Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/2xxBeWhr_kIlnpzhKU_Csm2pyqU.roa
File: 2xxBeWhr_kIlnpzhKU_Csm2pyqU.roa (raw, json)
Hash identifier: quzz31jLgkYfqwwyM/nzpcyLc5LvrqokXPsGBtHjldc=
Subject key identifier: DB:1C:41:79:68:6B:FE:42:25:9E:9C:E1:29:4F:C2:B2:6D:A9:CA:A5
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 3DA585
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/2xxBeWhr_kIlnpzhKU_Csm2pyqU.roa
Signing time: Tue 24 May 2022 13:34:13 +0000
ROA not before: Tue 24 May 2022 13:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205307
IP address blocks: 91.236.19.0/24 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4040069 (0x3da585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: May 24 13:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db1c4179686bfe42259e9ce1294fc2b26da9caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:50:69:d8:75:dc:e8:aa:65:9b:dd:41:fb:
dc:08:a8:22:c6:98:57:f1:07:fc:01:5b:42:39:15:
1d:fd:b6:01:f4:a6:ff:90:7a:aa:ac:1c:4f:c9:cb:
98:2e:68:d4:16:db:85:78:d8:5c:a1:33:45:fe:67:
17:ea:49:54:4a:9f:f7:36:92:6b:ce:39:04:0e:03:
a4:00:0f:2a:79:d5:7f:bd:2b:30:6d:ae:84:e5:03:
16:9a:d1:33:0b:3a:62:0d:e2:93:fd:86:39:f8:dc:
19:13:0e:9a:b9:15:48:10:96:5c:a4:e4:b5:fa:bb:
b1:d1:eb:ee:ba:11:12:9b:bc:31:81:11:52:99:67:
98:59:9d:21:1b:31:71:c3:30:fe:30:1e:41:ce:6b:
a4:04:21:4a:8e:c0:47:2f:72:a6:e1:75:4d:40:2c:
26:00:e7:c2:dc:fb:96:98:12:4c:29:49:7e:01:96:
83:6b:02:e2:38:44:43:84:07:c2:99:78:4f:8e:8d:
48:87:97:68:29:ba:44:29:77:d3:0e:4a:ae:e0:2a:
0b:fd:91:9c:35:12:fc:74:8c:58:f4:9e:d1:c9:db:
39:68:e2:e9:dc:07:ca:87:03:36:e4:c3:61:de:a2:
28:31:ac:93:14:54:74:0e:9d:c3:78:3d:d9:e4:83:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1C:41:79:68:6B:FE:42:25:9E:9C:E1:29:4F:C2:B2:6D:A9:CA:A5
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/2xxBeWhr_kIlnpzhKU_Csm2pyqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.19.0/24
Signature Algorithm: sha256WithRSAEncryption
08:55:2a:b4:29:bd:0a:a0:4f:1b:de:4d:99:8b:b1:a8:10:f1:
c2:40:21:b5:ec:41:fe:27:d2:db:b5:be:56:a2:5d:aa:0f:e6:
34:a9:61:39:20:38:80:02:ab:e8:8a:58:72:f8:12:49:23:b5:
6e:e3:92:a8:3e:00:60:c8:63:f7:ca:e3:53:7c:47:74:fb:bb:
d9:a8:e5:9e:e5:ed:77:12:e2:d7:30:76:3e:bc:c1:01:8c:bc:
d1:53:86:f7:49:5a:55:b1:15:45:82:38:65:85:57:cf:d1:3d:
d3:b4:a5:06:2d:20:36:8a:86:51:9a:56:11:3d:d6:89:02:c3:
fa:58:a0:df:3c:72:55:c4:95:4c:51:c5:4f:4c:d6:74:34:c3:
32:20:d5:9a:69:99:59:bb:22:3b:66:d7:d5:2e:e4:94:63:c7:
80:b4:22:7a:56:84:ff:34:33:09:d7:05:5f:99:04:2b:36:58:
1c:29:17:42:35:c8:e4:9e:cf:bc:a7:f5:e7:74:d4:de:a3:c0:
fd:ae:1f:13:06:3d:32:73:7a:90:8b:1f:e6:09:5e:f2:68:b7:
01:ac:7a:71:e3:56:70:b3:23:5d:1e:33:fc:84:11:51:b8:71:
3a:eb:b1:7d:d7:a2:2b:67:63:66:52:ae:0c:d6:37:fc:0f:de:
c5:89:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:11 2024 by rpki-client on console-ams.rpki-client.org