Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/9UoXCM9hKCWA1xGODopvORZ53lY.roa
File: 9UoXCM9hKCWA1xGODopvORZ53lY.roa (raw, json)
Hash identifier: hxl8ISSB+cQxxVBYLs8+TqnYYyodg5IAaV3UI1/F8Dk=
Subject key identifier: F5:4A:17:08:CF:61:28:25:80:D7:11:8E:0E:8A:6F:39:16:79:DE:56
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 0159EE1E
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/9UoXCM9hKCWA1xGODopvORZ53lY.roa
Signing time: Sat 01 Jan 2022 05:54:39 +0000
ROA not before: Sat 01 Jan 2022 05:54:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60973
IP address blocks: 91.223.238.0/24 maxlen: 24
91.237.33.0/24 maxlen: 24
2001:67c:1124::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22670878 (0x159ee1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Jan 1 05:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f54a1708cf61282580d7118e0e8a6f391679de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:10:d0:7f:24:61:be:5a:df:dd:56:34:a1:
b1:80:94:40:b6:0a:c9:b6:d8:36:e4:25:85:e5:8c:
82:4c:22:3c:91:8b:c2:20:cb:78:7c:1c:bc:17:77:
cf:86:90:9a:8b:a0:fc:fd:09:fb:08:99:f0:f4:4f:
aa:5a:07:9f:80:6a:30:bf:cb:14:a1:32:37:71:62:
90:e6:c3:33:ee:7b:5b:91:7c:d7:77:e2:54:ce:a5:
b6:57:80:05:4f:59:5a:f0:3d:45:70:4d:fc:c1:af:
a3:11:5e:12:6a:4b:8f:c2:14:46:d3:48:59:e2:3e:
ae:48:3f:84:f1:98:ec:44:5f:ca:d9:c4:03:c3:fc:
d6:74:dc:b8:07:a6:9a:2c:5e:a6:c5:2a:18:64:9d:
df:72:91:3b:69:bb:83:6e:93:bb:4f:7e:ab:be:71:
b2:af:d6:d6:c7:dd:d2:6b:75:9d:eb:87:ef:bd:f0:
4c:4e:a3:1d:d5:85:35:0c:ed:6f:e2:d3:be:5f:d7:
58:21:09:ec:e9:e4:f2:e7:48:53:fd:b8:cd:1c:f9:
06:b7:79:fd:33:59:d6:c6:f8:cc:90:15:9d:dd:b7:
fb:f2:ae:f2:5b:13:4a:2f:29:3e:17:56:e1:12:7f:
86:d5:cd:bd:10:cd:fe:6a:f3:d4:82:04:4e:8d:68:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:17:08:CF:61:28:25:80:D7:11:8E:0E:8A:6F:39:16:79:DE:56
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/9UoXCM9hKCWA1xGODopvORZ53lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.238.0/24
91.237.33.0/24
IPv6:
2001:67c:1124::/48
Signature Algorithm: sha256WithRSAEncryption
0c:ac:2e:f6:ac:fb:58:a7:05:1a:63:57:0c:f7:b8:38:bf:c3:
cc:f9:b1:22:99:1c:3f:bb:dd:22:6a:44:c9:3c:fe:0d:f4:f3:
ae:a5:57:22:96:95:f0:95:70:69:05:89:7a:e4:dc:5f:26:4c:
e7:09:3f:4a:f4:16:78:50:ff:6c:cc:0d:b4:55:55:96:42:c3:
a6:49:69:ff:40:06:b7:42:56:39:93:dc:02:09:ef:88:d3:68:
6b:a2:a3:d5:50:00:03:b3:2c:49:6e:eb:23:98:84:74:b6:b1:
69:d0:83:71:6e:2b:27:b4:fd:08:33:dc:95:9b:50:9e:49:05:
68:ac:bb:bc:65:50:6e:12:c4:83:5e:a8:82:53:57:c1:f5:5c:
84:72:02:6a:94:b5:23:90:64:af:1d:ab:05:65:85:0b:3c:23:
d4:07:dd:42:0d:82:97:2e:c5:13:b5:71:8a:c8:6b:b5:39:d9:
24:17:7e:69:b3:20:87:ac:7d:28:69:dd:1c:6c:03:4b:fb:07:
15:98:5b:5d:9d:cd:00:ec:a4:0c:03:14:dc:b8:f2:f2:26:18:
d4:eb:04:47:9f:f5:bd:98:97:73:d0:01:78:3a:5c:25:51:4a:
da:ea:9e:dc:7a:1d:43:f5:84:cd:c7:2e:68:f6:05:77:25:cb:
10:f1:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net