Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5zN-qXxd3V8kYeVsdNZ6Zu2V-mw.roa
File: 5zN-qXxd3V8kYeVsdNZ6Zu2V-mw.roa (raw, json)
Hash identifier: GuW4xQspkm8UYN66p2MuFZ0uroMUoUOj+qkrW3FUTpE=
Subject key identifier: E7:33:7E:A9:7C:5D:DD:5F:24:61:E5:6C:74:D6:7A:66:ED:95:FA:6C
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 43AB7091
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5zN-qXxd3V8kYeVsdNZ6Zu2V-mw.roa
Signing time: Sat 01 Jan 2022 14:00:59 +0000
ROA not before: Sat 01 Jan 2022 14:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56547
IP address blocks: 79.127.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135308945 (0x43ab7091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 14:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7337ea97c5ddd5f2461e56c74d67a66ed95fa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:fb:74:e1:f8:0c:42:c0:bb:c9:13:29:e3:
40:7a:d4:1c:d6:65:b1:42:e0:de:e0:c8:78:f9:da:
60:93:29:3d:c9:e7:36:5e:e7:f1:a8:b3:80:12:db:
93:d3:a0:3b:01:28:6e:3a:b9:3f:ec:f4:ea:08:7e:
d2:90:4a:8b:73:1b:d6:d2:f9:6c:11:4b:77:7b:0c:
5e:77:07:07:15:9e:53:07:a5:02:78:a8:a9:5c:f4:
c2:7c:1d:8b:95:cb:84:fa:33:24:14:c3:f0:d2:46:
fe:35:b7:07:4f:95:5c:91:a3:9a:ba:c3:16:43:1f:
1f:62:7c:7e:cf:87:6a:a4:46:78:3f:aa:3a:b4:c9:
de:68:4a:cb:f5:91:6d:5a:86:13:a5:1f:34:53:1e:
5e:9b:bd:a3:48:34:a9:d7:60:e6:d4:ac:d0:06:0b:
0e:d0:86:06:6a:15:bf:52:bb:07:ca:d6:42:20:51:
c8:06:ef:05:0c:c1:1a:84:10:a9:d4:c9:d9:0f:f9:
9c:e7:8c:14:93:d4:2c:e8:c9:9b:ac:ff:70:cb:23:
f3:34:cd:e0:cb:c4:16:8b:79:4c:6c:5d:9b:4d:59:
2d:a6:ad:c1:10:f2:57:44:cc:9d:72:0f:18:a8:00:
cd:83:d3:9b:7b:d0:62:96:6b:7c:f6:8f:0a:d9:90:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:33:7E:A9:7C:5D:DD:5F:24:61:E5:6C:74:D6:7A:66:ED:95:FA:6C
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5zN-qXxd3V8kYeVsdNZ6Zu2V-mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.8.0/23
Signature Algorithm: sha256WithRSAEncryption
45:db:fd:86:e3:6c:bb:8a:c9:0c:24:c2:52:fb:a8:1a:b6:0b:
45:64:f6:a6:15:18:42:60:e6:3b:5c:38:c2:d2:ec:91:c3:1b:
de:c1:2f:b8:99:2b:c3:ff:aa:4f:b0:96:bd:ef:46:fb:6c:f0:
69:e6:15:f6:30:3d:49:45:72:1a:65:f3:a6:dc:be:c8:48:16:
1d:cc:34:28:33:c5:db:3b:39:17:d5:12:cf:ed:45:34:2c:b3:
81:b3:ab:b8:c1:1d:e3:76:12:16:ca:e2:72:4f:ce:6b:0e:cd:
ad:cb:11:87:4a:0f:35:4c:2b:7e:c5:7c:9d:4e:27:7a:6e:17:
d1:87:0f:bd:af:02:e1:ab:07:a0:a6:05:13:4c:b9:1b:c7:96:
2d:37:bb:58:59:ec:a5:d1:17:62:ce:62:94:97:e0:92:77:ab:
22:78:99:bd:3c:53:57:89:e6:c9:61:e9:87:6d:43:14:13:fc:
ca:3a:92:19:ac:e9:12:da:d6:27:02:ac:4c:b9:3d:71:bb:07:
9b:ea:55:b9:7d:1e:90:64:50:60:20:a7:84:f5:a4:e5:9d:61:
48:43:de:ae:35:ab:f0:6a:bf:07:be:5b:94:a1:88:15:cf:2f:
22:38:73:6b:e0:f5:e0:09:c0:bb:86:0b:97:39:79:2b:d2:c0:
b2:4f:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net