Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/_2gOQCDvOsx6oBe9dDKz_Btq_QU.roa
File: _2gOQCDvOsx6oBe9dDKz_Btq_QU.roa (raw, json)
Hash identifier: Fu2P6VTA0X18cRHmX1+z9KdafYgqy6NlmMCwrlUVwyM=
Subject key identifier: FF:68:0E:40:20:EF:3A:CC:7A:A0:17:BD:74:32:B3:FC:1B:6A:FD:05
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 0D27180A
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/_2gOQCDvOsx6oBe9dDKz_Btq_QU.roa
Signing time: Sat 01 Jan 2022 06:56:39 +0000
ROA not before: Sat 01 Jan 2022 06:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30839
IP address blocks: 91.213.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220665866 (0xd27180a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Jan 1 06:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff680e4020ef3acc7aa017bd7432b3fc1b6afd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:7a:f6:62:b8:30:06:ae:11:2c:72:fe:7f:
d7:1f:5a:e9:23:76:2a:4c:38:a9:45:1d:d7:3a:ae:
d9:da:e8:9b:4f:26:c6:84:64:cb:96:79:e0:dc:b2:
19:d4:02:70:e2:89:d7:51:26:26:73:f7:21:3d:29:
83:70:49:a2:ed:5c:73:11:c1:6b:61:cf:bb:63:1b:
9c:88:3b:52:0b:87:88:e3:57:e7:fe:bb:81:60:80:
05:50:6b:e8:1e:b0:e9:a6:a1:ed:14:a7:b0:03:6e:
b4:e0:23:e7:ac:cc:76:07:4e:b5:42:d2:08:bd:a5:
dd:20:0f:2f:bf:30:58:d6:c0:96:a1:b6:87:ef:bf:
83:cb:c9:2f:07:06:b0:8a:be:b9:d3:69:ed:e3:89:
86:e4:d4:bf:54:d4:1a:0b:25:cf:ae:07:32:08:7d:
69:71:07:12:30:f1:17:20:3e:37:5c:03:f4:9b:0f:
37:5b:9b:88:54:1e:7a:a2:18:29:56:0a:e8:8b:35:
17:fe:cb:32:16:28:1e:7c:4e:86:31:5c:74:63:34:
9c:a0:3a:b0:2e:07:6c:6b:fb:89:20:5d:e2:9d:ea:
d3:9a:a4:35:4b:83:55:ef:cb:da:a8:cb:99:84:af:
64:bd:2a:e2:37:c5:55:01:90:1e:60:ff:4a:60:17:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:0E:40:20:EF:3A:CC:7A:A0:17:BD:74:32:B3:FC:1B:6A:FD:05
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/_2gOQCDvOsx6oBe9dDKz_Btq_QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.90.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9f:7b:df:f0:e1:86:b3:d7:0c:83:45:92:14:9f:89:e7:c8:
2e:d5:1d:7a:6a:5c:27:b6:8a:7a:fe:52:25:38:82:1b:5c:3c:
56:0b:91:a7:32:85:69:46:76:e8:9d:b1:cc:0e:cd:4f:26:6f:
9d:2d:06:c5:f3:e9:dc:6e:82:a1:a3:67:e6:58:0c:32:4e:56:
bc:ae:fe:e2:78:f8:d8:05:a2:38:8c:34:42:a1:2b:b0:e6:b8:
a5:3e:39:f3:45:b8:69:1e:e5:60:8c:6e:3f:92:3c:9b:3e:ff:
1e:bc:91:6a:3d:da:13:12:0b:7b:6c:67:50:89:87:4e:fa:12:
ed:a4:b4:16:32:7a:43:d3:ac:cb:2e:61:c8:a7:24:f8:97:e1:
51:8c:45:23:84:4b:bb:b3:fe:ed:4c:28:10:79:20:d6:d5:f4:
9a:88:e3:83:2d:aa:1a:1c:6c:02:b1:73:1f:ef:10:01:d4:8f:
b6:a5:c4:86:3d:4f:f6:67:91:1e:ef:60:a9:9d:5c:c8:d9:d7:
89:44:9c:9a:96:b0:7c:d6:56:3d:70:db:01:6f:2f:21:cb:24:
36:88:1e:b0:e6:02:df:74:bc:51:62:f5:06:79:e0:d3:7e:d6:
bf:9e:82:1d:16:5e:f9:b4:51:76:8a:31:a2:a8:d2:86:56:dd:
c7:0c:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-fra.rpki-client.org