Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/vV6ef5clb6PIUyTZnZbR5S6y-7w.roa
File: vV6ef5clb6PIUyTZnZbR5S6y-7w.roa (raw, json)
Hash identifier: 1d1Rnekh37/MWMgqBe3IJkrGa6+P4rNWgbpInpJKyRY=
Subject key identifier: BD:5E:9E:7F:97:25:6F:A3:C8:53:24:D9:9D:96:D1:E5:2E:B2:FB:BC
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: E69D36
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/vV6ef5clb6PIUyTZnZbR5S6y-7w.roa
Signing time: Sat 01 Jan 2022 11:02:09 +0000
ROA not before: Sat 01 Jan 2022 11:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 91.208.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15113526 (0xe69d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Jan 1 11:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd5e9e7f97256fa3c85324d99d96d1e52eb2fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:a7:79:14:ab:5c:58:74:07:0a:2d:f8:40:
81:31:8a:5e:09:62:3d:c0:e7:10:d5:62:e9:d6:d0:
0d:9c:9d:3b:88:1a:46:6f:13:12:29:2d:62:3b:fe:
73:79:e9:56:e1:a9:6a:21:c4:f0:7a:69:b0:b7:bf:
9d:8e:4d:69:bf:f6:e8:04:52:ce:f2:25:3f:54:44:
77:20:de:c2:09:8b:e7:f7:06:e5:91:9a:14:78:84:
07:b1:fa:3f:49:99:02:f8:5e:7d:db:ae:d2:d0:d4:
3b:7a:47:43:4f:8e:27:51:db:7c:83:c7:96:ba:ad:
bc:5d:73:ee:2b:f2:fb:ad:87:97:9d:83:a4:05:da:
99:4b:7a:1b:75:39:a6:4d:d2:63:bf:fa:68:17:d7:
35:25:90:a5:55:5c:45:12:38:28:7e:74:3a:83:0f:
08:d0:13:77:29:71:31:86:34:b0:b3:b4:3f:53:6a:
0a:3b:1c:3a:95:01:4d:02:51:f2:d2:dc:09:45:52:
32:7e:02:53:96:f6:ad:9b:a4:79:cc:da:f3:4b:78:
00:82:c9:b3:0d:c3:96:13:ea:71:a9:ee:ef:1e:52:
0c:41:6b:ab:e1:3c:a9:69:bc:71:ec:2d:0a:57:7e:
14:78:21:98:c6:e2:51:dd:25:8f:94:a4:8b:5b:73:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:9E:7F:97:25:6F:A3:C8:53:24:D9:9D:96:D1:E5:2E:B2:FB:BC
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/vV6ef5clb6PIUyTZnZbR5S6y-7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.201.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9b:f8:76:22:c9:de:ff:a9:95:f1:e5:80:75:a0:ef:26:fe:
58:60:f2:7c:6a:15:7d:6c:69:06:4a:5a:14:47:4f:49:47:4b:
5d:b7:fe:19:93:8d:31:87:00:f2:6a:6a:5a:d3:44:1d:b4:b1:
86:a6:aa:30:69:c2:27:a9:85:7f:ba:c3:4b:44:0e:86:91:4d:
37:30:6f:74:fc:0b:4c:44:9b:c9:f9:e4:2f:32:0f:ce:88:69:
7f:2f:aa:84:32:96:fa:55:03:fa:2a:ae:97:2d:8f:95:0d:66:
65:cb:22:71:9d:59:18:c5:8c:e7:69:83:1e:7d:83:53:3f:90:
a7:b7:4b:80:39:33:eb:29:89:00:32:21:74:05:6e:e8:25:47:
b2:ee:5b:3a:8d:81:d3:e3:6a:78:e9:45:8b:b9:18:60:52:8b:
fe:33:1b:b5:85:f8:d2:d8:50:24:b3:a9:d4:e8:a2:5e:d3:cc:
da:8f:8e:aa:4d:f6:86:5e:f1:d7:b2:2f:c1:fe:43:be:00:7f:
1b:1e:95:08:6d:3c:fa:80:35:62:c0:13:34:4b:dd:fe:9a:c8:
94:3a:39:c5:88:04:e5:7e:8b:1e:4f:42:c5:79:06:1b:08:2e:
c4:96:dd:76:eb:e2:28:81:71:c9:8f:18:ac:94:67:44:ac:78:
ca:2c:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:57 2024 by rpki-client on console-ams.rpki-client.org