Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/M41IHJPHcTfPnCgrmeJeoVTTZsQ.roa
File: M41IHJPHcTfPnCgrmeJeoVTTZsQ.roa (raw, json)
Hash identifier: NMClLQn4WTtzLpGEz1VFQM1BC048Xe14vnzLE3S2YUY=
Subject key identifier: 33:8D:48:1C:93:C7:71:37:CF:9C:28:2B:99:E2:5E:A1:54:D3:66:C4
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01306ABC
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/M41IHJPHcTfPnCgrmeJeoVTTZsQ.roa
Signing time: Thu 24 Feb 2022 10:54:41 +0000
ROA not before: Thu 24 Feb 2022 10:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19950268 (0x1306abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Feb 24 10:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=338d481c93c77137cf9c282b99e25ea154d366c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:b7:71:04:ca:12:04:ae:a7:b7:ab:17:d5:
fc:28:92:00:b0:73:fc:07:d9:c7:f0:84:27:0f:8e:
db:d1:87:7c:4c:87:97:4d:95:66:d3:48:2a:bf:47:
c1:a6:60:9a:86:0c:fb:1b:ff:07:1d:e8:ef:33:66:
0c:ab:84:4f:5b:f7:1e:6e:f5:19:1b:d4:56:0d:88:
f3:f2:1d:1e:a7:a2:33:c1:c2:dd:dd:01:30:d8:7a:
14:be:7e:05:bc:5f:0a:b8:bd:3b:85:73:b2:b1:5b:
29:5d:19:d3:fd:b3:35:d3:59:3c:33:27:38:ce:30:
f7:8c:60:c7:f7:11:da:a7:39:8f:00:bd:a3:0e:72:
e8:6d:6a:64:a8:68:90:30:ca:c7:78:ab:d2:b6:7c:
4c:21:db:48:c2:8d:50:d8:ab:fd:1a:26:b9:19:10:
7d:6b:8e:fc:47:32:22:a0:32:7f:97:96:da:3a:0a:
cc:bc:80:ca:d7:7b:d2:fe:3b:6c:50:de:af:5c:69:
c0:6b:d7:f8:cc:84:3c:25:65:8c:b8:a6:69:6a:77:
9e:99:80:25:9a:8e:84:ec:bb:a7:1e:43:a0:42:62:
e5:1a:58:6a:4d:26:f6:52:b5:16:eb:28:2f:7d:19:
0d:64:8a:a5:47:3b:60:88:99:b3:31:62:a4:fd:e3:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:48:1C:93:C7:71:37:CF:9C:28:2B:99:E2:5E:A1:54:D3:66:C4
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/M41IHJPHcTfPnCgrmeJeoVTTZsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:43:60:df:21:d0:f7:ea:15:14:d2:69:ca:71:60:96:06:26:
d9:cd:d3:3a:d8:80:c1:35:ae:1f:19:44:f4:bd:6f:61:22:8c:
02:b5:0e:b3:92:73:8f:56:38:c4:15:4b:c2:0c:a0:6c:f5:10:
13:89:94:63:33:6a:54:cb:f0:bb:9e:a9:ad:29:c6:e6:75:30:
17:4f:5e:dd:ef:87:1a:ac:17:c0:fe:39:16:16:73:80:6d:65:
25:04:e6:5b:a5:d1:d5:e4:e1:85:b9:06:73:5a:2f:6b:dc:34:
83:34:fa:69:cc:85:02:af:7b:bc:2d:6b:92:e6:2a:97:da:e8:
21:f8:b6:ad:5c:f4:12:f3:be:5a:cd:b5:50:31:57:17:b5:3f:
85:63:08:9b:cf:11:87:88:3e:61:0f:a1:32:83:30:1e:eb:8f:
a3:47:bb:a4:b7:40:8a:5a:d9:ea:37:13:fd:dd:d0:df:ac:2c:
af:80:28:58:9c:dd:03:1a:79:c0:24:c9:0a:c5:de:23:55:9f:
78:70:68:36:c0:ab:8d:3a:f0:cd:66:ec:b1:aa:61:e8:b2:fe:
85:09:6e:f2:b3:37:6e:7e:e6:bb:20:1b:9f:11:48:14:d6:13:
73:53:15:00:0c:55:49:14:d0:16:ef:46:9b:90:33:67:17:ea:
c8:e9:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org