Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/i6LUC1l9ofcvMzEMOpV8z3s86aY.roa
File: i6LUC1l9ofcvMzEMOpV8z3s86aY.roa (raw, json)
Hash identifier: GyhqnpCrA1o/pb508VPI2vy3Uf70lxx5+sHXMqj7FTA=
Subject key identifier: 8B:A2:D4:0B:59:7D:A1:F7:2F:33:31:0C:3A:95:7C:CF:7B:3C:E9:A6
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 041FDF42
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/i6LUC1l9ofcvMzEMOpV8z3s86aY.roa
Signing time: Mon 07 Feb 2022 10:16:52 +0000
ROA not before: Mon 07 Feb 2022 10:16:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51733
IP address blocks: 91.209.254.0/24 maxlen: 24
185.156.85.0/24 maxlen: 24
185.156.84.0/24 maxlen: 24
91.221.58.0/24 maxlen: 24
91.221.58.0/23 maxlen: 23
91.221.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69197634 (0x41fdf42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Feb 7 10:16:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ba2d40b597da1f72f33310c3a957ccf7b3ce9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:89:7d:a5:b0:ad:62:7d:ed:5b:23:cf:d5:
31:bb:d5:85:21:dc:ff:8f:12:5b:33:9a:e5:b6:0b:
c4:54:46:6e:27:02:48:4f:b0:bd:41:63:9c:d9:b9:
4c:28:a7:46:1d:36:6f:c3:96:4c:bd:50:c9:5e:67:
77:9b:f4:e0:b5:24:4b:13:f7:e3:1e:13:60:51:bc:
c1:a2:1b:2b:ee:e8:3c:59:bf:64:ed:d8:2c:b1:a0:
11:a1:46:b6:ea:98:85:b5:2b:c8:66:08:e5:59:87:
33:7b:3c:34:e1:6b:e9:f4:c3:5b:54:72:2c:cc:c4:
d2:3a:db:56:c6:18:f7:f6:06:cc:7d:8a:3e:0f:3e:
a8:82:0c:c2:fa:88:1e:42:a3:26:77:6d:ec:1b:5b:
8a:24:65:40:db:fa:21:15:8c:26:37:e9:96:db:3a:
ea:4c:ff:81:1d:73:ae:fc:89:4d:3b:be:45:46:13:
97:ea:97:6f:b7:74:e2:f8:d2:f7:8a:b2:03:0c:f5:
2e:2d:23:03:90:74:d3:76:f5:63:c0:1c:4f:d3:f2:
97:5c:a4:2f:d1:75:d7:00:fb:fc:da:3f:48:21:e4:
9e:0f:4c:3d:49:91:9c:ec:83:22:44:16:70:6d:1a:
1c:6b:05:69:97:46:83:f4:21:1a:80:47:65:82:cf:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:D4:0B:59:7D:A1:F7:2F:33:31:0C:3A:95:7C:CF:7B:3C:E9:A6
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/i6LUC1l9ofcvMzEMOpV8z3s86aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.254.0/24
91.221.58.0/23
185.156.84.0/23
Signature Algorithm: sha256WithRSAEncryption
55:3e:a7:e5:51:ae:9c:b1:c5:c9:cc:62:10:d0:4f:ba:55:8a:
e3:dc:9f:a9:c1:06:b7:48:5e:f0:48:7d:8c:6b:47:fd:7f:88:
94:46:7b:87:18:5d:d4:c5:e4:ed:2d:45:e5:e7:f5:b3:a9:1d:
0e:95:98:23:22:29:0c:09:6d:16:fd:ec:e1:c6:bc:71:6c:aa:
20:43:df:63:2d:2b:01:9d:53:5f:27:1d:bf:7e:89:e7:e7:46:
72:3b:a4:60:12:a5:62:df:db:a7:60:4f:48:af:bd:48:40:4f:
36:f6:6b:8c:2f:50:6f:e9:44:29:94:c9:13:e6:a7:e3:b3:73:
12:88:ab:ab:24:14:8b:fd:30:4e:88:ae:1c:84:66:ed:b1:c6:
3c:89:8e:15:d3:f9:50:17:ae:ba:ef:68:98:4c:0b:d0:90:87:
8b:52:6e:4c:b1:34:05:fa:4f:b8:5a:dc:da:79:a3:93:9c:30:
74:f8:ed:62:c3:ce:b9:03:52:9b:f6:7e:71:7b:81:38:4c:39:
cd:5e:ad:94:94:3d:2f:25:10:e0:90:c4:7c:36:d0:41:26:1f:
cb:4a:2b:7a:a9:7b:f4:c2:75:6b:7d:c7:11:29:ba:d3:df:62:
1e:82:51:b7:c2:8a:01:ac:18:79:b1:e3:66:b3:95:1c:b1:26:
ab:76:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:35 2024 by rpki-client on console-fra.rpki-client.org