Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/K-sKn6l7KH9XxB8PGLJXrq69t88.roa
File: K-sKn6l7KH9XxB8PGLJXrq69t88.roa (raw, json)
Hash identifier: l8i+ErMO4984QwfXr41NBfnydU+olyXLVOpfVpXKnOI=
Subject key identifier: 2B:EB:0A:9F:A9:7B:28:7F:57:C4:1F:0F:18:B2:57:AE:AE:BD:B7:CF
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 43A602FF
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/K-sKn6l7KH9XxB8PGLJXrq69t88.roa
Signing time: Sat 01 Jan 2022 14:00:56 +0000
ROA not before: Sat 01 Jan 2022 14:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43415
IP address blocks: 79.127.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134953215 (0x43a602ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 14:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2beb0a9fa97b287f57c41f0f18b257aeaebdb7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:b4:d1:69:29:78:08:d0:2f:5d:31:2d:6c:
4d:c5:69:d5:27:cb:81:dd:01:1a:72:cb:be:ac:2b:
0e:14:33:f0:a7:82:97:f4:ba:dd:4f:37:18:12:01:
41:ab:bc:fe:46:28:55:8e:87:92:93:f8:ac:00:14:
a3:88:b5:6b:97:61:ad:ab:04:61:19:69:d9:cf:46:
e3:cb:cc:ae:a8:a2:37:5b:d2:22:3b:56:74:96:d5:
c1:88:e7:f8:95:0f:f7:ff:bc:3c:71:1a:ef:33:a8:
b6:21:7c:da:cd:fd:20:81:e6:c7:6d:4a:4e:37:41:
06:91:35:2e:69:79:ee:0b:c7:26:c4:91:b5:3c:e3:
9f:ae:e2:93:ad:ce:35:f7:54:3e:39:af:08:6e:70:
32:1f:1c:2f:39:0f:3e:77:97:94:99:e2:6a:14:dc:
bc:b8:84:55:58:36:7a:4e:d3:64:de:2b:7c:c3:c9:
8c:8e:0b:20:79:e7:7c:e9:6d:29:5e:92:fd:d7:d8:
ca:05:ec:0b:26:c5:23:60:71:ab:3b:f4:76:f7:dc:
4a:24:f1:6a:ad:b5:4d:33:3c:6c:cb:2d:ae:76:29:
ae:61:1a:43:61:c0:a3:16:19:fc:3b:6f:65:59:81:
9c:8a:ba:2a:19:46:05:37:79:43:26:1c:92:91:ad:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EB:0A:9F:A9:7B:28:7F:57:C4:1F:0F:18:B2:57:AE:AE:BD:B7:CF
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/K-sKn6l7KH9XxB8PGLJXrq69t88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.46.0/24
Signature Algorithm: sha256WithRSAEncryption
50:07:58:cb:d4:75:c5:39:f6:8d:f8:82:bb:f0:c0:cb:35:6f:
e0:f8:37:73:c3:16:f8:93:61:8b:47:3b:f7:1f:89:ad:f2:5c:
19:8a:65:81:cd:45:dc:68:53:59:b9:ab:47:cc:0e:ec:88:27:
49:5f:08:1b:2b:58:fc:51:96:04:47:83:c2:a2:b6:2a:06:6d:
77:dc:67:17:32:29:37:6a:e2:a3:d4:28:10:14:40:c8:24:53:
7e:23:7b:89:84:e9:3b:5b:3b:70:2b:72:fd:4d:17:5e:d1:6c:
19:9d:4a:a4:80:40:8d:af:33:bd:1f:a1:02:aa:b0:6f:9b:d2:
d9:43:1e:e1:f2:7c:02:97:d4:70:a5:6f:87:c4:4e:1c:7e:22:
18:c1:6e:1b:48:f7:d5:5d:ff:62:63:85:b2:24:8a:94:05:c0:
69:f5:44:9b:7c:c2:84:ca:ce:3c:fb:3f:4e:f6:d0:28:60:81:
41:37:26:b8:bd:84:37:a9:ba:7f:44:fe:b4:a4:d9:6e:94:99:
97:98:ff:d7:ae:9f:b9:b3:76:c1:76:29:f2:c3:87:ea:12:3a:
33:ed:83:20:07:e4:34:e1:0a:a1:77:74:ec:54:6f:54:63:0e:
7d:4e:14:7d:06:42:73:17:ce:7b:23:3d:90:70:1c:71:84:77:
13:6a:54:8a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQ6YC/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjUyNjM0YTJlYjAzZjg1NjViNWUzM2RjMmI5ZjQ5MDQxZjdjZmIwMB4XDTIyMDEw
MTE0MDA1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmJlYjBhOWZhOTdi
Mjg3ZjU3YzQxZjBmMThiMjU3YWVhZWJkYjdjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANc9tNFpKXgI0C9dMS1sTcVp1SfLgd0BGnLLvqwrDhQz8KeC
l/S63U83GBIBQau8/kYoVY6HkpP4rAAUo4i1a5dhrasEYRlp2c9G48vMrqiiN1vS
IjtWdJbVwYjn+JUP9/+8PHEa7zOotiF82s39IIHmx21KTjdBBpE1Lml57gvHJsSR
tTzjn67ik63ONfdUPjmvCG5wMh8cLzkPPneXlJniahTcvLiEVVg2ek7TZN4rfMPJ
jI4LIHnnfOltKV6S/dfYygXsCybFI2Bxqzv0dvfcSiTxaq21TTM8bMstrnYprmEa
Q2HAoxYZ/DtvZVmBnIq6KhlGBTd5QyYckpGt99MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQr6wqfqXsof1fEHw8Ysleurr23zzAfBgNVHSMEGDAWgBRbUmNKLrA/hWW1
4z3CufSQQffPsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cxSmpTaTZ3UDRWbHRlTTl3cm4wa0VIM3o3QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvN2E1YjQ0LTZiMTgtNDJkMy1hOGQ1LWRjNjU1NGZkMTIzNS8x
L0stc0tuNmw3S0g5WHhCOFBHTEpYcnE2OXQ4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
N2E1YjQ0LTZiMTgtNDJkMy1hOGQ1LWRjNjU1NGZkMTIzNS8xL1cxSmpTaTZ3UDRW
bHRlTTl3cm4wa0VIM3o3QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE9/LjANBgkqhkiG9w0BAQsFAAOC
AQEAUAdYy9R1xTn2jfiCu/DAyzVv4Pg3c8MW+JNhi0c79x+JrfJcGYplgc1F3GhT
WbmrR8wO7IgnSV8IGytY/FGWBEeDwqK2KgZtd9xnFzIpN2rio9QoEBRAyCRTfiN7
iYTpO1s7cCty/U0XXtFsGZ1KpIBAja8zvR+hAqqwb5vS2UMe4fJ8ApfUcKVvh8RO
HH4iGMFuG0j31V3/YmOFsiSKlAXAafVEm3zChMrOPPs/TvbQKGCBQTcmuL2EN6m6
f0T+tKTZbpSZl5j/166fubN2wXYp8sOH6hI6M+2DIAfkNOEKoXd07FRvVGMOfU4U
fQZCcxfOeyM9kHAccYR3E2pUig==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net