Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/tpCZ1UbVl8D3wvictRnRdg78IwU.roa
File: tpCZ1UbVl8D3wvictRnRdg78IwU.roa (raw, json)
Hash identifier: Be0yoUtzgBcXglDgsGKJmSp9DPFpXio+F5vaQnsP/9Q=
Subject key identifier: B6:90:99:D5:46:D5:97:C0:F7:C2:F8:9C:B5:19:D1:76:0E:FC:23:05
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 01E437
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/tpCZ1UbVl8D3wvictRnRdg78IwU.roa
Signing time: Thu 10 Mar 2022 17:40:30 +0000
ROA not before: Thu 10 Mar 2022 17:40:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210626
IP address blocks: 91.242.247.0/24 maxlen: 24
2a11:af40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123959 (0x1e437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Mar 10 17:40:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b69099d546d597c0f7c2f89cb519d1760efc2305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:ca:a6:5f:b1:55:dd:ea:33:88:f8:02:71:
58:4e:6a:2f:22:fc:eb:04:8a:63:48:18:e2:7a:b5:
b9:1a:59:23:9e:bd:6f:05:27:60:35:05:dc:23:0f:
14:7b:7c:f8:9d:a7:36:2b:55:81:88:96:fe:4b:89:
da:90:b7:66:3f:58:b5:6c:19:bf:0a:8d:9e:c2:0b:
53:fc:68:1d:40:68:45:17:3b:1b:3f:28:d2:80:0c:
55:cb:12:6a:c3:c1:a7:f1:af:f7:08:35:a2:a6:b7:
8d:94:fc:75:16:18:4e:79:cd:6c:53:46:97:29:81:
a9:0f:ee:6e:50:5c:ad:59:c2:78:6f:4a:d9:16:b3:
af:48:0e:ff:ff:94:56:25:ad:ca:21:26:03:5c:dc:
07:2d:23:2e:97:d8:a9:ea:bd:2e:52:b4:ee:44:af:
76:dd:e8:a4:94:85:bf:e7:3a:f6:ed:f8:d1:27:f7:
18:5e:c5:87:78:55:f3:90:59:72:a8:8c:26:d4:29:
24:9d:32:7a:ad:c9:66:08:47:83:a5:71:cb:84:ba:
fb:95:fb:ec:4e:1d:80:b1:5a:3b:ae:67:62:7c:a2:
22:f1:b4:d0:46:4e:fa:94:cc:d5:13:12:e0:75:75:
41:bd:4c:a1:ce:83:2b:b9:2f:07:57:47:29:0e:e5:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:99:D5:46:D5:97:C0:F7:C2:F8:9C:B5:19:D1:76:0E:FC:23:05
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/tpCZ1UbVl8D3wvictRnRdg78IwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.247.0/24
IPv6:
2a11:af40::/29
Signature Algorithm: sha256WithRSAEncryption
92:2d:db:f5:24:c3:13:3f:dd:99:3d:46:59:18:f1:ae:1a:4b:
44:28:bc:ce:14:56:bc:f9:0d:cd:d8:64:dc:dc:65:d9:28:b7:
97:c8:22:71:ba:6c:ef:a8:b3:6d:4e:86:28:99:8c:60:37:58:
3c:3d:cd:78:91:6a:9f:be:90:09:42:da:b4:30:d5:6b:ab:19:
21:79:84:3e:24:57:0d:72:f3:fc:05:a2:77:3d:e5:f7:f0:9b:
84:f7:a7:14:c8:2d:8a:65:f3:a2:7a:98:d1:a6:20:eb:94:75:
93:e0:d1:43:48:30:2d:d5:a5:a4:5e:60:7b:d2:2d:09:57:05:
3e:3b:66:c7:ea:65:18:de:37:77:2e:98:c6:24:dd:f6:70:7b:
de:df:d0:f0:f3:3a:f7:11:5c:6d:9a:70:1d:67:4f:eb:68:8b:
59:b0:f7:33:a8:33:d8:21:9a:f7:45:4d:dc:56:a6:65:22:28:
72:97:2f:ac:10:95:19:0c:66:9a:73:50:fb:1d:eb:4a:e0:79:
78:7d:f2:4c:8c:07:32:96:50:2d:04:d3:84:cd:4e:ff:24:35:
15:f3:34:af:cd:00:be:61:8b:9e:8d:b4:d3:ad:c6:37:c3:85:
0f:27:85:6b:61:74:7a:14:7c:0e:78:c7:3c:a7:60:32:71:8f:
6c:bb:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:31 2024 by rpki-client on console-fra.rpki-client.org