Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/PD7wq9IFISvYFNdIMRb3-mGVKRg.roa
File: PD7wq9IFISvYFNdIMRb3-mGVKRg.roa (raw, json)
Hash identifier: BtvCutZ1XhxtK79nF+Th9dOnbSZf1iOqwIpZ6+WNRJM=
Subject key identifier: 3C:3E:F0:AB:D2:05:21:2B:D8:14:D7:48:31:16:F7:FA:61:95:29:18
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 030873EC
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/PD7wq9IFISvYFNdIMRb3-mGVKRg.roa
Signing time: Sat 01 Jan 2022 16:05:28 +0000
ROA not before: Sat 01 Jan 2022 16:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48258
IP address blocks: 91.209.53.0/24 maxlen: 24
2001:67c:2488::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50885612 (0x30873ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Jan 1 16:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c3ef0abd205212bd814d7483116f7fa61952918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:70:21:78:3e:92:f4:cc:e0:ce:48:ea:52:
e8:6e:b7:dd:2b:9d:48:b3:e0:d6:35:a7:3b:ec:26:
20:f3:49:f8:af:e4:fb:37:56:d1:17:11:bf:34:1a:
b0:83:36:15:2f:1f:1d:82:79:10:90:d7:ce:1a:6c:
50:61:0b:f4:98:66:96:12:73:ca:87:bc:b8:40:5f:
cb:f2:0c:c1:64:09:0b:83:be:ac:0c:1e:d6:0e:d7:
45:b0:12:12:5c:fe:e6:74:e5:9e:98:bd:55:ec:d4:
4e:90:47:be:1d:c1:3a:ed:32:c2:f4:f2:20:bd:c1:
8e:71:76:a0:89:43:fd:80:e1:d9:57:9b:69:60:a9:
4a:ad:c5:82:10:a7:d1:5d:c9:6d:4f:37:71:2c:ed:
76:a4:5d:10:79:a7:8b:1a:53:d5:7b:4b:e6:58:91:
d1:b0:93:17:e7:e9:ab:a5:09:66:88:5a:45:f5:47:
00:09:25:91:21:00:d1:32:70:ef:29:9c:3c:b3:86:
fc:ea:d8:9a:95:df:16:d7:e1:2a:50:57:da:18:1b:
f0:3f:41:34:be:7e:a0:e6:3a:ce:67:7b:59:f6:bb:
46:22:25:be:91:07:82:be:15:aa:38:ab:11:e8:b6:
67:80:2b:62:06:b5:6e:25:d3:e4:0c:de:79:4f:28:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3E:F0:AB:D2:05:21:2B:D8:14:D7:48:31:16:F7:FA:61:95:29:18
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/PD7wq9IFISvYFNdIMRb3-mGVKRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.53.0/24
IPv6:
2001:67c:2488::/48
Signature Algorithm: sha256WithRSAEncryption
69:cc:dc:d7:80:58:c7:6f:e1:a8:f6:86:44:1a:db:92:48:83:
ce:08:42:50:72:61:25:0d:9c:e2:23:d5:cf:79:05:f9:8f:91:
ed:b9:96:dd:cf:b4:19:04:af:db:cb:63:4d:79:bf:20:83:28:
61:bd:e5:f1:4e:fb:53:b8:17:cf:e5:a7:6a:a5:2d:2a:d6:de:
06:9c:d2:3c:df:53:28:b2:b1:d3:1f:ab:bf:bc:00:31:6a:46:
03:e6:63:6b:0e:31:9a:3c:f7:f3:fe:0f:99:ff:8b:50:01:53:
89:e0:b1:0e:c2:14:b4:b1:ea:db:b8:fb:0d:5c:e0:f5:e9:c2:
19:66:d5:92:92:5d:58:21:69:29:e8:be:99:c7:09:68:f1:35:
83:b4:07:1a:62:fd:c9:35:ca:37:fb:ad:22:4a:5b:61:7a:53:
0f:79:6e:64:36:ff:f8:72:f2:98:43:06:d5:70:c8:07:5d:21:
fa:5e:f6:c4:4e:91:13:57:70:8d:7e:08:1d:90:de:54:0a:4b:
c7:e9:45:b9:30:86:b1:dd:78:b7:b4:83:fe:8f:22:b3:db:75:
47:2f:47:68:b4:47:f4:ca:f4:2e:ec:05:0a:a6:8d:bf:26:04:
a2:3a:78:82:c1:8f:e1:6b:7c:cd:74:6b:54:30:1b:bc:7e:b3:
9e:00:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:37 2024 by rpki-client on console-fra.rpki-client.org