5:43:46:6d:fc:ac:3f:4c:08:7c:
49:b0:08:5c:72:58:5b:04:a5:82:85:47:a2:43:0d:ec:44:4c:
40:2c:c4:ec:e9:ef:6f:fb:6e:6c:45:f7:3f:2f:e8:8b:b5:57:
34:f0:46:a4:c1:fb:ca:7e:b1:ff:9c:9e:6f:23:03:f7:27:b5:
7f:5a:46:83:56:b5:c2:c4:a4:ce:1d:5a:9e:84:04:35:8b:c2:
e5:3f:c6:fa:82:8f:7c:4a:8c:f2:ef:e3:ec:3c:ca:73:1b:48:
41:c5:1a:32:10:1c:e1:c9:69:c6:25:87:e4:8c:f5:55:64:00:
14:21:7a:00:27:1a:d3:49:66:26:de:02:a3:20:e8:cb:99:8c:
e6:00:33:f9:14:3f:f1:41:58:e8:fb:47:10:83:96:04:31:9a:
04:e4:38:1d:f1:29:79:9e:ca:02:23:4f:5b:e5:80:8c:62:b0:
39:38:2a:4d:2a:c1:e1:ba:7a:60:ab:92:b6:54:6f:8d:34:7a:
ac:73:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net