Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/8eq5eS02gJBV8lyE9bKzhYP6vM4.roa
File: 8eq5eS02gJBV8lyE9bKzhYP6vM4.roa (raw, json)
Hash identifier: h4uLutDudNZBoSuCV/6xgaAoqs4U4CJS2sYX3+O5wJ8=
Subject key identifier: F1:EA:B9:79:2D:36:80:90:55:F2:5C:84:F5:B2:B3:85:83:FA:BC:CE
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 0183312A760BCFA052636F3649F7731D1CFB
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/8eq5eS02gJBV8lyE9bKzhYP6vM4.roa
Signing time: Mon 12 Sep 2022 10:06:49 +0000
ROA not before: Mon 12 Sep 2022 10:06:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.91.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:2a:76:0b:cf:a0:52:63:6f:36:49:f7:73:1d:1c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Sep 12 10:06:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1eab9792d36809055f25c84f5b2b38583fabcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:c6:38:f6:61:8b:44:e3:f1:fa:f6:13:8e:
2d:1b:8c:cf:00:51:fc:99:77:8b:ee:c3:00:0b:ff:
e3:ec:11:f0:b0:40:df:86:e9:c4:03:8d:4a:01:18:
27:c3:2f:a8:ba:13:5c:d3:d1:e4:41:65:e6:1f:8e:
a3:a1:54:93:0f:1d:71:76:fe:78:ef:a9:8d:2b:fb:
a7:84:94:b5:8e:74:5b:90:e1:fa:db:7d:78:55:92:
3c:15:77:86:77:71:f1:ae:e2:5a:d2:dd:6b:d0:65:
57:52:56:39:c2:7a:0e:cc:9f:a4:ae:a0:fd:2b:f9:
60:81:4b:95:89:ed:fd:a1:8a:61:31:8d:03:40:c3:
3c:97:8e:d7:72:b6:a1:8c:47:c1:c1:69:39:89:3a:
a2:4a:dd:cd:59:89:23:71:ba:c5:d7:8e:5d:50:d9:
ac:aa:da:29:25:19:32:33:2c:a3:3d:dd:e0:72:02:
15:a6:72:b2:d5:13:3c:80:9c:4d:ea:aa:52:08:a6:
0c:63:c3:c5:49:04:21:c8:f6:bd:33:32:9e:0d:fe:
cc:d7:b9:7f:c2:18:d5:24:7d:7e:21:9c:fe:aa:2c:
cc:c4:fd:62:21:07:9b:65:ce:2b:33:2c:ed:38:b0:
0e:50:63:4e:23:b2:be:87:fe:10:92:7a:89:28:52:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EA:B9:79:2D:36:80:90:55:F2:5C:84:F5:B2:B3:85:83:FA:BC:CE
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/8eq5eS02gJBV8lyE9bKzhYP6vM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.78.0/24
Signature Algorithm: sha256WithRSAEncryption
be:7c:6f:d4:71:cd:37:de:41:7b:fe:d8:af:54:4c:98:2e:0e:
d7:f0:00:3b:35:66:4f:55:c6:53:78:21:54:d3:09:0a:40:fb:
2e:7b:96:b5:26:f7:f2:36:d7:72:a7:b4:97:27:1e:00:9f:b8:
47:02:98:ec:88:7b:2d:2a:2d:38:f8:27:ae:01:22:d2:f4:42:
58:c3:45:5d:e6:92:b2:0e:b5:29:e3:aa:d2:b8:f0:37:74:ef:
56:62:10:5d:15:c5:2a:52:9f:5e:9e:a5:4e:7b:62:d2:6c:25:
0d:35:bf:c1:43:7f:3a:bf:13:c9:b5:4f:18:c5:71:55:0b:10:
3f:d7:3c:4e:79:c7:69:94:99:63:92:68:bf:ae:01:cd:e6:00:
54:63:32:31:9a:08:fa:b4:ab:7f:76:8c:53:54:7c:de:e5:9d:
77:9c:d5:3d:2c:8d:3b:29:7d:5a:6f:b4:b5:8c:68:a8:f6:db:
c7:df:e8:a1:4c:3b:e3:af:ab:55:ba:9e:6c:dd:37:2e:46:77:
a0:2c:b8:a6:6c:6f:4a:96:ea:ff:37:be:bb:b0:7b:24:34:74:
14:24:b9:aa:28:4e:f9:3b:82:8c:fb:1d:d3:d7:40:bb:a8:46:
8a:3f:47:ea:8a:70:6a:9b:d0:cc:8f:84:cf:e8:06:1d:87:a5:
ae:c5:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net