Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/8koZXjTcJ5MgIqXW1jtEppxaFkY.roa
File: 8koZXjTcJ5MgIqXW1jtEppxaFkY.roa (raw, json)
Hash identifier: +x4yFhoOD01rv9glPmuKPiQ+XFsP96NOEM4uY7v4zLA=
Subject key identifier: F2:4A:19:5E:34:DC:27:93:20:22:A5:D6:D6:3B:44:A6:9C:5A:16:46
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 01E66BE7
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/8koZXjTcJ5MgIqXW1jtEppxaFkY.roa
Signing time: Sat 01 Jan 2022 14:07:31 +0000
ROA not before: Sat 01 Jan 2022 14:07:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64413
IP address blocks: 91.209.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31878119 (0x1e66be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Jan 1 14:07:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f24a195e34dc27932022a5d6d63b44a69c5a1646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:85:fd:67:a6:5d:e2:57:cc:3a:e5:b4:78:
15:82:b7:05:7d:64:a5:8e:5c:da:b8:de:48:d0:89:
a5:e2:65:7a:91:46:96:72:b6:42:ef:0c:6e:71:e5:
90:6b:45:37:3d:33:3b:e0:75:4b:94:62:c3:ef:99:
67:10:24:6a:f0:7c:32:33:0b:b8:86:f4:f8:5f:52:
0c:c4:9b:52:3c:51:0e:75:bd:59:06:ef:f1:77:a1:
56:c3:3c:6d:d6:c3:13:4c:ce:20:f7:2b:ac:97:46:
b7:89:04:a3:9b:55:08:75:3f:a8:d1:3f:d0:d2:ce:
93:9a:6e:df:85:16:62:8a:e2:81:96:0a:bf:fd:ef:
d4:75:82:b4:66:df:9b:9a:9e:97:80:e3:45:1e:51:
7b:52:9d:8e:b9:ba:86:9b:d4:a6:52:e0:e2:4d:50:
e0:94:96:26:10:20:e4:e3:46:16:18:af:9a:26:00:
37:5b:cc:3a:c9:5e:74:1c:85:b3:37:79:b8:60:77:
44:76:5a:94:dc:7a:0d:32:d2:c3:4f:42:10:9b:12:
e4:97:9f:0a:e4:d6:16:d7:8e:76:25:7a:24:e6:f1:
07:65:c7:2c:d6:33:73:76:d8:00:5a:86:70:51:b3:
9d:40:2f:6e:f5:5d:99:a0:7f:38:c4:bb:22:02:20:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4A:19:5E:34:DC:27:93:20:22:A5:D6:D6:3B:44:A6:9C:5A:16:46
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/8koZXjTcJ5MgIqXW1jtEppxaFkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.96.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2b:9e:3b:0c:60:01:33:50:22:ce:42:22:cf:f3:88:6c:67:
97:1e:be:48:f3:db:da:90:cc:01:1f:4a:59:e4:d0:9b:1f:53:
0f:d5:f3:72:39:6a:cb:2c:9b:c1:83:29:64:9e:e3:a3:80:e0:
4a:0b:43:db:fb:ac:00:01:8e:4f:35:72:fa:65:c8:3a:12:1d:
34:d5:45:4a:1c:be:d2:93:e3:a5:39:3d:ce:a8:b1:93:e9:6e:
33:ca:92:9e:71:7e:04:2b:e9:70:3f:e0:f4:6b:2a:1b:0b:67:
c2:5e:69:2b:0d:13:ff:56:fb:d3:02:44:d3:c5:91:d5:ec:90:
69:c1:94:82:b0:ac:b8:06:0d:cf:73:66:1f:9d:e9:26:f9:30:
a9:c9:e7:73:e8:e6:4d:e9:f3:47:e7:91:fc:47:f8:0a:3c:93:
fe:f7:90:dc:15:6e:f1:17:ab:09:3e:d7:67:4e:fc:6a:e8:e3:
f0:4a:3d:df:8b:aa:21:5d:0d:8e:41:3c:f7:36:ac:b6:1a:6c:
ba:58:ea:3e:70:80:5c:03:0d:59:32:fb:a1:e3:ba:b8:00:c3:
00:a4:ae:37:cd:64:19:e8:88:90:59:6e:c6:6f:55:dc:5a:41:
71:0a:1f:3f:5f:bf:41:88:21:18:ee:54:df:32:46:65:53:9e:
31:39:c1:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAeZr5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YjVlNmZkNjI0ZmVjMDY5MmZlNzA2OWUzNzkyMzFlNTI0ZDgwZmJjMB4XDTIyMDEw
MTE0MDczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjI0YTE5NWUzNGRj
Mjc5MzIwMjJhNWQ2ZDYzYjQ0YTY5YzVhMTY0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANxAhf1npl3iV8w65bR4FYK3BX1kpY5c2rjeSNCJpeJlepFG
lnK2Qu8MbnHlkGtFNz0zO+B1S5Riw++ZZxAkavB8MjMLuIb0+F9SDMSbUjxRDnW9
WQbv8XehVsM8bdbDE0zOIPcrrJdGt4kEo5tVCHU/qNE/0NLOk5pu34UWYorigZYK
v/3v1HWCtGbfm5qel4DjRR5Re1Kdjrm6hpvUplLg4k1Q4JSWJhAg5ONGFhivmiYA
N1vMOsledByFszd5uGB3RHZalNx6DTLSw09CEJsS5JefCuTWFteOdiV6JObxB2XH
LNYzc3bYAFqGcFGznUAvbvVdmaB/OMS7IgIgjucCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTyShleNNwnkyAipdbWO0SmnFoWRjAfBgNVHSMEGDAWgBTLXm/WJP7AaS/n
Bp43kjHlJNgPvDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3kxNXYxaVQtd0drdjV3YWVONUl4NVNUWUQ3dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvNmJhNjU2LWUyNWUtNDlhYi1hNGJmLTY4MjZlMjViODA3Zi8x
Lzhrb1pYalRjSjVNZ0lxWFcxanRFcHB4YUZrWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
NmJhNjU2LWUyNWUtNDlhYi1hNGJmLTY4MjZlMjViODA3Zi8xL3kxNXYxaVQtd0dr
djV3YWVONUl4NVNUWUQ3dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvRYDANBgkqhkiG9w0BAQsFAAOC
AQEAdyueOwxgATNQIs5CIs/ziGxnlx6+SPPb2pDMAR9KWeTQmx9TD9Xzcjlqyyyb
wYMpZJ7jo4DgSgtD2/usAAGOTzVy+mXIOhIdNNVFShy+0pPjpTk9zqixk+luM8qS
nnF+BCvpcD/g9GsqGwtnwl5pKw0T/1b70wJE08WR1eyQacGUgrCsuAYNz3NmH53p
Jvkwqcnnc+jmTenzR+eR/Ef4CjyT/veQ3BVu8RerCT7XZ078aujj8Eo934uqIV0N
jkE89zasthpsuljqPnCAXAMNWTL7oeO6uADDAKSuN81kGeiIkFluxm9V3FpBcQof
P1+/QYghGO5U3zJGZVOeMTnBCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:58 2024 by rpki-client on console-ams.rpki-client.org