Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/q6blvNut5HqAMfCXkflZ0V_-VnU.roa
File: q6blvNut5HqAMfCXkflZ0V_-VnU.roa (raw, json)
Hash identifier: 5T+gPE2HqApqnZAAyIBNowvDyVOJ24s4nUpA4JwqDA8=
Subject key identifier: AB:A6:E5:BC:DB:AD:E4:7A:80:31:F0:97:91:F9:59:D1:5F:FE:56:75
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 0299525C
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/q6blvNut5HqAMfCXkflZ0V_-VnU.roa
Signing time: Sat 01 Jan 2022 15:01:19 +0000
ROA not before: Sat 01 Jan 2022 15:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211790
IP address blocks: 91.201.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43602524 (0x299525c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Jan 1 15:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aba6e5bcdbade47a8031f09791f959d15ffe5675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:33:d3:f3:0a:0b:b5:da:2f:06:9d:1c:ac:
f8:8a:d0:4f:fc:f9:79:6b:b0:f2:be:d9:45:54:40:
33:3c:39:91:01:00:9a:d7:37:fa:0d:7a:6a:1a:a7:
c9:47:da:3c:e9:60:d9:43:f7:97:16:57:23:99:72:
04:6b:3f:64:cb:e1:09:d7:f1:80:73:20:87:70:04:
59:3c:6a:bd:20:a7:fc:2d:f3:67:42:71:70:06:92:
7c:01:45:b3:03:0b:a4:46:e7:c5:95:81:c3:2c:22:
f2:08:9a:ee:d2:ab:d0:3d:29:7a:7e:fd:5e:d0:10:
e0:27:03:85:dd:57:71:6d:eb:7c:27:c6:4e:be:0d:
70:08:e2:8a:ef:6e:4a:16:80:b4:f5:ed:60:b2:75:
76:f9:c8:50:29:3b:7b:69:b8:48:32:45:1b:03:3b:
74:ac:f3:83:c5:aa:72:a9:7b:f9:6c:b1:05:9d:0b:
9a:57:c1:d2:77:aa:5c:1c:54:e4:2e:68:eb:01:b6:
80:d1:06:4d:7e:29:0d:2a:f3:7e:88:9d:75:6a:63:
cb:db:0a:31:76:47:a4:64:8b:8c:c0:0e:30:82:64:
f5:66:f6:80:a1:9e:76:4c:20:cf:a1:95:6a:e2:1e:
c5:98:53:b0:e3:95:ba:a5:fc:a9:11:71:a1:61:21:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:E5:BC:DB:AD:E4:7A:80:31:F0:97:91:F9:59:D1:5F:FE:56:75
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/q6blvNut5HqAMfCXkflZ0V_-VnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:87:98:f2:84:1d:a0:e1:45:75:56:59:2b:68:b5:ce:a1:48:
48:2a:6e:b3:b6:83:08:5d:65:b5:91:18:14:ee:3b:07:78:d0:
cb:9e:d5:65:27:dd:dd:51:80:16:90:7d:49:90:00:d8:97:83:
39:f0:99:e1:85:02:28:6a:06:11:05:9a:8e:02:ce:f8:9f:19:
fd:1b:1d:f6:f9:68:f4:92:3a:47:f1:86:5d:b5:00:a5:dc:09:
c3:c3:46:30:28:62:69:79:5e:75:c6:e8:68:bd:34:68:49:3f:
22:10:a1:d4:6f:18:ab:75:25:03:8e:65:e0:57:29:36:f1:ca:
14:23:63:0a:a5:b1:27:34:3e:88:8e:e9:1d:0b:23:26:59:3a:
f5:57:07:5e:97:4b:fb:f9:f2:0f:db:63:fe:27:29:79:fd:95:
08:97:5f:aa:22:b2:68:ee:89:a4:89:7c:23:1e:64:7d:8a:26:
ff:32:89:54:3b:d0:b1:b6:e4:30:50:01:32:ec:0d:4b:7a:24:
be:37:47:81:8f:1f:bf:63:d9:05:eb:e9:24:aa:fd:f3:0a:96:
de:3a:97:62:87:ab:0a:c0:67:a1:58:aa:6a:4a:e7:bd:01:bf:
86:94:41:7f:71:3c:84:53:7c:aa:0d:92:e6:33:8a:fb:d5:cd:
bc:a1:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:01 2023 by rpki-client on console-fra.rpki-client.org