Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/AGCFR9tfNnQjMPxLv6IjKtlL54M.roa
File: AGCFR9tfNnQjMPxLv6IjKtlL54M.roa (raw, json)
Hash identifier: o+5xqOQ8vrk/xhhLG3x1SCvcERu93wCuDiL3WctbLMQ=
Subject key identifier: 00:60:85:47:DB:5F:36:74:23:30:FC:4B:BF:A2:23:2A:D9:4B:E7:83
Certificate issuer: /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Certificate serial: 018479E24A0725358DBDC3436E8899748DAE
Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/AGCFR9tfNnQjMPxLv6IjKtlL54M.roa
Signing time: Tue 15 Nov 2022 06:03:03 +0000
ROA not before: Tue 15 Nov 2022 06:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50811
IP address blocks: 91.230.41.0/24 maxlen: 24
46.18.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:79:e2:4a:07:25:35:8d:bd:c3:43:6e:88:99:74:8d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Validity
Not Before: Nov 15 06:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00608547db5f36742330fc4bbfa2232ad94be783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:4c:db:56:77:a9:48:02:d0:08:fa:7d:5a:
4c:b3:dd:e1:c9:a3:9a:da:cf:78:6e:49:6c:aa:a8:
d8:6c:97:5a:5b:1f:82:ae:1e:21:cf:57:76:7b:bd:
09:9f:b1:21:84:0a:96:e3:ab:db:da:d7:4c:ed:53:
89:8c:69:97:d8:59:30:74:b5:f2:ca:d2:c2:6b:e3:
4b:f5:b5:9e:e9:68:e6:b4:30:db:26:0b:47:b9:88:
61:ad:f2:9e:f0:34:12:a9:0a:bf:fc:12:f8:91:b4:
75:d0:cb:3c:e7:bc:bf:21:f3:15:1d:e5:ad:ec:f2:
9e:2c:ec:fa:b4:90:5e:4f:5f:8f:71:45:3b:e5:a4:
38:73:14:61:ea:ff:2b:6b:48:87:85:69:5e:aa:3d:
b2:62:5c:c3:28:74:ce:39:96:81:13:6f:98:b9:a3:
36:38:98:25:39:eb:36:61:9a:21:1f:f0:e8:06:b7:
09:de:8d:1d:b2:d4:c3:79:9b:ab:02:49:4c:3b:d0:
2e:41:51:82:02:8c:26:b9:1e:8a:51:61:94:ba:c9:
99:6f:aa:5d:dc:c9:9b:45:83:3e:e4:66:59:fd:46:
5a:25:1c:0f:a6:25:27:59:12:5a:00:d2:e3:79:a5:
77:2d:e2:75:8e:be:a4:94:fa:ff:bb:7b:df:3d:88:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:85:47:DB:5F:36:74:23:30:FC:4B:BF:A2:23:2A:D9:4B:E7:83
X509v3 Authority Key Identifier:
keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/AGCFR9tfNnQjMPxLv6IjKtlL54M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.104.0/24
91.230.41.0/24
Signature Algorithm: sha256WithRSAEncryption
60:11:43:34:05:56:35:47:f1:63:f7:97:a1:df:3c:fe:aa:a2:
2f:21:d5:66:ba:6f:9c:12:15:63:aa:28:bf:9c:21:aa:a9:96:
60:b3:e1:2f:19:fc:d4:bb:c7:d1:ac:ca:f7:d1:48:90:3a:17:
d8:c8:bc:73:4f:e0:74:46:ba:0a:b8:88:3a:4e:63:08:33:a7:
12:2c:aa:0a:76:8e:1b:85:7c:a4:6e:58:c8:24:84:6e:d7:c5:
88:54:ae:cb:1d:78:aa:5a:9e:8a:7b:bd:eb:79:f0:58:d5:03:
b2:5c:9f:d2:12:d3:4c:be:5f:22:b2:63:f2:c6:e4:2d:65:74:
c2:fe:23:5b:a9:c4:3c:77:f0:6f:af:00:86:1c:09:1c:fa:86:
6c:30:f9:4e:93:c1:33:a9:e0:93:4d:c7:33:ce:98:60:19:2d:
47:f8:db:c7:f8:5f:ad:89:00:e1:86:dc:eb:4c:49:fb:f3:26:
5a:b6:0b:a0:17:9f:56:74:79:5b:42:f2:d8:02:b4:84:9c:ae:
98:e7:a5:c5:97:df:ed:7e:9c:4b:05:7d:be:8e:fb:55:18:21:
40:29:4c:cb:0b:1a:d3:f9:7f:43:5b:b6:74:b0:7b:32:de:12:
e9:ec:9e:dd:1a:7d:98:36:28:e7:40:72:47:9c:50:64:4a:0c:
7a:a3:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:28 2024 by rpki-client on console-fra.rpki-client.org