Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/1-t93b7OCeC7iZwW5USBFP08y2qA.roa
File: 1-t93b7OCeC7iZwW5USBFP08y2qA.roa (raw, json)
Hash identifier: p8NNyMvZvdVPBgm7wB2fK63XDRYIvhLAw4/L+oNYPgg=
Subject key identifier: FA:DF:77:6F:B3:82:78:2E:E2:67:05:B9:51:20:45:3F:4F:32:DA:A0
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01836C6393059AE73D51944740E25E03AE7F
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/1-t93b7OCeC7iZwW5USBFP08y2qA.roa
Signing time: Fri 23 Sep 2022 22:06:48 +0000
ROA not before: Fri 23 Sep 2022 22:06:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 91.102.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6c:63:93:05:9a:e7:3d:51:94:47:40:e2:5e:03:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Sep 23 22:06:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fadf776fb382782ee26705b95120453f4f32daa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:cc:fc:96:57:14:c5:96:9a:33:0c:d2:3b:
93:06:51:69:64:bb:87:b1:db:e8:fe:6b:dc:9f:9d:
db:f4:a9:3f:8d:ec:88:db:7d:f1:38:76:76:30:0d:
05:f1:77:5c:a9:66:aa:c0:72:a1:fb:f5:4e:51:75:
ab:a6:b2:32:aa:d9:e8:b7:d3:00:4e:23:4d:2e:a4:
e7:a0:71:95:d5:3d:e2:17:ee:16:df:64:d3:7d:b3:
b7:53:fe:3b:df:fc:13:2d:59:cd:8f:4c:3b:47:f1:
b9:83:bd:8b:46:0f:9b:3a:4f:f4:01:f2:31:b7:9b:
39:57:d3:2a:b6:56:70:0a:31:d6:f1:d8:09:95:6f:
55:31:5b:fc:0d:ea:61:1f:cf:5f:05:ba:6e:39:63:
48:c4:d6:ed:7b:bb:16:f8:4c:98:7e:9e:c6:2d:7b:
86:70:80:6a:17:59:39:42:ac:da:61:a0:34:39:48:
8e:c5:8e:37:c3:f4:1b:a5:17:d3:90:8f:2a:a9:8f:
93:2c:5d:22:be:59:95:ca:bd:be:30:aa:ca:9a:03:
d3:0b:d2:32:a2:41:c8:e6:8c:64:d0:10:6e:61:cc:
4d:d1:87:ed:63:6a:e8:85:7f:58:88:7b:25:b0:8e:
be:28:e0:cf:2b:b7:9f:8b:46:44:00:9f:73:52:78:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DF:77:6F:B3:82:78:2E:E2:67:05:B9:51:20:45:3F:4F:32:DA:A0
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/1-t93b7OCeC7iZwW5USBFP08y2qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/21
Signature Algorithm: sha256WithRSAEncryption
19:f8:63:8b:f4:39:c6:c9:c1:d7:0c:7f:14:3f:cc:3e:c2:32:
13:5a:b3:eb:af:27:da:75:31:0b:4b:d0:f9:da:14:6a:8d:a2:
58:36:d0:8e:cb:ec:af:2d:23:29:f0:c3:8d:56:a9:9d:ed:c3:
d4:0a:5d:f7:8f:90:42:4c:2b:f0:3c:54:c6:f5:04:e6:b3:4b:
21:f9:36:07:62:b1:c8:f3:74:f4:e8:9d:e0:1e:dd:c2:2c:66:
49:1b:fe:db:ae:2f:0f:2f:dc:67:83:fa:b5:a3:cd:88:46:c6:
b1:e1:ed:bd:9c:49:c7:df:12:11:8c:5f:9d:04:19:e1:92:71:
56:86:d9:3b:f0:a6:e9:28:f4:66:13:62:85:09:43:85:fe:58:
b5:06:f3:af:81:a5:ca:ad:d6:c3:34:05:ea:2c:34:1e:c5:d1:
1a:a4:20:8a:81:d5:50:57:ff:40:ff:b8:03:eb:31:38:8d:92:
e7:19:e9:39:f1:a9:e9:a6:5b:1c:d0:56:c0:f0:90:56:a4:01:
6b:89:35:4d:6e:e1:9c:2a:cc:e0:36:1d:10:f9:72:74:ff:10:
05:db:7a:6a:ef:83:8f:82:ce:5f:04:99:00:8b:8c:5d:f3:95:
a4:dd:37:6b:5f:30:a7:73:48:df:c6:5c:6b:67:a1:b8:2d:55:
e9:47:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org