Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/_1KDY4oBpxgYlxvYBQSSPxr38X8.roa
File: _1KDY4oBpxgYlxvYBQSSPxr38X8.roa (raw, json)
Hash identifier: ywpq9dW/UMltB/f9dXwB0JT/jrD8l2f1v6+ysTh1mwQ=
Subject key identifier: FF:52:83:63:8A:01:A7:18:18:97:1B:D8:05:04:92:3F:1A:F7:F1:7F
Certificate issuer: /CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Certificate serial: D50380
Authority key identifier: 27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/_1KDY4oBpxgYlxvYBQSSPxr38X8.roa
Signing time: Mon 25 Apr 2022 18:08:09 +0000
ROA not before: Mon 25 Apr 2022 18:08:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 80.91.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13960064 (0xd50380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Validity
Not Before: Apr 25 18:08:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff5283638a01a71818971bd80504923f1af7f17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4f:8f:fc:c0:56:47:9f:2d:80:2a:45:63:b8:
4e:56:73:8c:72:82:e5:e7:95:ea:a1:63:b3:16:2a:
b0:7b:9f:ed:17:c3:39:eb:de:05:99:4b:5c:46:ab:
bd:66:a8:06:47:9c:67:c1:a8:60:8c:c2:5d:88:27:
0a:6c:03:41:1f:59:0a:8c:d9:53:af:9d:89:1e:26:
2a:3d:58:9c:c4:f2:b9:83:a9:3e:e7:a2:dd:47:53:
68:a9:55:e2:e9:74:6c:f8:29:4a:43:b2:c7:a1:64:
6d:f4:72:83:f4:36:02:96:51:82:8d:dd:90:81:3a:
ec:56:c0:ca:2c:ec:01:02:c5:4d:6c:29:3b:15:da:
11:23:5b:78:6c:d3:a6:c1:a5:d3:92:07:5f:aa:f3:
f2:94:6d:9e:b9:8d:08:a9:40:4d:9b:27:34:b8:f8:
db:8c:4c:9f:93:1b:b1:33:92:b9:5c:76:64:08:a6:
58:5e:2e:ee:4d:f6:71:01:4c:5e:24:81:0c:9f:ad:
31:45:df:13:23:54:fb:c1:ab:8c:ea:f4:44:af:b1:
f2:f2:98:69:6c:1f:ba:49:5c:eb:b4:42:a5:76:e4:
cd:62:10:7b:1b:08:ed:b2:a3:42:42:55:81:5e:f9:
b7:97:91:5e:5d:47:3c:46:a9:d9:28:21:d4:10:c8:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:83:63:8A:01:A7:18:18:97:1B:D8:05:04:92:3F:1A:F7:F1:7F
X509v3 Authority Key Identifier:
keyid:27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/_1KDY4oBpxgYlxvYBQSSPxr38X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/J-2NtPEB4VJCZqEHjnzYLXxhKEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.212.0/24
Signature Algorithm: sha256WithRSAEncryption
88:56:9f:94:22:7a:c6:4b:b7:d9:df:c6:f4:34:35:ce:e9:95:
2e:7c:8e:06:9e:9c:dd:19:c0:11:d8:5a:1a:c2:d0:a5:55:72:
fa:b5:49:2f:1c:9c:10:a9:1f:ea:ef:3d:ee:f6:e9:2b:b0:59:
21:d8:b6:5b:ad:79:3f:f7:e1:43:0e:67:c4:07:6d:0c:4c:18:
2c:98:ad:61:4a:a7:d4:38:fc:8b:7f:d1:27:35:00:19:7a:0a:
92:f0:02:d8:34:03:ee:24:80:2e:42:5f:7a:8f:b2:ce:30:29:
56:3f:d0:c0:3b:c7:c2:a2:42:68:cf:f2:be:61:59:53:88:cc:
d3:00:95:6e:d9:04:c8:69:34:d8:bd:b0:59:f5:38:32:b5:6a:
78:74:cc:93:55:e3:17:d8:ae:e6:1a:bb:ea:7e:cf:95:93:4e:
a9:bb:40:18:9d:de:80:8f:bd:71:94:cf:81:bf:55:11:9e:ac:
2d:05:d3:99:62:5f:c4:c7:82:c7:b2:20:63:3d:97:fe:05:07:
2a:7d:b1:b1:ba:4c:f9:b7:2d:81:74:8c:76:b4:14:45:f3:99:
f5:d9:29:f1:e1:1b:8b:b5:a7:b5:f6:78:3d:57:86:9d:06:26:
29:ef:5c:85:2d:83:7a:d4:f0:70:62:68:19:ef:15:67:04:ea:
58:46:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net