Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/O5BNP4GTZyqG7lntqGBdSbE0S1M.roa
File: O5BNP4GTZyqG7lntqGBdSbE0S1M.roa (raw, json)
Hash identifier: mqi9S1Wjez9Pjbf0MuTJNEPVQ8ykbhhU0gdWhlA2UrI=
Subject key identifier: 3B:90:4D:3F:81:93:67:2A:86:EE:59:ED:A8:60:5D:49:B1:34:4B:53
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 088C7432
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/O5BNP4GTZyqG7lntqGBdSbE0S1M.roa
Signing time: Sat 01 Jan 2022 07:00:44 +0000
ROA not before: Sat 01 Jan 2022 07:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204804
IP address blocks: 91.231.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143422514 (0x88c7432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 1 07:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b904d3f8193672a86ee59eda8605d49b1344b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:96:09:41:dd:9a:9b:2a:6e:6d:f9:55:1d:
c9:32:7d:01:80:73:cd:dd:79:be:af:c6:2f:f4:9c:
44:b5:29:ff:5d:25:3a:75:8d:45:67:51:47:fc:ed:
84:6e:f6:02:e4:d9:60:c5:21:2e:93:09:ae:9e:c7:
c5:70:b4:b4:87:8c:d5:3a:eb:3e:83:83:7b:dc:37:
b8:37:02:47:9c:f3:bd:b9:f3:f0:02:6a:a6:be:44:
c5:5c:08:aa:a1:54:1d:a5:64:08:4c:13:60:18:7b:
27:cc:d4:4d:40:a6:57:1b:02:2f:e8:85:b1:05:fb:
9d:be:5d:49:c7:e5:f9:18:fb:86:de:ce:b8:87:91:
ef:1c:44:ac:8b:9e:da:30:45:28:12:d4:28:24:35:
43:b0:46:b4:ca:7c:62:89:bd:b8:23:1a:d4:7e:8e:
45:b0:3b:e9:08:a4:27:ec:f4:22:87:2e:04:57:ac:
f3:59:5f:63:1b:53:3d:a7:cd:e2:77:93:d3:b4:f0:
37:39:6b:9c:f3:1c:f7:34:f1:f7:5e:cc:fd:6b:96:
4f:09:81:d8:3d:48:dd:7c:de:eb:0d:64:cc:c2:7a:
ae:26:a2:89:08:c4:24:dc:7c:9a:02:01:32:df:21:
87:de:0b:30:1d:1a:32:83:ff:53:a6:b1:b6:5c:64:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:4D:3F:81:93:67:2A:86:EE:59:ED:A8:60:5D:49:B1:34:4B:53
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/O5BNP4GTZyqG7lntqGBdSbE0S1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b1:23:77:ff:51:60:a7:2f:2c:08:99:18:5d:3a:85:56:5c:
22:7b:fb:ec:cd:f3:6b:0a:18:31:d9:f1:90:1c:e0:5a:88:f0:
d5:6a:41:4a:38:c1:5a:8a:1b:42:86:6b:da:a2:d7:c2:72:41:
75:f3:70:c3:3f:d6:30:f4:07:5b:f6:c1:8d:96:b7:77:5b:d2:
67:31:b8:15:ce:8c:21:d9:ad:78:e4:51:3c:39:78:93:34:a5:
fa:01:24:91:31:1e:ff:3b:a8:45:67:69:a3:d9:66:2e:1d:df:
99:bb:39:17:9a:f3:1d:2d:90:29:cb:2a:5a:8a:49:07:39:64:
50:a3:51:17:73:93:77:fc:a4:7a:37:99:79:21:90:e2:1b:d1:
eb:a4:6b:11:ed:6d:fb:08:13:1f:30:f9:bf:3d:6c:07:07:0f:
56:9e:9b:50:e4:3b:19:09:89:bc:72:e7:b3:bd:38:68:0d:3b:
24:13:02:df:7b:93:52:65:56:c8:45:77:de:0c:bf:4e:cb:6f:
56:20:40:ba:9a:64:ec:c5:08:b3:2a:26:f9:3a:d4:be:79:23:
7a:a5:30:e0:c2:08:16:bb:4c:c8:54:95:b8:d4:05:d8:13:1d:
54:17:0e:85:de:b2:0d:35:46:52:4f:63:d5:2f:73:0b:70:e5:
ae:f5:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:06 2024 by rpki-client on console-ams.rpki-client.org