Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/X6eTALOaPIDnUvdF-BCeXNzM2tw.roa
File: X6eTALOaPIDnUvdF-BCeXNzM2tw.roa (raw, json)
Hash identifier: +rgaKDeRP6ho4SNzTGcphnoPH1UBFahAtG3Sww8y8h8=
Subject key identifier: 5F:A7:93:00:B3:9A:3C:80:E7:52:F7:45:F8:10:9E:5C:DC:CC:DA:DC
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 01833FF09C57FFEF8623944532FBF0E3546A
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/X6eTALOaPIDnUvdF-BCeXNzM2tw.roa
Signing time: Thu 15 Sep 2022 06:57:56 +0000
ROA not before: Thu 15 Sep 2022 06:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51838
IP address blocks: 91.220.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3f:f0:9c:57:ff:ef:86:23:94:45:32:fb:f0:e3:54:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Sep 15 06:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fa79300b39a3c80e752f745f8109e5cdcccdadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:24:46:91:e9:ab:a5:6f:b9:c9:de:cc:7a:
74:eb:59:77:d5:c0:b0:21:e5:13:31:30:a2:41:01:
80:eb:d6:24:8c:07:7d:0a:5b:61:e1:41:c5:4d:3f:
f4:ab:35:9e:cd:8d:d5:e2:a5:5e:7a:c5:99:db:cc:
98:fc:9a:75:c3:2f:f2:56:d8:e0:42:69:f5:ac:37:
a5:8b:31:47:ce:09:cd:0e:bc:c8:44:9e:38:1c:e3:
07:9f:9e:d6:32:5d:4b:ab:72:00:48:75:ef:61:c7:
cf:51:ec:95:fc:48:87:a5:0f:3f:80:48:d2:26:40:
69:76:4d:20:0d:d9:8e:d2:fe:b2:5e:ef:49:50:51:
f3:ab:91:ae:be:c4:7a:30:91:3b:9f:0a:f6:e3:93:
5a:f5:74:2a:c7:3b:00:15:cc:3f:8f:74:be:26:17:
be:28:81:67:b8:ed:5d:89:cd:f4:8e:7a:0f:0e:e6:
e1:72:e6:ee:22:ed:cb:ea:87:53:74:82:6a:d9:64:
f5:4e:9c:3d:b1:70:ad:12:3d:aa:4a:3d:2b:f4:c5:
49:38:01:3d:3e:fd:f2:58:a0:d5:a1:5d:04:9c:f1:
10:2a:8a:90:e4:4d:a9:2a:b4:d8:97:18:4a:d9:96:
c9:30:08:a7:e3:1a:d4:c4:f2:e3:c6:a6:26:d3:a3:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:93:00:B3:9A:3C:80:E7:52:F7:45:F8:10:9E:5C:DC:CC:DA:DC
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/X6eTALOaPIDnUvdF-BCeXNzM2tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.145.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a6:61:04:0d:51:54:da:14:91:5a:2b:27:2b:54:2b:c8:dc:
59:bb:17:38:3e:54:df:70:20:63:87:4e:af:1b:5e:f6:4d:5c:
7b:b4:0d:4c:a7:75:11:cc:8a:f0:e5:36:f1:b4:77:db:6a:8d:
59:2d:d1:97:d1:73:0f:06:58:53:55:6f:af:03:e2:29:cc:9f:
ad:38:f4:9b:c4:bd:e9:50:af:e0:e2:4d:2c:f2:e1:23:7c:b3:
91:49:22:d2:df:23:2d:e4:37:e5:39:0d:9b:08:91:c0:f9:c2:
12:d1:3a:bf:07:40:dd:a1:57:a4:3a:14:07:2e:af:7e:64:a5:
fe:bd:ff:c9:a6:8a:be:74:b7:b9:e0:5d:bd:fe:8d:1f:f4:4e:
c7:18:02:df:eb:96:77:4e:57:65:50:63:94:31:05:00:f5:f3:
44:65:7e:89:ef:41:9a:3a:78:04:4d:3e:22:49:73:03:35:08:
50:7a:56:de:52:bb:f4:82:49:d0:24:c9:f6:ef:87:65:9a:35:
74:42:ec:01:18:60:57:89:c6:df:fb:a5:93:7f:a5:f3:1d:60:
a5:e2:26:79:a1:87:7d:d8:ce:e8:3d:7d:40:f2:82:d5:2d:3e:
54:02:f2:d3:62:ec:30:3b:0e:7a:00:5f:dd:f4:4d:3a:8c:a0:
6f:61:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:05 2024 by rpki-client on console-fra.rpki-client.org