Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/L6YfrrNKh6spUXKqtGtdxc31ZY4.roa
File: L6YfrrNKh6spUXKqtGtdxc31ZY4.roa (raw, json)
Hash identifier: +t/4d8DZuw1RICRjVHzquJIvt1MhYx6FgcHdc75qiAA=
Subject key identifier: 2F:A6:1F:AE:B3:4A:87:AB:29:51:72:AA:B4:6B:5D:C5:CD:F5:65:8E
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 07F98A8A
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/L6YfrrNKh6spUXKqtGtdxc31ZY4.roa
Signing time: Sat 01 Jan 2022 11:03:21 +0000
ROA not before: Sat 01 Jan 2022 11:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57804
IP address blocks: 185.160.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133794442 (0x7f98a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Jan 1 11:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fa61faeb34a87ab295172aab46b5dc5cdf5658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:5c:db:8c:32:fc:ef:7d:d9:13:7e:1c:2b:
8e:90:14:16:36:74:be:d5:b9:32:d6:1b:c7:b0:3a:
a9:7e:d7:95:68:fc:56:7a:16:d6:40:57:89:df:5c:
1e:46:21:14:be:d8:c1:9a:f1:61:18:5a:44:76:ba:
c0:7f:71:bc:d9:17:a6:f4:6e:c1:f9:99:b4:b5:d3:
5e:68:6a:df:ee:2d:06:2e:d4:eb:81:32:3f:a5:a7:
71:b4:6a:4d:72:e1:4c:ce:19:b6:8c:4c:c3:73:c1:
94:f9:72:95:bd:e9:06:8d:b5:f7:0a:1b:03:c2:cf:
28:dd:f4:8e:a2:91:f9:61:7a:d6:11:a9:c1:f1:78:
7b:8c:04:e0:bc:1a:38:65:bf:9e:e8:38:6f:2d:00:
2c:8d:a1:12:8a:a5:e3:45:ec:a1:a3:77:85:04:dc:
9f:9a:09:52:c7:7f:96:cc:a6:27:af:89:f8:e7:13:
77:a8:1e:0b:38:83:ad:61:a0:10:7b:ad:04:30:2f:
b2:75:ad:f3:18:80:9a:9c:e4:b4:1d:f2:80:e7:95:
09:96:f5:ca:72:9b:94:9f:e4:d8:04:eb:38:f9:91:
28:db:d2:79:89:3b:c2:49:92:6e:6e:24:3c:10:a6:
01:60:a4:da:80:c0:7c:ed:e9:5a:34:32:4b:6a:e1:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A6:1F:AE:B3:4A:87:AB:29:51:72:AA:B4:6B:5D:C5:CD:F5:65:8E
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/L6YfrrNKh6spUXKqtGtdxc31ZY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.91.0/24
Signature Algorithm: sha256WithRSAEncryption
03:76:8b:f6:8c:96:ea:3b:09:66:12:a5:f2:a4:fe:03:a2:83:
73:e6:ee:8f:64:15:b9:b8:ce:5f:f9:a9:e6:60:bb:a4:a4:82:
4c:a5:f5:66:d0:23:10:49:07:3b:f8:36:86:47:60:1e:cf:d4:
ef:a0:ee:c9:be:d3:fc:e3:60:1a:97:58:0c:38:6a:45:74:18:
70:37:1b:0a:7e:ea:1d:c0:7a:8f:30:f9:18:d2:51:06:16:67:
b5:38:30:63:96:7c:94:a3:8d:76:21:16:05:f7:43:96:c4:c3:
70:b8:c1:f1:79:0a:63:61:0f:50:a8:69:68:e6:62:5b:77:78:
c4:4a:d5:52:2e:2b:cc:43:f7:cc:59:5c:29:e6:90:c1:c7:d5:
f7:9d:d5:63:e3:31:66:54:0c:7e:2c:a2:62:9b:58:c5:a8:3a:
d1:de:da:ac:cd:45:04:50:1e:11:d6:37:ec:04:a8:e1:48:8a:
fb:fa:f4:88:93:29:ff:67:f1:8e:0f:cd:15:1b:58:e4:98:d2:
6a:10:68:fc:fb:b3:79:d4:49:d3:18:a2:79:fa:a7:14:16:c7:
74:7d:3a:76:aa:f9:1a:14:f3:0c:1e:3a:ed:3e:85:d8:a2:d3:
5a:3f:3c:0f:0e:48:df:ca:e7:0b:93:2c:b4:7b:21:49:51:27:
eb:49:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:16 2024 by rpki-client on console-fra.rpki-client.org