Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/bbYg98mWmqg6kUko23bKuW9gqTY.roa
File: bbYg98mWmqg6kUko23bKuW9gqTY.roa (raw, json)
Hash identifier: rZgUENEJs+X+lZbVowntquy+gekWz8u+eSkZ1TXI8PY=
Subject key identifier: 6D:B6:20:F7:C9:96:9A:A8:3A:91:49:28:DB:76:CA:B9:6F:60:A9:36
Certificate issuer: /CN=c3ae20b4a389e854d26a65aab9b0d01997f0ac22
Certificate serial: 0A218AF7
Authority key identifier: C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/bbYg98mWmqg6kUko23bKuW9gqTY.roa
Signing time: Sat 01 Jan 2022 08:04:45 +0000
ROA not before: Sat 01 Jan 2022 08:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27970
IP address blocks: 91.221.208.0/24 maxlen: 24
91.221.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169970423 (0xa218af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ae20b4a389e854d26a65aab9b0d01997f0ac22
Validity
Not Before: Jan 1 08:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6db620f7c9969aa83a914928db76cab96f60a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:b9:e2:94:4c:67:e6:67:a8:aa:a3:f5:be:
8c:49:fa:3d:b6:67:26:8d:40:ca:8f:52:62:04:9d:
49:f3:05:1b:1b:69:ce:86:04:5c:5f:48:a5:1a:03:
f5:40:48:aa:f4:2f:6d:99:ff:4b:a3:9d:fc:0e:9d:
d2:28:d6:69:48:44:26:e3:ff:ee:02:f8:07:89:67:
13:59:8e:b7:b1:2d:76:01:12:4d:2a:b7:b6:3a:23:
9d:bb:46:45:ff:0d:1a:8e:8d:7b:ae:96:41:ab:da:
ae:fb:04:2a:44:d7:ed:ab:82:0f:a1:57:91:fa:a4:
44:68:e5:c5:87:8d:6a:23:90:b6:31:22:a7:97:9c:
9b:91:07:2d:98:36:dc:1f:2a:2f:bc:b2:f7:b2:90:
67:aa:35:a9:9b:ae:49:e2:23:f4:ba:b5:77:3c:fc:
f2:e9:ba:4c:fb:96:93:51:fb:ba:4c:74:8b:d4:fd:
fb:c6:86:60:a4:93:a8:f3:d4:05:2d:4f:8f:cc:f5:
5c:a9:9a:be:80:d3:91:fd:54:5f:ed:6e:5d:a5:b3:
70:03:91:38:5c:c0:89:44:88:de:27:f3:93:d1:a9:
af:61:0b:b5:90:15:72:8c:80:5d:fb:5e:97:40:45:
3d:72:c6:ac:76:45:5b:6f:a5:23:96:35:5e:60:8d:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:20:F7:C9:96:9A:A8:3A:91:49:28:DB:76:CA:B9:6F:60:A9:36
X509v3 Authority Key Identifier:
keyid:C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/bbYg98mWmqg6kUko23bKuW9gqTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.208.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:5a:34:21:60:77:b6:a2:c2:93:b0:b3:46:1d:5a:d9:a8:7e:
2f:cd:a1:1c:3d:9c:e9:c1:3d:6f:b7:7d:04:23:9b:48:ba:d3:
a8:ac:83:5d:25:73:fb:78:e6:e0:cb:76:8a:67:1a:b7:a4:e7:
fb:b6:fb:63:49:31:d4:c4:77:59:b4:61:45:55:31:68:f5:8c:
b2:ff:49:78:02:ea:db:3a:30:b0:d9:1a:74:74:b5:98:e2:0e:
8b:67:26:14:04:c0:af:90:84:26:aa:5c:9e:58:24:3a:98:53:
c7:39:8c:06:03:27:4c:b7:c6:d6:b1:ec:85:6d:da:7f:c1:6b:
d6:9f:ec:82:85:a0:a1:24:d1:02:61:3c:1b:4d:38:7f:5c:39:
17:72:08:31:d2:9c:70:ea:9e:05:e5:27:c0:5f:e4:b7:64:8e:
d2:38:40:8c:8e:14:bd:18:0a:fb:9d:dd:c4:be:03:c9:c4:b1:
6a:8a:21:1a:80:8a:e6:4b:c8:4c:cd:8d:68:7d:4c:39:92:d8:
22:e4:cb:7d:e9:1f:3f:91:b5:35:a4:cd:7b:69:5a:e7:26:28:
75:5a:dd:43:48:3f:ea:08:03:95:1f:20:4e:41:aa:22:80:4b:
39:0b:b4:57:5f:4e:6b:06:e3:44:1b:a0:10:30:ae:e8:89:78:
61:93:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:15 2024 by rpki-client on console-fra.rpki-client.org