Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/SKuJZv4rZrLDpZNBi3F90Oy2f3o.roa
File: SKuJZv4rZrLDpZNBi3F90Oy2f3o.roa (raw, json)
Hash identifier: 9pXbuMGq8A54ObuDuqWEK9tb3D0tG0CePOawdC3FfAA=
Subject key identifier: 48:AB:89:66:FE:2B:66:B2:C3:A5:93:41:8B:71:7D:D0:EC:B6:7F:7A
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 03548F9A
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/SKuJZv4rZrLDpZNBi3F90Oy2f3o.roa
Signing time: Sat 01 Jan 2022 07:01:41 +0000
ROA not before: Sat 01 Jan 2022 07:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 91.235.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55873434 (0x3548f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 1 07:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48ab8966fe2b66b2c3a593418b717dd0ecb67f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:25:a5:f2:74:05:fe:98:e3:a9:16:05:2c:
f0:68:36:b9:3d:a2:04:e4:fe:93:7a:ed:47:f8:92:
64:f6:42:4f:7e:d1:a6:1f:6f:ed:90:ab:f3:12:10:
fa:58:d8:61:c3:e1:3b:74:0e:d6:e6:96:20:e5:e4:
e7:35:3b:ee:6e:3c:a4:1e:66:bc:d5:34:de:af:eb:
9c:c2:38:ff:30:a2:c4:e5:7b:3c:94:cb:af:4f:5d:
60:3c:b7:8b:1c:16:98:a7:df:45:89:8c:f4:0c:ba:
f1:f9:83:cf:3a:88:a8:29:5b:6d:09:22:b6:ca:7d:
be:f8:5d:2f:d3:56:67:ce:ce:c6:cb:48:03:20:f5:
7f:8c:34:6a:35:c3:a6:77:e9:bb:b7:0b:8b:ce:61:
87:72:55:b0:15:e1:39:40:cb:f0:ce:f4:bb:8e:61:
1f:a8:01:04:2e:84:8a:a4:45:4e:b3:bb:6f:6f:27:
8b:3e:f8:60:eb:b9:cc:89:b2:d3:f8:4d:d9:9a:c8:
8b:5f:69:a6:38:a8:d6:4f:e0:1c:c2:61:57:2e:12:
18:3c:60:8e:2f:68:3b:e8:51:f3:ae:20:16:4e:8d:
39:59:2b:e9:45:a8:fc:81:c6:d2:19:67:78:45:06:
44:a2:28:49:7d:11:9c:92:82:fb:f6:91:f6:fa:16:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AB:89:66:FE:2B:66:B2:C3:A5:93:41:8B:71:7D:D0:EC:B6:7F:7A
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/SKuJZv4rZrLDpZNBi3F90Oy2f3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c3:84:b9:c2:f0:31:91:f2:d4:37:df:8d:90:48:ff:05:ff:
b8:63:50:8b:ac:aa:de:8d:c2:3b:a6:4a:bd:d6:a7:6f:8b:c0:
9d:02:b1:d5:aa:7f:b3:ef:7a:99:b1:6c:7d:31:4c:0d:a6:86:
7f:f5:81:c6:03:8e:69:e8:2f:58:7a:f6:ac:c5:cd:c4:08:5e:
91:85:79:6b:34:16:0b:0e:7b:cf:e0:da:d2:20:54:0e:b4:f8:
9d:22:44:c9:e6:c6:71:52:6d:b6:8f:9b:8b:bf:c7:61:be:c8:
71:ae:53:5e:75:87:e5:45:76:c2:97:f3:03:fb:29:f8:a1:40:
71:fd:72:c0:33:5b:98:68:89:69:c6:59:37:73:39:b8:b2:f3:
a5:cc:66:ac:3c:95:a6:a7:e6:2c:e3:e4:0c:71:50:d0:96:f1:
db:9f:91:c5:51:b4:19:19:3f:03:63:a9:a3:67:af:8c:fa:57:
8f:d0:2b:2d:7c:55:be:c2:63:e2:00:d5:8d:57:97:2a:23:6c:
dd:b8:d6:64:4e:db:6e:79:e9:9b:3b:36:63:12:d9:13:9b:f7:
54:c7:9e:83:ac:90:8e:6e:ab:ce:8e:bb:34:73:f0:61:66:dd:
1c:fc:c5:ec:2e:74:37:49:d9:f6:7b:8d:e4:ad:70:a0:77:8d:
2b:ef:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org