Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/Dt7cb9Or6bmDTgSU8HZOaoyDO9s.roa
File: Dt7cb9Or6bmDTgSU8HZOaoyDO9s.roa (raw, json)
Hash identifier: HVwEtd/VoO/24DZt3Xt69yyZRiIph71n2OD2pyTiRbk=
Subject key identifier: 0E:DE:DC:6F:D3:AB:E9:B9:83:4E:04:94:F0:76:4E:6A:8C:83:3B:DB
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 17F61B25
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/Dt7cb9Or6bmDTgSU8HZOaoyDO9s.roa
Signing time: Sat 01 Jan 2022 09:58:18 +0000
ROA not before: Sat 01 Jan 2022 09:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199898
IP address blocks: 91.238.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402004773 (0x17f61b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jan 1 09:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ededc6fd3abe9b9834e0494f0764e6a8c833bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:14:d3:d1:86:80:87:2c:eb:84:f8:10:ea:
eb:4f:2c:d5:0f:8c:05:d2:66:ce:51:75:c9:fd:5c:
68:21:1f:b5:7f:c4:16:7d:af:e5:80:17:9d:ce:0b:
4f:09:9c:b1:59:d1:57:d5:a2:06:ed:24:ec:29:30:
3d:f0:08:1a:c8:00:4e:5f:75:f0:43:d5:2a:8e:d4:
c7:76:2f:ab:3e:fc:10:bb:4f:a0:b3:5e:42:7a:0d:
43:95:d7:c6:6d:b3:4e:f7:28:2d:b4:6c:c9:6b:ab:
0b:dc:d8:cc:9a:09:a8:b4:70:e5:81:5c:34:95:2e:
4b:d9:1c:4f:41:45:e1:42:9c:fb:12:55:72:27:9d:
50:7f:09:be:77:50:22:5d:d1:2c:db:d5:84:fd:77:
13:10:ac:04:93:7a:40:66:b4:6b:8a:ab:96:00:23:
82:e9:7f:fd:93:5f:4f:30:22:ea:d9:f6:cc:97:17:
ab:0b:d3:a3:95:e6:19:ab:11:da:4e:f0:39:1a:e9:
f0:33:45:6b:62:29:46:99:b7:7c:84:94:27:b0:8f:
66:f1:1f:8e:04:c2:de:fd:c9:c4:ee:14:a9:a9:1a:
a9:1d:14:4b:c5:b6:8d:52:19:04:ea:19:3a:d0:74:
c4:df:14:bf:cf:c6:5a:ae:95:44:f4:78:5a:0c:c8:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:DC:6F:D3:AB:E9:B9:83:4E:04:94:F0:76:4E:6A:8C:83:3B:DB
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/Dt7cb9Or6bmDTgSU8HZOaoyDO9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.251.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2c:ca:5a:d4:ea:78:c0:2d:1b:5f:56:16:85:5d:e5:b7:68:
f6:cb:2a:6e:9f:c9:c0:99:89:f0:87:bf:25:dc:b7:10:91:0c:
b0:0b:a4:39:b8:5a:48:40:d6:9a:ed:b5:2e:33:d2:29:c7:15:
60:80:fd:c7:46:81:60:21:75:3e:4a:df:42:d8:cb:70:e5:07:
86:d8:23:58:81:46:d1:d4:12:ec:d7:75:8e:f0:3d:61:ec:1d:
56:fe:67:b9:0f:e9:f4:48:fd:62:75:35:10:e9:2b:2d:63:05:
78:ea:5c:f9:c5:94:61:d2:e4:be:77:74:0c:0a:1d:11:d9:f7:
99:27:29:b6:fd:2d:34:73:83:11:1f:d9:d4:a8:6d:00:e8:4c:
85:fe:b7:7d:36:75:81:9c:98:cb:3f:e3:d2:9a:ae:e7:56:31:
3c:95:15:cb:ce:e2:92:37:09:50:00:0f:c2:57:ff:b5:e3:9a:
43:ab:02:61:80:22:65:47:b4:c0:29:a2:a5:db:a5:5d:6f:41:
5a:91:86:a6:2e:3a:96:88:d4:3b:88:47:e1:80:00:0c:ff:b3:
84:b0:bd:d5:e2:21:b6:42:4c:35:dd:08:25:3b:5e:96:24:7b:
16:4b:40:3d:62:72:81:f2:66:1f:df:7e:fe:4a:12:cf:91:b9:
de:db:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net