Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/OXf6ceLBOGBMzOPgIMJtbN21H_w.roa
File: OXf6ceLBOGBMzOPgIMJtbN21H_w.roa (raw, json)
Hash identifier: RwqVmCk2XMIdD6xq0fAlhyJFJctGM6nqoElT+rEAyYY=
Subject key identifier: 39:77:FA:71:E2:C1:38:60:4C:CC:E3:E0:20:C2:6D:6C:DD:B5:1F:FC
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 0879B792
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/OXf6ceLBOGBMzOPgIMJtbN21H_w.roa
Signing time: Sat 01 Jan 2022 15:54:59 +0000
ROA not before: Sat 01 Jan 2022 15:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.10.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142194578 (0x879b792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Jan 1 15:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3977fa71e2c138604ccce3e020c26d6cddb51ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:dc:39:8e:04:19:85:6f:23:3d:5d:fe:f9:
12:66:71:09:cd:f4:ee:f1:7a:7d:f6:17:93:13:98:
86:53:57:9d:a6:dd:7a:40:db:fc:3f:41:e5:00:63:
df:af:7b:92:07:ac:76:65:e5:35:de:a0:1e:e0:25:
4f:fd:29:d0:61:4c:bb:77:26:eb:ea:e8:4e:8a:f0:
18:02:bf:f8:77:a7:d4:e6:a8:e8:75:ea:58:55:ef:
33:b5:d8:81:d8:30:b9:48:f9:e0:59:ad:9e:3a:3c:
47:84:cb:a6:f5:f0:a8:25:97:1b:7b:c6:99:74:42:
5b:b4:a2:6f:e5:19:c6:9e:13:a7:f7:89:0c:24:8c:
6b:ee:25:cf:9e:c8:ba:f0:0c:86:7c:9f:4e:35:56:
0f:ed:bf:9f:6c:de:3f:15:cb:d8:ba:14:dd:59:10:
64:f8:24:f3:db:9c:33:29:a1:82:5e:76:c5:9a:ea:
1b:ed:2a:2a:15:36:b1:a6:22:76:0b:6b:3d:bb:5d:
4b:a4:51:c6:7a:c5:f1:98:54:a3:32:8f:e8:1c:48:
03:30:24:c0:2c:0d:3a:28:9f:4e:42:79:d9:08:65:
11:71:87:94:2b:3f:17:da:c9:00:50:46:ce:91:d0:
16:d9:04:0f:f6:b4:d3:cd:49:01:5e:5f:b9:d7:75:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:77:FA:71:E2:C1:38:60:4C:CC:E3:E0:20:C2:6D:6C:DD:B5:1F:FC
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/OXf6ceLBOGBMzOPgIMJtbN21H_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.123.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c5:5a:d6:7a:38:c1:32:61:f7:cf:81:b5:2c:9b:89:9a:ac:
23:00:24:78:30:88:f2:50:98:e5:7d:fe:5d:3f:33:45:67:2c:
75:02:5d:34:93:59:0c:c3:f8:cf:43:bb:f8:69:c6:e0:87:7a:
00:79:15:af:6b:1f:95:b6:b7:e6:82:b2:e2:8e:b6:8a:7d:d0:
0b:78:4c:ca:9a:0f:76:12:7c:75:5b:40:cf:3e:ee:f8:9c:88:
eb:c8:22:f7:95:a8:c1:30:f7:40:be:7a:34:e6:19:8f:f1:06:
d5:17:ef:b0:7a:7f:b6:1c:f7:48:97:42:4e:2f:d8:08:0e:0f:
46:5f:b5:62:9c:d5:ed:d3:79:19:ca:6e:39:6f:db:0b:b4:10:
d8:3d:66:57:c5:03:3f:77:d0:a2:2d:a6:a3:48:c2:dd:82:9f:
2d:6c:e4:a6:1b:85:c1:ff:80:f7:fe:fc:a6:6f:88:93:37:3a:
56:1f:9b:df:d0:6c:71:61:fb:b5:45:b8:c8:27:8a:63:0f:41:
3b:eb:77:ae:6d:52:8f:66:4d:b6:fd:9c:9a:bd:e9:d6:ae:01:
b0:c0:87:4b:44:ad:cb:6e:a1:75:5a:10:b1:12:6e:78:6e:d3:
e5:0d:4c:7a:4b:08:03:af:74:8c:ab:35:ce:d1:6f:67:73:24:
33:0f:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net