Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/7t9MWjYejmhhCp43tV2DlrI6EN4.roa
File: 7t9MWjYejmhhCp43tV2DlrI6EN4.roa (raw, json)
Hash identifier: BCxaU4/1DLDn4cM79jXNrtflD5pcISx+Q+B3CUzBlFs=
Subject key identifier: EE:DF:4C:5A:36:1E:8E:68:61:0A:9E:37:B5:5D:83:96:B2:3A:10:DE
Certificate issuer: /CN=a90dc475029e1d793355978ba46bf873065564b1
Certificate serial: 01853A51262631CE53DAFAB8CD2D69001BEE
Authority key identifier: A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/7t9MWjYejmhhCp43tV2DlrI6EN4.roa
Signing time: Thu 22 Dec 2022 14:51:14 +0000
ROA not before: Thu 22 Dec 2022 14:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41953
IP address blocks: 91.196.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3a:51:26:26:31:ce:53:da:fa:b8:cd:2d:69:00:1b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90dc475029e1d793355978ba46bf873065564b1
Validity
Not Before: Dec 22 14:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eedf4c5a361e8e68610a9e37b55d8396b23a10de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:38:1a:84:e0:61:ac:6b:45:a1:4e:33:4f:
07:4e:14:a6:37:77:13:fa:15:ec:38:19:cd:ec:d5:
b1:be:61:64:39:8d:ae:c2:c1:09:35:d3:3c:5c:7f:
6c:ff:4f:55:01:94:0b:93:a2:d8:d4:cd:5d:46:26:
5d:55:a3:a9:f3:af:c6:72:24:d6:93:04:c6:41:56:
9f:20:8e:5b:00:b6:f0:48:ef:09:8a:37:7a:dc:98:
68:5c:02:23:b7:24:6a:db:0b:6b:03:10:2b:7a:fa:
00:15:33:f8:75:1f:37:30:b5:ec:9b:dd:9d:fb:03:
ed:fa:f7:8e:a6:27:88:a4:89:9c:09:53:dd:7d:52:
d7:11:68:cc:74:da:b4:34:74:0e:88:22:d9:b9:e8:
86:39:40:4d:57:85:65:12:c2:64:3a:a4:72:4c:e0:
18:7b:f4:95:04:43:6d:de:66:27:dd:35:c3:9f:ab:
c9:e0:c5:56:d2:01:be:f9:f0:69:47:b9:2b:d7:ec:
cf:cf:41:dc:0b:f8:cb:00:8b:3b:80:6f:fe:7b:f4:
aa:b6:66:be:67:d8:fc:a3:7d:c0:42:4f:ed:50:8d:
6c:9d:ac:08:5a:d7:e9:cc:52:c0:27:0c:cb:9b:b6:
6c:e5:e8:1b:f1:5a:20:f6:db:66:1f:1a:8b:c2:41:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:4C:5A:36:1E:8E:68:61:0A:9E:37:B5:5D:83:96:B2:3A:10:DE
X509v3 Authority Key Identifier:
keyid:A9:0D:C4:75:02:9E:1D:79:33:55:97:8B:A4:6B:F8:73:06:55:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/7t9MWjYejmhhCp43tV2DlrI6EN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/483a68-08e7-4f90-9fd9-ff4a2b85889c/1/qQ3EdQKeHXkzVZeLpGv4cwZVZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.153.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4c:e6:9f:da:58:98:5f:56:ce:00:69:bb:60:4b:4a:6c:db:
3c:11:c8:00:db:f5:54:fd:39:91:40:78:e6:0b:ce:16:e3:2d:
8b:50:64:a5:92:b5:37:ad:52:42:5c:0c:83:cc:5a:13:43:fb:
04:c1:a5:05:a4:66:41:a3:6e:98:2b:09:fd:3d:6a:7e:ae:52:
38:81:f6:a9:38:6d:2d:34:de:f9:f9:d6:0d:88:3f:a0:58:3c:
e9:2f:40:b3:79:6f:c5:3b:14:63:1d:e0:df:14:c4:35:3e:a0:
d6:c2:00:b7:47:29:6e:ba:c0:24:2c:ab:b4:34:74:09:01:4c:
b5:47:d2:62:37:8d:c4:a8:ac:93:d3:b7:fd:fc:15:dd:ce:31:
dd:72:c8:6a:a6:d6:a2:93:b2:da:a2:94:98:ea:65:76:40:77:
3f:04:c2:e3:fa:18:da:98:c1:ff:38:c1:35:fc:67:4f:bc:a0:
91:c5:d9:a6:57:b5:c3:13:98:40:fa:19:7a:e8:41:d2:44:ae:
13:81:de:4a:f4:13:11:b8:45:84:e4:7b:7a:12:89:86:83:b4:
31:c7:6b:64:f4:13:16:96:26:10:aa:22:ce:56:13:7b:ca:b0:
9f:f3:50:bf:de:75:a9:79:94:f3:55:52:e1:b2:ec:0b:31:fd:
68:fb:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org