Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa
File: 0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa (raw, json)
Hash identifier: c4+II2qGOVeHHLi3PR3/ei7G5j1Te6NPhTJUjHojLGo=
Subject key identifier: D0:B9:3A:8F:68:4E:69:6D:F5:E5:92:CE:9F:02:83:B4:E5:F6:3F:C3
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 03B4152A
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa
Signing time: Tue 08 Feb 2022 13:45:21 +0000
ROA not before: Tue 08 Feb 2022 13:45:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 91.235.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62133546 (0x3b4152a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Feb 8 13:45:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0b93a8f684e696df5e592ce9f0283b4e5f63fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:f9:08:7c:d8:40:a9:d7:c4:31:a7:69:72:
13:2f:e5:fe:75:b3:a1:8b:c1:91:eb:d2:4c:8c:5e:
2b:f5:27:09:07:1c:85:70:e3:5f:13:27:9a:6b:3d:
72:fb:1f:66:3e:62:0e:8b:e4:36:35:0b:d7:75:61:
83:1c:fb:e4:24:a1:5d:4a:fa:40:41:d3:5d:7c:4d:
bb:28:a8:f9:98:ca:66:a6:0e:97:95:86:ad:24:7b:
53:b6:41:fc:9c:f6:be:cb:19:73:8d:db:ff:42:db:
2f:ce:74:db:e2:6a:7f:5e:6b:9d:b3:c6:49:af:33:
31:af:e9:65:db:95:0b:63:89:4c:9f:30:2b:45:f5:
d1:59:ac:6c:e3:9d:a9:94:3f:de:49:c0:46:35:b2:
3c:c7:3c:6c:7a:e6:30:d3:6c:8f:e3:6d:f6:fb:c3:
ed:89:88:4b:6b:d7:31:c8:bf:01:f8:ff:aa:ce:8e:
ea:5c:e4:8b:2f:b2:94:61:d1:95:49:48:5b:00:00:
7b:f7:d0:90:3f:1c:30:29:7d:a3:0e:5a:59:4d:e5:
5b:b0:bf:03:ca:9f:78:7f:87:37:fa:a6:3f:3b:cf:
47:4a:e6:ca:77:7a:d3:b1:f3:b2:f2:96:98:73:9e:
1a:34:f3:01:0e:19:d2:0e:12:b3:a7:a2:e0:71:82:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:3A:8F:68:4E:69:6D:F5:E5:92:CE:9F:02:83:B4:E5:F6:3F:C3
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bc:8f:53:e5:20:f9:36:ca:bf:39:7e:fe:88:76:94:a2:cc:
a9:ca:ea:41:47:5a:a5:6f:8a:e8:06:da:43:dc:37:1b:77:22:
cc:81:82:fe:15:f7:73:b3:07:fe:b4:5e:62:e7:a7:83:4e:07:
71:c8:5e:54:7d:0c:91:00:59:99:dc:44:3b:fe:73:3b:ad:25:
3d:c6:42:2a:64:cd:74:05:c8:17:c7:f9:e2:66:30:c6:df:d4:
44:b9:ce:91:79:ab:bf:2a:0e:6b:31:d8:9e:82:57:fe:9c:fa:
71:b9:6c:7a:8e:2a:2f:99:00:53:63:47:b7:8d:f0:c7:e1:ef:
80:cb:1d:6b:2a:1f:bc:a7:8a:cf:42:89:bd:ad:c1:c6:a8:51:
3d:28:7b:93:b4:12:3a:13:d5:26:b6:cf:21:32:d6:9e:ba:09:
0f:ae:35:7c:57:46:68:64:22:48:fc:47:eb:18:ac:81:9e:61:
2f:57:77:cd:fb:f4:71:c0:65:70:1a:d9:87:a8:18:e0:36:2c:
98:13:ee:4e:1a:8d:0b:21:d4:96:c2:80:19:d6:0a:20:ce:c4:
f3:34:09:f5:72:cf:64:33:d3:d3:e2:c6:d9:79:3f:58:ee:0e:
41:4f:ed:72:39:03:e9:d7:c8:17:32:e9:45:82:3d:fc:df:ff:
a8:7b:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org