Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/6w7cOKYVvi4x-NLaYOdzj_QApy4.roa
File: 6w7cOKYVvi4x-NLaYOdzj_QApy4.roa (raw, json)
Hash identifier: 44ivNkvkNJ3lx9eO4BU0z3dt5R9lpEa1lLsnJuNnfSE=
Subject key identifier: EB:0E:DC:38:A6:15:BE:2E:31:F8:D2:DA:60:E7:73:8F:F4:00:A7:2E
Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial: 0159D5C2
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/6w7cOKYVvi4x-NLaYOdzj_QApy4.roa
Signing time: Sat 01 Jan 2022 12:03:54 +0000
ROA not before: Sat 01 Jan 2022 12:03:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43854
IP address blocks: 91.198.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22664642 (0x159d5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Validity
Not Before: Jan 1 12:03:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0edc38a615be2e31f8d2da60e7738ff400a72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:91:e4:dd:c8:f1:fe:b1:fb:14:ca:41:1d:
85:4a:21:78:31:86:41:db:dc:c6:5b:f4:10:70:8d:
e6:85:af:2b:a0:b2:2c:7d:07:1d:8e:7b:33:da:00:
fc:8c:e2:ef:d3:b2:b3:b9:22:40:67:9d:63:28:c3:
43:5d:d3:b8:9b:70:c8:a0:35:3a:1d:e3:29:cf:bd:
d7:56:06:ff:fd:b3:37:50:87:49:d1:60:49:c6:c1:
99:bd:12:2b:ca:c0:a6:d7:e8:a0:8b:95:2c:11:c3:
03:92:d0:24:fb:32:38:bb:1d:da:f9:9d:52:7e:05:
f6:11:0c:cb:12:ee:62:c9:38:06:ea:df:eb:b1:7e:
39:75:e7:71:eb:24:66:78:c3:f4:98:f9:3c:6d:31:
7d:3e:75:12:0f:b7:22:b0:09:03:73:4e:14:8a:c7:
4b:d0:62:df:25:d7:9d:e2:2d:98:1d:48:45:80:3a:
4c:3e:87:4b:7a:97:e1:cc:32:09:82:30:3d:ab:c9:
e2:5a:29:26:dd:e6:d3:b1:c9:4a:54:4f:84:34:e3:
a5:c0:8c:58:00:17:ea:6e:7d:55:ed:07:e8:57:d0:
20:38:31:31:43:56:4c:7a:64:8a:c9:87:e5:de:38:
71:72:10:60:dc:1f:38:e6:a1:50:9e:88:1d:f5:7b:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:DC:38:A6:15:BE:2E:31:F8:D2:DA:60:E7:73:8F:F4:00:A7:2E
X509v3 Authority Key Identifier:
keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/6w7cOKYVvi4x-NLaYOdzj_QApy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.190.0/24
Signature Algorithm: sha256WithRSAEncryption
36:40:c7:e2:e7:eb:fe:50:f2:2b:16:9e:2e:b1:d3:c7:41:53:
07:98:84:9b:b4:fa:5c:2e:8c:1f:8b:fd:44:f6:1b:7d:c3:04:
c9:33:b8:ac:67:cf:b0:67:e6:33:15:59:55:52:6b:ad:eb:49:
d3:b4:a5:b1:2b:ad:ec:d1:ec:96:23:23:77:1e:6a:d3:a6:eb:
9a:39:f2:32:46:dd:fa:0d:de:91:7b:5f:5b:c6:62:7a:e2:34:
eb:95:20:14:05:75:be:04:f3:74:1d:76:7b:1a:1f:89:d8:e6:
2a:cd:a0:2a:36:a1:20:9b:70:ec:e2:57:76:b0:c0:12:f8:59:
d7:c5:6b:71:37:47:c6:0c:89:13:fd:bd:73:0d:8e:de:92:02:
b5:77:42:8d:e8:7d:ea:be:b8:a9:db:94:8c:b2:b9:b4:28:b3:
07:c4:75:ef:c4:70:4c:ad:3f:7a:89:44:98:81:90:6d:e0:c2:
87:91:18:62:0e:36:2d:11:f4:49:84:a9:cb:79:92:49:3c:29:
f0:4a:a5:46:f1:fc:c1:02:2e:7b:de:d0:46:67:69:bc:13:d1:
b9:39:f9:61:51:90:8a:f1:6a:23:44:eb:f9:10:17:cd:4f:bd:
67:73:4b:87:b7:e9:1f:91:a5:f6:2d:3d:d5:6d:4c:78:89:57:
8d:76:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net