Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/k4iu1AKG3qFoRY8cQzss0fM6344.roa
File: k4iu1AKG3qFoRY8cQzss0fM6344.roa (raw, json)
Hash identifier: Lx3tBNLMycgvXO1tc+/UpFXa9KqEtE/A+lVoiU90Wn8=
Subject key identifier: 93:88:AE:D4:02:86:DE:A1:68:45:8F:1C:43:3B:2C:D1:F3:3A:DF:8E
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: AA5AFB
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/k4iu1AKG3qFoRY8cQzss0fM6344.roa
Signing time: Sat 01 Jan 2022 00:55:57 +0000
ROA not before: Sat 01 Jan 2022 00:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29538
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11164411 (0xaa5afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 00:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9388aed40286dea168458f1c433b2cd1f33adf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:13:d6:39:24:61:17:ee:a5:c1:b4:78:01:
c2:20:6f:5e:9b:a4:1e:72:48:e7:d6:c1:1f:45:8f:
f4:0d:e5:5a:ec:f6:d7:51:5d:e4:30:31:00:3c:69:
68:9f:d7:84:ff:b5:a3:55:31:e5:27:36:6e:09:e1:
da:7a:dd:11:e5:b5:f7:32:f3:22:60:b9:13:55:ea:
85:c8:82:09:e6:1b:58:78:b7:b0:95:2c:de:a4:51:
5b:fc:26:3e:51:fc:0d:dd:1c:9d:b1:ea:3e:78:d3:
1b:cb:b8:75:c4:76:ce:f3:ba:92:ba:fa:01:a8:b1:
0f:fc:8c:ca:08:74:3d:30:d4:e0:4f:03:91:37:b7:
9f:67:09:f8:80:f2:7b:1e:e3:80:93:8f:2f:2f:f6:
d0:e8:3d:47:6e:71:57:f3:06:0d:ca:69:b3:f1:03:
9c:90:59:a1:06:89:ce:b2:34:35:ba:2a:89:5b:8a:
c2:50:ef:2c:c5:58:7f:fd:a0:9a:d7:f3:ce:14:ce:
89:15:34:7e:3d:8a:b6:35:72:3d:5b:be:e4:8d:f4:
06:6c:2c:6c:e0:39:be:0b:df:03:2a:a5:1c:71:ed:
06:8e:32:c3:0d:72:56:fe:0f:6a:de:2c:f9:c3:e3:
72:4b:c5:6f:d2:2f:d5:37:38:aa:9e:56:c6:77:95:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:AE:D4:02:86:DE:A1:68:45:8F:1C:43:3B:2C:D1:F3:3A:DF:8E
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/k4iu1AKG3qFoRY8cQzss0fM6344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c6:8d:5a:b4:87:82:56:af:77:cb:35:fd:7f:63:71:05:5b:
08:69:46:5a:6f:f5:69:b2:6b:f8:05:e7:c8:e4:b7:86:65:55:
6d:78:14:8b:17:08:50:c8:44:83:b9:4c:20:ea:c2:37:d5:df:
fa:fd:e3:28:b8:af:fc:ed:d3:2c:2f:93:69:90:4a:d6:73:86:
fc:4d:06:cb:6d:e0:c4:7c:7a:f2:eb:67:7c:3e:4e:b3:19:21:
67:fb:27:5a:19:5a:d7:fe:ab:43:00:74:14:41:72:26:6d:ce:
d0:7b:3c:d6:70:28:d1:b8:7c:ea:5f:92:f5:87:ff:d7:3c:d1:
4e:fb:fa:7b:a9:60:4e:47:f1:a1:46:a4:98:19:4b:5a:33:9e:
cb:df:62:9f:f3:ab:99:fc:69:e3:d6:05:cc:47:cc:ec:93:21:
48:a4:d3:15:59:c2:c9:ba:49:b1:17:f9:cf:e5:16:32:b6:b9:
0a:db:f4:77:45:64:2d:67:42:ee:4d:67:a0:b8:8d:71:f2:e4:
15:7d:4c:ae:44:12:a2:ae:9e:46:ea:5c:fa:40:fa:40:91:35:
09:fb:ad:4a:26:87:c1:07:0b:6e:96:7e:39:25:8f:20:8c:bd:
48:87:3c:ff:b6:e7:eb:2f:79:08:71:89:9e:1f:a0:ec:1d:a0:
c7:b8:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org