Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/k_9X-8H73hogfIe4Bgk2NHLAmS4.roa
File: k_9X-8H73hogfIe4Bgk2NHLAmS4.roa (raw, json)
Hash identifier: 8MIM5lKmbNhmD+UOgRXvCaUIigWEWkxDMsPrUmwE1Zs=
Subject key identifier: 93:FF:57:FB:C1:FB:DE:1A:20:7C:87:B8:06:09:36:34:72:C0:99:2E
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 17BB8306
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/k_9X-8H73hogfIe4Bgk2NHLAmS4.roa
Signing time: Sat 01 Jan 2022 04:01:55 +0000
ROA not before: Sat 01 Jan 2022 04:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5413
IP address blocks: 91.227.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398164742 (0x17bb8306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Jan 1 04:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93ff57fbc1fbde1a207c87b80609363472c0992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:1c:e9:07:8a:ac:05:22:e7:ef:57:84:2c:
0b:79:56:86:b0:63:84:49:1d:89:2d:07:f5:9d:e0:
10:b1:0c:01:5e:8d:48:b6:08:5e:63:e8:60:3e:6f:
24:2e:00:ee:c7:3f:b1:44:dd:75:6e:87:f1:94:69:
da:04:51:4a:9e:6f:94:ec:c6:a8:a1:03:42:00:d8:
c5:37:fe:ab:35:d7:f5:67:4d:2e:6d:5a:3f:6b:e7:
6d:7e:65:37:d1:15:9e:f9:0b:83:a6:85:7c:e2:ce:
6b:cf:5d:90:38:34:2f:18:3c:f9:c7:f8:63:07:63:
a3:f2:83:ce:1b:93:50:47:3d:e2:3a:83:aa:81:35:
11:ef:7a:31:60:a7:0a:ac:9d:b5:ee:a2:b6:9c:f2:
f8:db:c9:53:25:2f:88:a5:a6:a4:f5:5a:9c:4a:ba:
8b:5b:d1:6c:fc:57:ff:e1:66:37:54:e3:a5:e0:49:
78:b6:e8:c4:44:b3:8f:d0:4b:04:c0:cf:fd:aa:0f:
ff:70:6a:7b:53:82:43:0b:aa:1a:fe:93:38:0e:b1:
fe:51:4d:43:65:14:60:76:12:6e:60:03:a6:e5:b3:
68:6f:d1:b6:ee:56:da:25:ee:4e:27:1c:f1:86:e4:
60:53:72:70:64:ea:24:b1:20:76:2e:eb:85:89:63:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FF:57:FB:C1:FB:DE:1A:20:7C:87:B8:06:09:36:34:72:C0:99:2E
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/k_9X-8H73hogfIe4Bgk2NHLAmS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.245.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f1:c8:c6:ae:2e:52:29:13:19:0d:a9:58:46:e8:af:4f:e1:
f7:4e:e0:fa:c7:3a:93:4a:71:73:b3:cf:27:4a:e6:8f:c7:49:
5a:6e:3f:f4:eb:22:08:97:c4:70:96:37:c1:5c:d3:9e:c2:69:
c4:ed:e7:0b:da:c5:9d:1d:23:04:bf:58:4c:d1:5a:16:a4:cf:
37:59:e7:e0:7f:c3:59:c0:69:85:f0:e1:1a:85:47:5c:0d:b4:
b7:ce:13:0f:db:54:2d:5d:92:c7:47:a4:21:66:fd:73:20:d4:
ba:07:bf:e9:0e:67:55:33:54:85:71:96:e5:c5:98:7a:45:2c:
34:ae:70:b2:f1:f4:ba:eb:58:92:8d:3d:12:fc:6a:81:ec:2c:
3e:95:dd:68:65:da:03:c6:4d:d0:e1:8b:5a:63:c7:19:55:60:
2c:c1:5c:4d:63:b0:03:85:5c:6b:93:74:e0:ad:04:6c:af:0f:
78:58:bb:70:e1:16:01:58:36:73:d9:58:a0:43:9f:d9:1f:6b:
26:8a:5c:4b:e4:7f:35:20:50:46:5e:24:83:55:fb:ac:32:fb:
8c:4c:39:7e:bc:cf:72:75:24:90:fc:6f:c6:3c:bf:30:f6:94:
32:99:66:c3:1c:d2:5d:8f:ef:0f:f2:b5:64:d9:22:84:9c:a8:
7f:fb:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:36 2024 by rpki-client on console-ams.rpki-client.org