Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/7xwnUJciTQtuzq64exqXBmB8bNw.roa
File: 7xwnUJciTQtuzq64exqXBmB8bNw.roa (raw, json)
Hash identifier: uy1c9AwNhkTuMMBW939/WpuDkZc8GVxiQ9LpLZKL+x8=
Subject key identifier: EF:1C:27:50:97:22:4D:0B:6E:CE:AE:B8:7B:1A:97:06:60:7C:6C:DC
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 17ADD9EB
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/7xwnUJciTQtuzq64exqXBmB8bNw.roa
Signing time: Sat 01 Jan 2022 07:59:32 +0000
ROA not before: Sat 01 Jan 2022 07:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 91.245.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397269483 (0x17add9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Jan 1 07:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef1c275097224d0b6eceaeb87b1a9706607c6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:44:8d:7c:a7:1c:4e:da:45:da:1d:ba:cc:5c:
4b:1c:e8:88:54:78:ef:37:cb:20:0a:75:e6:5e:6f:
05:80:67:2b:69:21:65:56:33:da:5d:0f:18:f6:6d:
07:bb:84:5b:2f:33:15:0c:15:0a:39:14:97:3b:a1:
83:bd:a4:93:1b:f9:78:b2:bb:48:94:45:16:19:08:
3f:31:87:e8:32:9b:a9:a7:03:53:44:16:0b:6d:bb:
95:9e:c1:33:21:fd:4e:e7:db:4f:a3:26:3f:2a:6a:
8f:17:cf:16:f3:36:fa:d6:93:b0:e8:2c:9d:7b:53:
c9:b2:10:b3:36:cc:3c:83:eb:89:ff:72:e9:bf:2f:
03:f9:e4:3b:e1:4b:18:2e:05:3f:20:99:f2:49:7d:
9c:02:b2:f8:dd:15:88:46:7a:4e:b8:7f:c4:41:56:
59:6a:7c:eb:45:e1:95:c8:c6:a1:a3:23:f6:ff:5d:
2c:09:73:85:81:14:4c:a9:a2:09:e7:9e:28:75:94:
89:ea:b8:c6:48:88:ab:e9:f5:c3:da:d9:be:8d:36:
fb:cb:60:f9:91:5e:ca:42:b8:eb:4d:8c:d1:5c:34:
79:8c:a9:0b:e5:57:53:c9:bf:2e:4f:83:ef:18:62:
b2:c7:37:46:fa:07:c9:13:76:9f:14:8d:36:19:9b:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1C:27:50:97:22:4D:0B:6E:CE:AE:B8:7B:1A:97:06:60:7C:6C:DC
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/7xwnUJciTQtuzq64exqXBmB8bNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:96:5b:d7:bb:15:37:26:99:f4:2e:f7:49:43:89:39:84:14:
ec:fa:9c:f0:a4:f0:e6:c5:34:8f:0a:97:b2:a9:f5:66:14:b5:
4c:ca:f8:36:5b:55:80:a5:71:d0:3d:bb:06:af:eb:15:5e:45:
5f:af:3d:80:b3:c4:92:81:70:62:ad:f8:f9:11:f6:28:35:5a:
68:b4:76:9c:5e:51:89:26:dc:c2:fc:64:0c:8a:cf:8b:87:99:
81:62:65:0c:e9:8e:34:ed:59:0a:2e:7a:6d:db:85:e7:25:44:
9c:16:a6:ae:b0:5d:7e:ce:d7:0b:9d:95:dc:5e:68:c9:b6:32:
09:68:05:0a:dc:1e:c8:d9:ea:df:97:d1:c9:7b:b2:6e:9c:78:
b1:0e:69:98:15:66:ef:b6:4b:f9:1d:69:02:4d:29:f1:4a:2d:
a5:93:7f:3b:17:75:24:50:8d:5a:56:e2:49:fa:6a:c1:48:a1:
0a:c2:14:37:03:3d:f2:f9:8f:32:fc:55:8c:f3:ac:16:bb:4d:
e7:8a:a0:ad:e5:f1:44:26:2f:1b:56:c8:3c:36:2f:bd:61:8c:
bc:6b:ef:12:70:5f:80:d0:08:32:49:88:36:0c:67:d0:85:f5:
5f:9a:55:de:ca:fe:89:59:65:18:ac:b9:a5:42:0d:6e:2b:97:
0b:e4:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:48 2024 by rpki-client on console-fra.rpki-client.org