Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/WH5qUROhm5WbS9C3PCQhrGC6oBY.roa
File: WH5qUROhm5WbS9C3PCQhrGC6oBY.roa (raw, json)
Hash identifier: Onr9nXEQO4dYkn+MqlxElrCyw7QzcYbxEHXAAmY+lUY=
Subject key identifier: 58:7E:6A:51:13:A1:9B:95:9B:4B:D0:B7:3C:24:21:AC:60:BA:A0:16
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 096F05C5
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/WH5qUROhm5WbS9C3PCQhrGC6oBY.roa
Signing time: Sat 01 Jan 2022 00:52:29 +0000
ROA not before: Sat 01 Jan 2022 00:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197415
IP address blocks: 45.146.96.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158270917 (0x96f05c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Jan 1 00:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587e6a5113a19b959b4bd0b73c2421ac60baa016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:73:c9:5b:1f:15:57:63:22:65:27:87:81:
6a:d1:c4:f5:af:d4:52:a3:b6:b8:1f:98:b6:19:28:
96:22:a1:13:66:35:39:4b:63:27:db:e1:92:9b:a9:
e6:a6:3e:26:c2:ae:8d:f7:ef:ab:02:f2:65:73:db:
ab:91:ca:1d:cb:00:c9:28:69:db:40:d1:27:06:8c:
3e:51:dd:b0:c7:1e:da:00:c6:e3:6c:a2:26:59:f7:
e2:13:bf:21:9a:12:6c:f6:4f:28:ad:e6:0e:36:55:
12:36:93:9d:38:1c:dd:61:8d:ee:22:b7:cc:66:a4:
36:0c:2c:88:e9:88:0d:98:63:c3:1e:de:9b:d2:d5:
f9:40:bc:dc:c2:b7:d3:0f:df:dc:f0:8c:75:f6:37:
45:2e:ac:93:03:2b:ff:9c:f9:55:9e:6b:93:43:21:
d7:82:eb:79:6e:dc:dd:a2:6f:47:90:38:36:2f:4b:
81:d1:f1:17:70:c4:67:b1:dc:56:97:34:a4:10:b3:
c8:a9:53:0a:61:75:b5:88:62:af:59:e8:a4:f1:39:
84:73:3b:b0:59:05:d7:ba:90:09:6c:05:91:a0:b9:
d6:c6:9f:fc:23:bc:5e:eb:36:60:9d:7b:86:d8:70:
b2:0b:36:1b:32:df:61:2e:ec:af:20:2f:20:b0:21:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:6A:51:13:A1:9B:95:9B:4B:D0:B7:3C:24:21:AC:60:BA:A0:16
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/WH5qUROhm5WbS9C3PCQhrGC6oBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.96.0/23
Signature Algorithm: sha256WithRSAEncryption
27:a8:fc:0f:c2:53:f6:a0:38:ce:75:85:1a:14:d4:64:fb:0a:
fb:b1:c0:77:8e:9f:b2:61:9e:62:bb:02:e7:ed:7b:45:a3:b6:
1e:ec:0c:a9:d1:66:f7:11:f8:e8:5e:ad:91:c8:09:fe:58:e2:
4d:87:cd:a7:d3:cb:cc:5d:cc:ab:e6:cb:f9:c9:c7:39:f9:ff:
00:f1:37:b7:85:69:a4:f1:e4:93:09:f0:d8:1f:e0:bc:b2:91:
2c:69:2d:f1:86:4e:20:77:24:21:4f:cd:13:4f:f7:3b:5d:2c:
c1:83:61:eb:d2:59:cd:d5:30:38:7a:1f:a1:1a:04:58:a7:21:
f9:4d:13:9f:fc:f1:6a:c5:a2:d4:dc:f2:5e:45:9c:4a:79:b5:
7d:1f:7a:13:2c:fa:2e:ba:90:b6:0d:02:ef:86:2f:84:ea:86:
04:10:0b:0a:7a:31:28:ef:25:87:ce:cc:32:af:84:51:3b:bb:
28:9e:2d:ce:2c:43:9d:e0:59:47:bb:58:24:2f:3b:de:7e:77:
c1:06:8a:d7:b9:1d:3b:ff:c3:56:14:8e:67:a8:1d:28:c5:19:
ee:74:c3:20:81:ea:80:1f:39:ef:69:18:17:c3:1b:5c:e8:9e:
d6:f9:f9:10:e1:43:24:f6:11:be:ee:a6:d0:7b:8b:89:d9:98:
3a:13:97:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net