Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/O15IZqBTBwSAKQdINZUkvi7d2Zo.roa
File: O15IZqBTBwSAKQdINZUkvi7d2Zo.roa (raw, json)
Hash identifier: LBDivWkFGU6B2eP9x71G8cJFZ4aa2sXUVMedTktjors=
Subject key identifier: 3B:5E:48:66:A0:53:07:04:80:29:07:48:35:95:24:BE:2E:DD:D9:9A
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 0C4A5F63
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/O15IZqBTBwSAKQdINZUkvi7d2Zo.roa
Signing time: Sat 01 Jan 2022 13:05:47 +0000
ROA not before: Sat 01 Jan 2022 13:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5464
IP address blocks: 91.237.100.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206200675 (0xc4a5f63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Jan 1 13:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b5e4866a053070480290748359524be2eddd99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:10:74:3c:3a:0e:3d:18:20:b0:33:0e:9c:
3a:7b:96:dc:36:0e:6b:99:b1:6f:d0:92:76:6f:f7:
9b:f4:9b:cb:6c:f9:2e:da:0f:12:27:bd:01:3c:5a:
e4:3c:35:3c:68:6c:f9:6d:4a:66:d9:7a:2f:d8:0f:
e6:b9:0b:10:17:85:c8:48:b4:a9:87:af:12:67:05:
33:2c:89:3a:cd:e5:dd:02:b2:07:39:10:12:31:86:
fd:ac:21:7d:f7:e8:43:63:36:19:d1:6d:d7:d9:39:
f8:1f:95:05:cc:f2:85:a0:4d:38:7a:86:17:71:97:
98:67:67:e1:c8:de:05:ab:d5:d9:5b:07:6a:4a:6b:
56:5d:94:e3:b6:78:84:24:0c:7d:ac:11:c0:6a:31:
a6:59:e3:c9:b9:20:15:29:75:ba:c2:7e:9e:79:ba:
f8:ef:c9:bf:28:70:3d:51:b1:8e:5c:2f:b6:a4:ee:
11:67:92:a3:da:11:b2:6b:03:33:55:f5:e9:a5:1a:
51:2c:67:59:da:d0:bf:29:69:a0:34:9b:ab:bf:53:
c7:4a:34:c9:a6:6d:b7:76:24:d1:b7:38:9f:65:10:
53:8b:a8:d8:cc:f9:40:a3:24:02:c2:70:e1:91:f6:
36:dd:7b:6f:56:3e:d1:50:2f:7a:9a:82:c5:b4:27:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:48:66:A0:53:07:04:80:29:07:48:35:95:24:BE:2E:DD:D9:9A
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/O15IZqBTBwSAKQdINZUkvi7d2Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.100.0/23
Signature Algorithm: sha256WithRSAEncryption
74:df:71:bd:85:ee:2b:f5:56:e4:3c:c6:7b:39:77:02:b0:92:
d7:a7:1b:3a:50:69:50:10:86:ce:74:5d:09:58:24:0c:96:fa:
d0:ce:92:c5:15:22:7e:9f:01:7a:c0:7d:b9:e2:ae:e0:62:9e:
cf:67:68:39:45:3a:6b:2f:47:95:d9:e3:c3:79:10:6b:d6:5d:
b3:8d:67:4d:77:ab:f3:f8:9a:da:47:50:67:03:56:94:6d:65:
65:d2:58:56:4d:16:24:a2:53:ef:4a:2f:de:2a:3d:89:4f:02:
77:fa:ee:b7:59:55:95:8b:e1:74:fd:d1:08:b8:32:62:24:91:
89:73:59:e2:e7:c3:e4:44:68:d9:9b:ad:96:21:0b:60:4b:f9:
28:1c:a4:97:d4:e4:82:cb:ea:27:04:a3:53:b9:6b:e6:4e:ca:
10:57:85:65:09:f5:5e:61:5a:09:87:48:7e:78:8b:73:06:12:
71:31:90:fb:6f:f7:62:b1:11:56:04:d1:99:88:3e:30:8a:39:
5d:70:06:dd:2c:74:0d:9f:e9:87:cf:5b:ff:e2:c4:ce:f1:dd:
61:97:83:ed:4c:1d:70:b3:54:12:c6:de:3e:24:06:23:e6:ba:
3f:f8:80:1a:31:d4:fc:bc:22:c5:16:ca:9f:92:4b:3b:dc:73:
d5:09:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org