Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/iVqRHRY7Z-Buw8Xq-kcspriX7G8.roa
File: iVqRHRY7Z-Buw8Xq-kcspriX7G8.roa (raw, json)
Hash identifier: hTzYmbpu7TJ7P0S2ABOeEcCDUx6BD52Mij0qZNISzSI=
Subject key identifier: 89:5A:91:1D:16:3B:67:E0:6E:C3:C5:EA:FA:47:2C:A6:B8:97:EC:6F
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 8CCF
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/iVqRHRY7Z-Buw8Xq-kcspriX7G8.roa
Signing time: Mon 06 Jun 2022 22:12:20 +0000
ROA not before: Mon 06 Jun 2022 22:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57063
IP address blocks: 91.236.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36047 (0x8ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Jun 6 22:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=895a911d163b67e06ec3c5eafa472ca6b897ec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:80:ca:05:d1:40:0a:83:12:b2:91:36:d5:
17:d5:4a:f3:f6:13:af:34:e0:95:44:50:40:0e:c0:
1c:e6:c6:88:80:d8:53:a6:4b:7f:dc:2f:d1:09:ff:
a8:db:4f:79:44:77:df:09:57:ea:52:94:e7:93:b3:
e5:d4:40:02:53:ec:96:50:1b:ce:74:29:a0:8c:a1:
36:8b:2c:07:4e:22:df:b0:08:27:d1:bd:d8:ed:3c:
d7:5d:97:01:5f:3b:dc:16:72:36:e4:6b:fd:0f:98:
c8:c9:9c:76:f1:2e:76:eb:31:9d:a7:58:4f:48:b6:
27:21:23:99:1a:ce:58:a5:79:f8:57:2a:d1:5a:2a:
3c:63:12:5c:2d:e5:4b:d8:c0:8d:55:f6:1d:dc:89:
18:bc:d9:f2:c7:ef:df:91:29:5b:aa:a7:a3:8c:6c:
49:b3:f0:ce:b3:e7:f1:52:2e:39:b0:e2:05:7c:7d:
8c:ce:b2:ac:22:13:f6:2d:63:2f:cb:69:03:18:26:
e7:e1:45:73:73:38:0e:3d:71:85:22:1d:0f:2c:5d:
31:d8:cc:0b:8e:ce:b6:7b:1b:4c:de:27:9b:e0:7c:
ad:82:8a:d9:7b:78:c3:ba:40:65:1c:61:68:38:d5:
d8:66:27:13:4d:9b:4f:77:22:bc:e7:3b:5c:e1:46:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:91:1D:16:3B:67:E0:6E:C3:C5:EA:FA:47:2C:A6:B8:97:EC:6F
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/iVqRHRY7Z-Buw8Xq-kcspriX7G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.201.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d6:36:65:93:f9:f1:6c:6a:f7:b5:5a:80:de:9d:ca:05:ea:
02:7c:e5:73:59:e1:f5:6f:3d:ef:29:89:92:75:d2:47:ea:1c:
4d:8a:64:0b:8c:27:d2:ce:04:80:d9:cb:fb:be:dc:b6:d9:d3:
5c:f3:5c:8f:72:2c:e6:67:24:5c:f5:46:e1:e8:1a:e0:90:a5:
86:15:c6:c3:10:88:1d:6f:33:0e:a7:a1:dd:10:89:f3:8f:e9:
91:f9:b1:2e:a5:2f:ae:7b:78:58:34:1f:ae:84:93:ed:56:ff:
c6:54:04:03:52:e5:61:5c:b7:e5:e2:bb:5f:0b:e8:b3:55:b1:
52:0b:c4:0e:17:c7:2a:b4:1b:e6:87:31:b4:ae:b5:b8:67:06:
1b:4c:f3:9b:a4:93:75:df:ff:a5:eb:47:fe:05:56:f5:32:1d:
d6:3d:c2:fc:79:89:f7:1f:44:ec:a8:62:12:99:10:52:fe:07:
62:f6:4f:b1:7f:d0:f1:0c:22:48:7e:fb:74:0c:6c:3a:d5:9e:
6e:32:ac:cb:34:c0:d3:fc:af:1c:51:b8:2d:ec:6e:ad:b9:31:
9d:d6:eb:9d:b0:d5:63:6c:07:de:c6:cc:53:da:85:b7:9d:0e:
e1:e6:cc:70:da:46:cf:49:dd:bf:8f:c5:e8:fb:c1:09:e4:52:
d2:91:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:35 2024 by rpki-client on console-fra.rpki-client.org