Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/AaKIxRjB7x4SOwKlCCD8GLzs4I4.roa
File: AaKIxRjB7x4SOwKlCCD8GLzs4I4.roa (raw, json)
Hash identifier: 2RGm7J64nc3GCCXV1/FYLdLf+bP7jcV1nYjzQLucuT4=
Subject key identifier: 01:A2:88:C5:18:C1:EF:1E:12:3B:02:A5:08:20:FC:18:BC:EC:E0:8E
Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial: 0363EC7C
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/AaKIxRjB7x4SOwKlCCD8GLzs4I4.roa
Signing time: Sat 01 Jan 2022 11:05:06 +0000
ROA not before: Sat 01 Jan 2022 11:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30417
IP address blocks: 91.208.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56880252 (0x363ec7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
Validity
Not Before: Jan 1 11:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01a288c518c1ef1e123b02a50820fc18bcece08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:fa:bc:9b:56:16:c8:20:7a:84:65:8f:11:
a2:ca:6a:e0:d1:c9:4b:21:59:32:c2:43:df:11:41:
fc:46:94:cf:a4:71:49:12:da:1e:0d:8c:20:b7:3b:
20:66:82:5e:a3:73:f1:f5:7c:ae:5f:b0:20:19:b6:
12:e4:93:98:82:ae:01:67:ee:b8:ae:a1:eb:1d:cd:
3d:a8:f0:6a:ee:1d:97:4d:5f:a3:ec:4a:98:9a:7f:
fc:2a:68:6c:59:d4:d5:c2:1a:99:96:a3:ab:bd:b4:
0c:2e:10:94:77:3f:05:69:98:a5:63:cc:35:a4:91:
9b:74:1d:e6:29:6f:b4:a0:8a:3e:44:5d:7b:30:12:
36:ec:fa:80:18:9b:8d:90:8c:61:f4:5c:ea:c5:7a:
87:7e:93:06:8c:e3:bd:c9:9a:8e:e3:fd:be:ef:a7:
0c:f2:18:28:0f:6c:52:b4:a3:b4:60:23:bb:b7:db:
dc:99:e6:ec:a7:f4:7a:4d:dd:ac:2e:3a:25:3f:0d:
0f:af:2d:e5:52:32:70:50:58:5e:0c:a9:ba:07:c3:
3e:e5:9f:5f:17:af:4a:13:33:42:2f:2b:dd:35:1f:
ee:a7:a5:74:ca:74:7b:34:17:d5:04:04:7d:be:cc:
28:83:b3:26:97:5e:87:9b:a6:37:be:a9:3e:a2:b1:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:88:C5:18:C1:EF:1E:12:3B:02:A5:08:20:FC:18:BC:EC:E0:8E
X509v3 Authority Key Identifier:
keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/AaKIxRjB7x4SOwKlCCD8GLzs4I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.252.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9c:71:f2:f0:e2:78:69:d7:1b:46:9d:a9:ee:a4:91:b0:ad:
24:dc:4c:12:d5:5f:e1:a9:9a:b8:9c:ea:4d:b4:1c:3f:75:0d:
fc:2d:5e:62:83:1c:23:f9:dd:c0:12:59:03:f1:81:89:67:29:
2e:a2:6a:4f:aa:9b:cb:12:ae:65:8b:27:4c:e5:1a:17:f8:c5:
c5:70:9f:1d:1f:48:8c:e7:fe:65:ff:2b:77:c5:0d:42:51:b5:
56:ac:ec:a8:11:03:96:a4:50:17:34:55:53:c2:39:7e:de:b7:
a5:a6:57:91:d9:b6:6a:e2:d4:10:90:a6:d7:7f:6e:57:a6:a4:
d0:c3:0c:a5:bf:28:e7:bf:23:a1:82:76:0e:1a:f9:90:f9:0c:
9e:08:3b:bf:86:e2:32:53:07:86:2b:25:0c:ce:c9:a5:27:cc:
42:5e:ac:75:bf:49:36:77:0e:24:75:30:b9:8c:9e:40:c9:d9:
c0:95:8d:b5:d3:28:9e:4e:7c:7c:da:ee:3a:44:3d:b1:42:e5:
74:4a:1f:a4:cd:9d:e9:71:98:d4:2a:16:b1:86:9e:ad:05:cf:
9f:53:02:f4:b6:a3:e2:cf:dc:84:f5:84:92:22:8a:eb:c2:07:
a3:7f:53:a0:21:dc:10:d8:18:78:95:59:4f:b3:9a:23:b3:b1:
69:26:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:24 2024 by rpki-client on console-fra.rpki-client.org