Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/VNz3aHbUz0HJBw0S0h3PUMf1KoQ.roa
File: VNz3aHbUz0HJBw0S0h3PUMf1KoQ.roa (raw, json)
Hash identifier: Cx+B9GHJgC4Wurg/YxM1lwhDm0A4exGQjnXHwBEVXLw=
Subject key identifier: 54:DC:F7:68:76:D4:CF:41:C9:07:0D:12:D2:1D:CF:50:C7:F5:2A:84
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 0B094962
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/VNz3aHbUz0HJBw0S0h3PUMf1KoQ.roa
Signing time: Tue 14 Jun 2022 07:50:44 +0000
ROA not before: Tue 14 Jun 2022 07:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 91.227.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185157986 (0xb094962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jun 14 07:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54dcf76876d4cf41c9070d12d21dcf50c7f52a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:dc:8a:5e:98:5c:6c:36:7d:ed:0a:02:ce:
d2:22:3f:80:fd:a5:19:05:4a:83:23:cd:1f:d8:5d:
41:d2:8a:89:e8:73:6c:04:7d:bf:02:26:2b:77:46:
52:ce:26:1a:0f:3c:9a:29:e3:1d:94:92:fc:1b:de:
f0:89:e4:9a:4b:60:ae:67:fc:6e:af:ec:5c:bf:c7:
4e:32:1f:3a:1e:66:93:8d:a7:78:07:c3:02:dd:68:
0b:4b:98:3a:2f:07:33:98:dd:65:6d:1f:e0:8e:fd:
e7:46:66:99:0f:c8:f6:66:87:c5:40:cf:c3:2e:d3:
70:65:a1:0f:7e:76:a8:0c:ca:5f:f3:d1:66:aa:95:
3e:58:94:6d:e9:64:4f:9b:5a:5b:8e:11:89:cc:b4:
bc:1c:8c:cf:c5:3a:86:0e:a4:47:6a:94:f1:35:2e:
57:66:25:4c:4d:70:e9:0a:bc:45:19:d3:3d:47:51:
4e:ae:8f:a2:c5:14:c5:23:cc:77:b0:08:74:b3:bd:
1c:c5:5d:ac:2a:4b:f7:cd:72:4e:cb:4b:da:ab:f0:
fd:dd:b3:74:82:92:c3:d9:9e:17:2c:6f:41:a4:1a:
00:69:fe:ef:0b:12:95:d3:b4:04:9f:16:2b:bb:50:
d8:ee:99:7e:b4:75:eb:bd:b7:fb:19:c3:1f:1a:ed:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:F7:68:76:D4:CF:41:C9:07:0D:12:D2:1D:CF:50:C7:F5:2A:84
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/VNz3aHbUz0HJBw0S0h3PUMf1KoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:28:17:e8:b6:cd:ba:21:7b:02:0f:a8:f2:ea:15:6e:e3:30:
05:10:65:24:fe:e7:17:e4:fe:fc:ff:4d:97:27:0d:21:b7:4a:
a8:ea:55:60:63:76:ad:81:88:df:94:67:9f:e1:9e:3e:ea:ca:
39:4a:7b:52:a8:6d:fd:32:71:d8:7b:b6:d3:66:d7:78:c8:0b:
bf:2f:be:ad:64:d6:83:25:5f:a5:43:60:67:59:4b:14:dd:68:
bd:b9:89:65:ba:2b:f6:77:4c:bd:e0:38:f6:c6:1e:62:6a:99:
d5:5a:f1:b9:3b:60:fe:16:1e:bf:66:56:27:78:89:f8:fd:20:
e6:c5:12:ac:0a:0e:eb:bd:69:e2:e2:3d:d9:03:4f:0a:ea:66:
72:79:a8:85:31:19:d4:97:99:30:a7:3c:b1:e8:96:e7:72:5e:
73:3d:22:11:fd:4a:23:a1:eb:30:c9:4d:8c:21:55:19:c0:2a:
60:9f:5d:90:70:e0:70:09:f0:59:51:36:ae:32:ec:fd:90:d7:
ac:35:73:2b:93:dd:8c:ea:e7:0a:01:68:eb:53:62:00:35:46:
b0:28:85:03:dc:7d:54:3d:ba:9b:60:b9:d8:b4:03:03:7c:8d:
fd:cf:e1:b6:a9:65:bc:c1:4d:90:a4:8f:4d:ab:be:a4:b8:80:
da:3c:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:04 2024 by rpki-client on console-fra.rpki-client.org