Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/i7sz4g7_R_OCMsKWcSKv6Zop8Sc.roa
File: i7sz4g7_R_OCMsKWcSKv6Zop8Sc.roa (raw, json)
Hash identifier: DQlxnOC/yJg+eAkLSSUYPYrRoypQyh/fV5Rw+KEWitA=
Subject key identifier: 8B:BB:33:E2:0E:FF:47:F3:82:32:C2:96:71:22:AF:E9:9A:29:F1:27
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 151CCFE9
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/i7sz4g7_R_OCMsKWcSKv6Zop8Sc.roa
Signing time: Sat 01 Jan 2022 13:58:53 +0000
ROA not before: Sat 01 Jan 2022 13:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60918
IP address blocks: 81.17.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354209769 (0x151ccfe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 13:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bbb33e20eff47f38232c2967122afe99a29f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:90:5d:95:73:34:55:54:e1:9f:4a:92:e8:
84:ab:9e:af:2d:85:5f:9b:41:05:4c:85:56:02:2c:
c1:21:b7:2e:a3:7e:3e:c0:f3:a5:78:8b:2b:bd:fd:
be:35:e7:f1:d7:d9:c3:16:d0:1a:5b:4e:f0:c3:36:
05:31:9e:2e:78:9f:06:a6:d9:1a:4d:a3:e4:c4:6d:
dc:5f:50:48:ce:a5:37:26:42:fd:0a:4d:bf:d9:d4:
05:6e:67:05:0a:0c:80:5c:67:4c:e2:ce:d1:48:9b:
5f:70:86:f3:9c:d0:35:8e:c2:4d:7f:89:7b:9d:c5:
e9:a8:be:42:65:58:b9:e9:c9:26:fc:5a:6b:bc:09:
f8:01:95:c8:73:99:e6:30:97:c1:57:de:9d:5f:f6:
ca:c7:a9:5b:0d:a0:e4:c5:4c:07:f9:21:43:6f:db:
3b:b4:7f:91:0d:f7:fb:0a:31:d6:ad:7b:d1:1c:a0:
d0:8f:d1:c1:fb:10:66:07:e1:b2:94:3e:f8:2c:ef:
25:f3:ca:1f:b3:c3:12:9b:1a:f6:e7:b6:61:2e:41:
aa:08:ee:0b:0c:6c:5a:25:69:30:43:ec:7b:e3:ff:
f6:5d:5b:5d:14:92:68:c0:91:bb:44:cc:b4:da:a4:
e8:70:29:60:a1:db:97:79:de:b9:06:99:12:cb:aa:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:33:E2:0E:FF:47:F3:82:32:C2:96:71:22:AF:E9:9A:29:F1:27
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/i7sz4g7_R_OCMsKWcSKv6Zop8Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9b:59:68:3b:79:f1:17:ba:0b:f3:76:60:f5:b6:5d:36:08:
3a:e0:b7:8c:2f:10:d1:4c:8f:a7:a6:09:ab:76:2e:89:6d:56:
2e:9a:2a:1e:c8:6a:ec:bf:c3:05:e4:d3:1a:70:2e:13:02:c5:
fc:1b:9d:af:c6:71:b7:d2:1f:05:00:6d:ac:a6:c5:7a:bc:09:
2b:7f:20:b8:79:3c:3a:71:24:67:b4:dc:6e:42:f8:2f:bb:cd:
11:09:84:2d:bd:32:2b:54:74:b2:a9:c4:6c:a4:1b:e9:ed:f7:
d0:9e:ad:09:fd:45:94:46:15:ff:79:34:68:52:06:a9:d2:97:
42:f7:b5:35:b4:f7:95:52:6d:ca:46:ae:6f:e6:bc:8c:9b:24:
a4:72:df:b1:79:42:8a:3c:4b:5b:cd:ad:07:66:dd:b3:a5:e6:
4b:25:38:fc:7b:82:17:d0:5b:7d:41:8b:69:0c:cf:4d:15:d9:
e5:77:01:39:7b:a8:03:ad:bf:a8:99:bf:a6:38:8a:b4:d5:d4:
6d:c0:aa:17:04:97:3e:c0:c6:9c:96:10:c5:d2:7d:ea:a0:9f:
b1:b8:67:d1:26:9e:40:73:68:b2:8e:0d:32:65:a3:9e:63:05:
ae:a2:d4:9e:5e:50:5e:54:e0:0a:2a:e9:90:f5:8a:d8:51:8f:
e5:9b:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net