Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/v00MFxHTpJQ1j_HoOIQRNmfYyV0.roa
File: v00MFxHTpJQ1j_HoOIQRNmfYyV0.roa (raw, json)
Hash identifier: mNbkPOAfDfZ8TKlissEK4lWrD7J5801aO0roAiabwxI=
Subject key identifier: BF:4D:0C:17:11:D3:A4:94:35:8F:F1:E8:38:84:11:36:67:D8:C9:5D
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: FFE576
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/v00MFxHTpJQ1j_HoOIQRNmfYyV0.roa
Signing time: Sun 06 Feb 2022 11:55:22 +0000
ROA not before: Sun 06 Feb 2022 11:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31898
IP address blocks: 91.221.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16770422 (0xffe576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Feb 6 11:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf4d0c1711d3a494358ff1e83884113667d8c95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:bf:d5:0d:72:ec:6d:33:8f:fa:d4:e8:c1:
9f:5b:23:2b:34:26:40:83:2f:3e:e9:0e:d7:7f:36:
13:67:c3:6f:35:ec:53:2d:1a:07:f5:4b:f3:b8:84:
43:50:72:38:a9:62:20:f4:4d:3a:af:d5:86:4a:5b:
cb:c2:9b:34:4a:fd:6c:e2:96:a5:37:08:13:fa:fe:
bd:c3:f1:aa:3e:1e:d1:bb:c9:4e:e4:ad:e2:99:3a:
fb:4e:06:d2:22:b8:51:1f:09:f9:69:13:ca:4a:f6:
96:5f:6f:46:3a:3c:a1:81:07:27:11:10:30:a9:1f:
88:bf:10:e9:20:2a:cb:38:58:03:58:d2:40:be:66:
81:1c:c2:0a:bf:7e:d9:d1:f8:5b:e6:4c:c5:db:44:
96:9b:87:8a:57:db:a2:b8:80:97:df:91:66:c6:be:
90:5d:b7:d2:39:67:89:ea:c6:42:16:92:11:40:9b:
8c:07:26:4b:08:70:2c:29:31:d4:57:5d:7f:75:05:
08:f7:38:6f:59:6f:51:4b:5e:a3:b0:37:28:fe:b2:
31:65:26:b2:2d:c7:90:e9:42:79:81:c4:29:28:e5:
f7:30:62:ca:d6:17:52:6e:b8:e5:16:44:aa:33:5f:
c1:f2:21:b6:5c:ed:15:63:98:66:35:b8:88:e3:53:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4D:0C:17:11:D3:A4:94:35:8F:F1:E8:38:84:11:36:67:D8:C9:5D
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/v00MFxHTpJQ1j_HoOIQRNmfYyV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.233.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d3:28:a3:b0:28:bf:d5:5c:cb:54:f5:96:ad:8d:f2:ee:ba:
2e:fc:5b:3c:63:ce:37:72:02:6b:d6:70:79:dd:b8:2c:85:50:
22:75:92:98:8c:09:f3:3d:ca:2d:43:72:ae:d4:4b:5f:e2:18:
05:7a:cc:66:38:8b:23:8e:24:bd:4f:be:44:00:df:d9:16:0b:
59:24:44:7e:57:e8:0d:40:b0:50:07:e3:a6:4a:87:c9:0c:bf:
20:37:f2:ba:11:3b:66:01:95:69:c7:4c:74:19:f2:94:3e:b5:
c5:7c:83:f5:4d:38:2a:0f:65:c8:97:ad:f9:ae:24:bf:ec:fd:
dc:56:ff:4d:a4:0d:c1:76:3b:20:70:b3:4a:9d:a8:59:07:22:
29:75:1c:f6:6e:90:5c:eb:be:88:cb:e2:86:10:06:c8:06:7c:
7b:c8:36:cb:aa:89:67:75:80:ac:66:31:aa:7f:1c:d4:4d:04:
d2:b6:9c:64:1a:fa:07:f2:d2:ca:9b:8d:5d:4d:e5:50:62:81:
01:21:8a:d2:eb:1f:c7:97:84:2f:c2:eb:25:2b:27:a0:ae:4c:
6f:70:60:2f:ef:e8:a3:92:21:05:44:27:a8:2d:94:45:d8:3b:
8c:4a:35:64:74:33:2f:02:31:6b:03:de:3e:fc:de:8b:27:55:
b4:55:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org