Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/aMhZu42W88mcV4v3nHetRMkEhZ8.roa
File: aMhZu42W88mcV4v3nHetRMkEhZ8.roa (raw, json)
Hash identifier: W+kYxzgUFMBEPGlchE5iU+FPtq6/tTUQBCEJ0ckzmkk=
Subject key identifier: 68:C8:59:BB:8D:96:F3:C9:9C:57:8B:F7:9C:77:AD:44:C9:04:85:9F
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 016F03
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/aMhZu42W88mcV4v3nHetRMkEhZ8.roa
Signing time: Fri 06 May 2022 06:16:11 +0000
ROA not before: Fri 06 May 2022 06:16:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47511
IP address blocks: 91.206.82.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93955 (0x16f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: May 6 06:16:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68c859bb8d96f3c99c578bf79c77ad44c904859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f8:99:35:41:42:21:13:00:16:fc:0f:3c:f9:
44:d7:1d:dc:be:fa:63:a7:88:f6:78:74:b3:77:db:
e9:94:e1:bd:dd:41:7e:10:4a:e7:93:04:26:33:8f:
7c:0e:48:d0:74:93:1e:82:e3:e9:e6:62:a0:fb:f7:
57:84:27:e8:03:a2:1b:56:5e:0f:6b:e0:43:94:22:
64:a5:c7:0f:b2:72:9e:03:4b:dd:4d:ef:80:de:6c:
31:ff:e7:95:76:8f:08:19:a3:21:bb:97:52:43:0f:
7c:5c:b5:2d:a7:95:6b:6d:1c:08:ab:1c:78:52:4b:
be:5b:d9:90:25:db:6a:c4:63:ae:9a:29:f9:33:2f:
90:cb:9a:52:be:4c:f7:15:9f:78:ef:51:a1:67:21:
30:84:50:11:d4:40:5d:ec:fe:e1:ec:9c:06:7f:3f:
0a:a2:26:e5:65:5b:f0:2c:97:b3:a3:15:3c:2f:0c:
ca:2f:10:84:5f:91:7d:e4:60:67:1d:81:15:c4:65:
cf:5d:a0:23:d9:45:36:62:da:f1:0d:83:86:b7:a1:
fa:00:a3:73:f6:57:50:01:e1:3d:61:14:ec:69:45:
a0:c1:04:7c:7f:9b:6f:72:c4:44:e2:97:23:ef:f2:
1f:71:18:c0:b3:e3:74:eb:9e:5d:23:d7:e2:db:2b:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:59:BB:8D:96:F3:C9:9C:57:8B:F7:9C:77:AD:44:C9:04:85:9F
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/aMhZu42W88mcV4v3nHetRMkEhZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.82.0/23
Signature Algorithm: sha256WithRSAEncryption
28:2a:6c:4c:85:11:f4:0b:83:c0:8f:3f:e3:db:ed:c8:f5:fc:
31:32:31:67:f0:52:8a:2c:de:e7:af:32:0c:79:1c:f0:ae:a3:
75:60:68:e7:cf:d4:68:27:b2:84:b3:bc:ee:c0:01:2b:14:0e:
8c:ad:c6:d3:ea:61:e0:bc:29:c6:68:99:e9:f3:1a:f5:13:6d:
16:a8:de:d1:29:31:7a:0c:e4:72:4c:fe:32:8d:2f:ee:87:27:
c6:09:ca:2e:8e:b7:03:c7:a0:1b:5c:54:c2:6e:4e:07:38:ff:
2c:d5:7f:ec:35:a1:16:6e:3d:ac:6b:69:04:11:d2:6c:4d:da:
7e:1d:35:16:84:96:53:3b:bd:1f:3c:ff:d1:09:f9:a4:36:a0:
44:48:e3:c7:f9:34:9b:7f:67:13:4b:73:fa:98:f0:25:e9:6f:
5a:01:97:93:dc:5f:db:90:11:45:73:f8:ef:d3:7d:3f:db:04:
6c:d0:93:3a:b7:a7:18:c7:6d:b5:63:f8:8f:68:02:ab:a8:e3:
36:3c:d6:57:a8:09:a8:c5:4b:1c:2e:cd:4e:b2:8e:df:d1:e8:
42:17:a0:7f:75:b1:b9:92:55:96:70:23:cd:79:d5:64:7c:1f:
9c:8c:49:e9:24:8a:56:e5:53:af:d7:d7:85:42:18:1d:7d:6b:
49:68:94:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:43 2024 by rpki-client on console-ams.rpki-client.org