Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/a48jCMKKyqI7HC4g__nug3DJPYE.roa
File: a48jCMKKyqI7HC4g__nug3DJPYE.roa (raw, json)
Hash identifier: SfcypQLRGTJFZI8+Yc5WfbzAKvyaHQR6DIZFXdepeH4=
Subject key identifier: 6B:8F:23:08:C2:8A:CA:A2:3B:1C:2E:20:FF:F9:EE:83:70:C9:3D:81
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 03771DCC
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/a48jCMKKyqI7HC4g__nug3DJPYE.roa
Signing time: Thu 27 Jan 2022 13:47:05 +0000
ROA not before: Thu 27 Jan 2022 13:47:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199114
IP address blocks: 91.198.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58138060 (0x3771dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Jan 27 13:47:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b8f2308c28acaa23b1c2e20fff9ee8370c93d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:04:0e:de:e7:a2:31:55:31:0c:4d:43:83:53:
ae:55:f5:fd:be:ae:de:c5:d3:cc:e8:22:1c:0d:61:
f7:2e:cc:9d:2d:ea:8b:e7:9c:9d:61:49:0b:7f:d4:
56:c8:e0:2e:7b:70:8e:80:7a:3b:bd:69:02:d1:90:
8f:be:a9:7a:3d:45:a0:23:da:b8:9b:c7:3e:0a:6b:
53:70:78:b3:cc:5d:d9:ac:bf:16:2a:ec:1c:5d:ac:
86:7a:65:6f:58:ce:22:c6:81:06:db:cf:e1:b9:b3:
b0:8b:e4:6c:27:61:e2:41:10:24:3e:58:47:bb:e5:
2d:78:2c:d2:64:46:17:84:e2:f2:f4:98:cd:41:f2:
8c:1b:f5:81:6f:5a:ac:bc:93:b5:9a:f5:3b:1d:0c:
36:4d:fc:93:33:26:cf:3d:3a:bc:be:51:88:4e:66:
73:69:27:7f:c4:60:b2:ea:87:1f:dd:c9:99:a9:fd:
50:b1:f4:84:51:c1:0c:be:a2:20:9f:2b:fa:fc:5a:
01:4c:f5:b3:33:26:ba:3e:99:d1:2e:70:71:83:24:
1c:f6:bd:27:6c:26:63:ea:69:d8:a1:26:ec:25:27:
8d:71:d0:05:66:63:1a:11:f5:bd:7a:c5:85:cc:2b:
03:a3:ee:4f:10:c1:ef:4b:6f:fc:5e:59:98:eb:b2:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8F:23:08:C2:8A:CA:A2:3B:1C:2E:20:FF:F9:EE:83:70:C9:3D:81
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/a48jCMKKyqI7HC4g__nug3DJPYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.18.0/24
Signature Algorithm: sha256WithRSAEncryption
98:48:63:3c:0b:da:8a:31:75:ad:3f:ad:cb:75:28:fd:2c:80:
f6:1f:d7:bb:aa:68:8c:dc:00:43:00:d3:3d:de:16:db:48:40:
15:09:75:a2:ac:97:4d:95:39:13:ff:8e:5d:5b:c4:cd:e0:35:
61:f7:e2:5b:ed:65:d5:4e:f2:ea:01:70:fd:67:c1:3f:82:7b:
ff:48:3b:50:1e:79:bc:d0:48:45:80:bc:13:80:c1:3e:33:47:
d7:85:c2:bb:e5:11:f3:a1:41:4b:45:bd:bf:2c:bf:ce:ff:e2:
ec:2f:0a:4b:9c:bb:60:7d:5f:92:06:1a:cd:18:ed:39:6a:97:
b5:1d:b4:38:c7:9a:0f:22:bd:c4:ff:6e:7e:c4:02:99:3b:fd:
ba:d3:34:1a:d7:2f:c4:53:ca:5e:f4:ef:eb:5a:06:24:10:68:
39:1b:24:3c:7e:64:9c:ca:89:a2:d1:84:19:97:be:48:32:67:
9c:39:e0:45:fe:59:61:7f:f1:eb:37:c5:54:63:81:91:c0:f5:
8e:35:c9:da:e8:24:9c:e1:49:ba:ab:f0:ed:ea:17:b4:58:b2:
ce:20:01:9b:eb:ca:a1:ea:06:47:47:a7:f5:d8:f7:4e:c0:b4:
54:b8:b9:fe:3b:f4:7c:1e:7d:84:8e:37:4e:77:0c:fa:07:f6:
64:fb:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:59 2024 by rpki-client on console-ams.rpki-client.org