Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/7K_bweiEFihnjJwkIFBO9Wl--Z4.roa
File: 7K_bweiEFihnjJwkIFBO9Wl--Z4.roa (raw, json)
Hash identifier: B455D29bPSs5zoE1I7rS0LeuwRPUx8bKJOC1ddm47rs=
Subject key identifier: EC:AF:DB:C1:E8:84:16:28:67:8C:9C:24:20:50:4E:F5:69:7E:F9:9E
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 01833CC486F6EEE9A1CD7A5FE4731362C60E
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/7K_bweiEFihnjJwkIFBO9Wl--Z4.roa
Signing time: Wed 14 Sep 2022 16:10:55 +0000
ROA not before: Wed 14 Sep 2022 16:10:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 45.91.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:c4:86:f6:ee:e9:a1:cd:7a:5f:e4:73:13:62:c6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Sep 14 16:10:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecafdbc1e8841628678c9c2420504ef5697ef99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:a7:a4:2f:d7:c5:68:0d:b8:d4:43:9c:72:
7d:97:2f:d2:f5:c5:a5:22:f0:89:1c:91:dc:8c:3f:
8b:4b:c8:07:2c:90:4e:1c:a2:1d:a9:b4:4c:8d:e8:
74:b7:f3:a0:21:3b:c0:5a:46:d6:b8:d0:2f:43:f4:
b1:d0:da:5f:0a:d8:53:05:54:09:cb:c2:a5:32:04:
30:46:51:55:b6:01:a9:5a:f8:3b:d8:e4:48:48:9c:
bd:ae:12:96:21:64:be:3f:a0:8b:6f:9e:0f:b0:46:
06:56:60:3a:f1:2e:b8:c5:75:08:f4:a6:a1:81:21:
4f:a0:e1:03:e5:e9:cd:5f:09:d1:f0:3a:00:98:f6:
ed:c8:1d:61:25:12:8d:86:1f:d0:63:83:5b:bc:0d:
35:31:1b:46:22:88:c0:2f:e4:1c:42:23:32:d8:f6:
f2:d1:15:05:d1:59:78:de:e1:06:7e:61:d1:13:2b:
91:59:08:1b:ba:8e:21:25:e9:e4:5c:35:a0:e4:b5:
5e:ce:5f:2a:d3:02:6b:44:9b:71:37:1f:ef:e8:3b:
21:a1:90:e7:25:75:fc:06:9f:a0:59:a4:aa:ac:98:
e7:09:2a:10:d0:47:c4:f0:cb:00:0c:c7:0e:83:37:
12:5d:3e:6b:d4:56:63:22:b5:39:8b:98:59:b4:f5:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:DB:C1:E8:84:16:28:67:8C:9C:24:20:50:4E:F5:69:7E:F9:9E
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/7K_bweiEFihnjJwkIFBO9Wl--Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8d:f7:9e:6b:ef:e4:66:13:c5:8c:82:f8:d6:28:b2:2c:8e:
5b:e1:51:6b:94:6a:b3:99:c0:fb:61:ce:9f:24:f5:68:c1:e0:
87:87:ed:84:a0:4d:80:35:08:bf:67:e7:fd:3d:ea:33:01:e5:
e6:74:b0:db:8c:38:76:46:f6:92:9c:f8:95:d5:16:d8:88:cc:
ce:2b:25:2c:9f:12:45:3d:c9:bf:71:f0:ae:48:ed:ca:fb:64:
91:fa:09:e7:fa:67:ee:4b:d7:a4:56:d9:3e:c1:e1:2f:56:d3:
06:5d:09:dc:ab:ee:d2:06:a9:1c:b3:7a:ad:4c:ef:3f:1f:1f:
84:b9:ca:b5:27:5a:67:63:e8:65:c6:df:7d:90:30:ff:89:ef:
ef:51:33:61:36:bf:a7:ee:d2:22:c6:db:ee:0b:85:9a:bc:a4:
33:7f:4b:81:87:a2:b6:76:ec:91:be:83:ee:00:fe:ca:3b:88:
37:f6:fa:dd:ec:88:0e:6a:69:f1:fb:e3:fd:a3:39:b7:88:fd:
84:c6:e1:28:72:54:7b:94:46:29:2c:c6:ee:8a:c1:0f:3d:2f:
8a:1f:ef:7f:e6:07:ac:94:21:d5:a3:76:eb:5d:92:0c:d2:12:
1d:ca:95:72:6f:c6:e2:1a:b1:a8:6d:78:8f:43:a6:c3:55:a1:
05:9a:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net