Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/91NVwLZPVB3Pf6CSjeFbRORL-ec.roa
File: 91NVwLZPVB3Pf6CSjeFbRORL-ec.roa (raw, json)
Hash identifier: mJ5iLb45VyHCLCwA9Hwtv4ahQlVuuhgzwyAcAuvK3dI=
Subject key identifier: F7:53:55:C0:B6:4F:54:1D:CF:7F:A0:92:8D:E1:5B:44:E4:4B:F9:E7
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: F88DF9
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/91NVwLZPVB3Pf6CSjeFbRORL-ec.roa
Signing time: Sat 01 Jan 2022 02:51:45 +0000
ROA not before: Sat 01 Jan 2022 02:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5518
IP address blocks: 193.41.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16289273 (0xf88df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jan 1 02:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f75355c0b64f541dcf7fa0928de15b44e44bf9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:c0:f3:67:14:23:25:72:3e:1d:a0:51:63:
c6:3d:89:7c:14:c9:aa:00:8c:6f:3f:41:8e:c6:89:
a3:c0:82:19:a3:32:f5:a6:2a:86:80:0f:6b:ab:bf:
5d:1b:08:bb:19:27:5e:85:a9:22:78:94:db:7d:74:
2b:27:27:ca:8b:d6:e8:b8:46:f4:ed:75:7f:c4:c4:
96:ce:71:68:d1:c6:52:81:65:81:b0:c5:1d:4c:f8:
90:83:72:88:c9:ba:e0:81:14:fa:14:fe:fd:46:e2:
c1:48:4f:29:2d:e1:b6:e2:88:f2:a0:e9:98:3a:78:
66:4d:a6:0b:c5:fb:68:db:bc:49:52:e3:bd:88:42:
60:1b:d5:c0:1c:30:83:5e:04:e1:d3:f4:42:05:d6:
ff:0b:00:46:89:92:09:82:bc:e2:a1:a6:ce:17:91:
c8:00:09:f6:d4:e0:97:b3:78:c8:8e:95:54:a0:c1:
37:94:56:20:a8:ed:df:59:34:93:c1:e1:01:d9:b9:
bd:9e:6b:79:7f:27:9c:b3:f5:29:da:32:82:b1:09:
63:0c:cd:0b:f4:bd:2f:d6:5b:b4:2a:34:f8:8c:50:
b2:8a:c0:4a:57:4a:cb:b9:66:77:22:3b:11:ee:ed:
11:b9:f3:31:eb:1f:fb:6a:1e:b0:19:75:c4:9e:fa:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:55:C0:B6:4F:54:1D:CF:7F:A0:92:8D:E1:5B:44:E4:4B:F9:E7
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/91NVwLZPVB3Pf6CSjeFbRORL-ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.45.0/24
Signature Algorithm: sha256WithRSAEncryption
93:64:4c:78:92:70:b6:36:8f:c6:aa:be:93:6f:7a:2d:da:17:
d9:28:ec:d7:64:9d:f6:c7:f8:f9:e9:8a:6d:fc:fd:63:d9:54:
12:c5:9c:24:d8:03:ee:11:55:a8:2f:2d:b9:0f:c7:77:b2:7b:
19:af:7c:69:28:14:ef:97:da:61:e3:da:56:07:51:74:ae:e8:
3a:52:ff:ee:5b:8a:6e:86:92:4c:f8:85:ce:4b:63:e3:04:34:
fa:08:ed:46:05:01:64:06:4e:b7:46:48:4a:59:cf:3f:91:7e:
94:25:01:bc:db:8f:9b:17:28:06:2c:5f:f8:63:03:f6:67:f3:
d8:6a:c5:5e:53:07:30:90:38:ae:1e:be:3e:23:17:4b:72:7f:
2d:97:16:79:fc:68:b4:b4:32:74:8b:4f:57:38:32:c5:90:55:
a8:01:f2:06:af:19:c7:34:8f:43:9d:72:81:ac:e9:78:8c:41:
4c:63:12:f3:09:7a:2a:76:48:2a:bf:e1:58:c8:de:fd:9a:59:
66:00:d6:0b:8a:53:f4:23:e7:02:77:9b:19:a4:0f:d3:0a:51:
f4:c4:0a:82:d7:7b:f7:fd:ff:a1:69:7c:2a:d2:6f:21:0a:11:
64:98:5b:49:73:31:67:ea:5a:21:87:d4:4d:d9:b4:71:57:b5:
9f:92:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:04 2024 by rpki-client on console-ams.rpki-client.org