Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/dEbBBEhMCXEPxkPZLDX_naXlSho.roa
File: dEbBBEhMCXEPxkPZLDX_naXlSho.roa (raw, json)
Hash identifier: 5cu24LpXsr5/0lSJ+CSdG6RpCLpA8hA1xNi5d2HGBA0=
Subject key identifier: 74:46:C1:04:48:4C:09:71:0F:C6:43:D9:2C:35:FF:9D:A5:E5:4A:1A
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 035B1BD1
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/dEbBBEhMCXEPxkPZLDX_naXlSho.roa
Signing time: Sat 01 Jan 2022 07:01:44 +0000
ROA not before: Sat 01 Jan 2022 07:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212298
IP address blocks: 91.235.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56302545 (0x35b1bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 1 07:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7446c104484c09710fc643d92c35ff9da5e54a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:5f:61:6a:aa:89:38:5f:ff:a4:92:26:18:
e4:e4:af:61:30:66:c0:1e:76:73:2e:1a:ef:10:4e:
7f:e6:ce:60:af:ed:98:75:17:7c:00:01:73:06:47:
96:7c:10:79:36:8a:17:c7:d3:db:3f:b1:09:38:e1:
59:82:e3:1a:9c:02:a3:7e:db:4d:58:0f:87:0e:ab:
81:9a:23:12:c6:7b:54:cf:89:87:80:27:a4:61:c5:
cf:3a:c1:98:9b:99:45:33:65:c2:17:3c:1f:c7:af:
01:a6:16:8a:a8:7e:44:c0:04:15:19:64:67:05:c2:
82:5d:58:5f:50:1e:89:36:9d:dc:e6:10:18:6e:8d:
d1:11:71:f2:a2:5a:e0:88:ea:1a:fd:5d:97:4f:23:
14:16:c1:51:77:4f:6e:f2:d8:83:f0:f9:89:d0:2d:
d5:58:c8:ae:58:aa:38:0d:37:b8:70:49:ae:7b:c9:
42:2a:36:36:0d:50:30:34:fa:7e:0f:f7:52:f7:d6:
93:4c:44:93:7d:ae:48:aa:6f:9e:67:8c:e9:25:71:
3a:aa:1e:96:27:7a:cf:31:8d:f8:e6:98:fb:dd:cc:
a7:bc:56:62:81:5f:1b:52:0c:a8:81:71:4f:d0:26:
fa:ef:a4:52:2f:3b:8a:f1:70:f6:8f:8e:68:f7:36:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:46:C1:04:48:4C:09:71:0F:C6:43:D9:2C:35:FF:9D:A5:E5:4A:1A
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/dEbBBEhMCXEPxkPZLDX_naXlSho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a3:11:ce:41:92:1d:ad:fd:9c:8b:03:7a:0f:06:97:95:2c:
f2:48:47:b6:1d:6e:c6:77:16:4d:6a:6d:ee:c2:36:e5:3e:e1:
7c:2d:7e:90:ab:74:15:71:05:a3:7d:10:af:b0:b4:65:49:d8:
16:f8:3d:69:ff:00:0e:29:7a:2f:70:38:e5:62:2f:16:64:e2:
22:ef:b3:8d:b7:97:39:01:5f:24:02:3c:fa:b5:12:3d:c7:42:
81:5c:78:c3:ed:d8:87:b6:6b:cf:58:9a:e5:c2:37:aa:cb:21:
cb:e9:80:cc:b9:96:7d:40:59:59:6b:f5:b4:8a:1a:e3:db:a8:
57:96:49:cb:a2:7d:6d:0f:9c:b0:3b:39:be:55:8b:4f:28:6a:
eb:bd:50:95:a9:49:f7:6e:b2:13:16:e4:32:1c:e7:63:29:64:
18:0d:4b:6b:a8:98:5a:d7:0c:01:da:f0:6f:16:bc:6a:d8:26:
e3:94:10:42:f2:bf:74:fe:a8:e3:7d:97:6e:14:b5:d3:b3:99:
1d:e1:99:62:18:6d:fd:0a:66:d3:e5:ba:44:07:79:51:7f:ee:
6b:26:c6:9c:80:95:25:af:fb:d9:54:62:92:4d:a3:4c:27:32:
b2:6d:c3:54:7e:b2:93:5d:8c:55:97:27:17:49:16:21:4b:e7:
a3:99:08:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org