Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/8vIfDYwngd7AGTLGi8eqoTXw254.roa
File: 8vIfDYwngd7AGTLGi8eqoTXw254.roa (raw, json)
Hash identifier: zmjPhvUBn6pTOzi5gXQEUtUHE+4TJAPfO/11Sdl8+uk=
Subject key identifier: F2:F2:1F:0D:8C:27:81:DE:C0:19:32:C6:8B:C7:AA:A1:35:F0:DB:9E
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 151C2830
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/8vIfDYwngd7AGTLGi8eqoTXw254.roa
Signing time: Sat 01 Jan 2022 13:58:52 +0000
ROA not before: Sat 01 Jan 2022 13:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24618
IP address blocks: 81.17.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354166832 (0x151c2830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 13:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f21f0d8c2781dec01932c68bc7aaa135f0db9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:ff:1d:e3:7f:17:3c:48:6c:6e:3a:27:2d:
1e:24:4c:85:ad:02:22:c1:99:6c:13:22:5c:45:37:
1d:97:54:29:ea:7e:47:5f:c5:af:60:7f:49:a2:2d:
9e:91:00:07:59:89:e1:28:06:82:39:82:9a:cf:3b:
75:42:4d:9a:ec:6a:97:2d:fe:c4:e3:25:d0:00:05:
02:27:44:c2:09:90:da:92:29:72:f8:97:5d:3e:df:
21:a6:4d:85:a5:ec:31:39:fa:ae:1d:b1:cb:34:dd:
ea:06:0a:27:24:d8:bd:5c:c1:b9:fa:68:34:6c:d0:
9a:14:74:85:80:b7:85:69:ab:7c:61:c2:56:df:90:
c3:c2:b6:e8:88:bd:8d:69:99:7f:1c:a9:fb:27:34:
52:32:57:f0:19:e1:e1:fa:60:1b:eb:6e:ce:d9:44:
52:cb:d7:32:6e:44:fb:b7:ac:ff:51:58:7a:f7:03:
e3:f5:11:84:84:e2:7e:dc:cd:87:f4:c9:95:e7:ad:
66:f6:09:8c:e5:04:d0:95:4e:24:a3:00:a6:14:5a:
7b:77:ac:3a:d4:bc:f1:53:64:04:e6:f8:2e:a4:cd:
f9:3a:61:88:e0:73:d9:d9:b9:d0:52:65:35:74:b0:
56:00:27:7f:a3:c5:d3:40:fa:bc:43:4a:1d:05:83:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:1F:0D:8C:27:81:DE:C0:19:32:C6:8B:C7:AA:A1:35:F0:DB:9E
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/8vIfDYwngd7AGTLGi8eqoTXw254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.129.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bf:7e:53:52:2c:3c:2d:ff:8e:38:be:09:69:5b:d9:c6:cc:
3b:f2:f5:df:0f:e0:5f:34:42:07:71:3f:4c:18:6f:58:a7:40:
a0:39:0b:62:5b:81:98:05:3b:41:bf:78:5f:10:a5:98:9f:87:
25:2a:d2:ce:3c:59:06:c6:70:08:e2:0b:73:3d:ef:d6:bb:e8:
c6:b2:9f:2c:2d:f5:6f:81:3f:d7:29:14:71:e6:37:d4:06:b4:
10:04:bb:dd:f8:cf:54:51:95:6b:32:13:f8:0e:6c:ae:dc:64:
69:99:0c:00:d5:fb:d7:e4:f4:41:06:1c:6f:71:1b:f8:ce:8c:
3a:db:18:d0:f7:79:16:85:a0:8f:3f:53:5b:5c:6d:91:6c:f2:
67:48:ce:04:7f:62:9d:cd:c1:36:f1:ae:bc:bd:77:87:b3:5d:
9d:70:d4:3d:71:de:78:8c:e5:45:6d:17:cb:47:6c:1f:84:98:
57:16:8f:2e:c6:f8:c9:16:78:41:63:e3:a0:2d:3e:0a:7f:bf:
85:f9:e9:04:a4:7d:44:93:46:7e:98:35:26:e3:b7:50:c8:66:
e1:c7:78:ce:7a:97:11:d0:48:92:f6:7b:a7:97:55:e4:23:be:
b2:74:65:00:b3:36:66:19:7c:3c:8c:79:18:a5:a1:d5:88:1d:
25:44:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:45 2023 by rpki-client on console.sobornost.net