Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/1-xVVxfzwGklo_d65uFb5qqUvdIs.roa
File: 1-xVVxfzwGklo_d65uFb5qqUvdIs.roa (raw, json)
Hash identifier: YWB9D7ei1BWTd6AqE2jZ/zgb/Pl+tHotVs6uAgYnn3o=
Subject key identifier: FB:15:55:C5:FC:F0:1A:49:68:FD:DE:B9:B8:56:F9:AA:A5:2F:74:8B
Certificate issuer: /CN=2a21b1abe787e25464391fad61d00e3f376b98cf
Certificate serial: 01838EB15121B9B76BF630EAF3735C1601AC
Authority key identifier: 2A:21:B1:AB:E7:87:E2:54:64:39:1F:AD:61:D0:0E:3F:37:6B:98:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiGxq-eH4lRkOR-tYdAOPzdrmM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/1-xVVxfzwGklo_d65uFb5qqUvdIs.roa
Signing time: Fri 30 Sep 2022 13:58:48 +0000
ROA not before: Fri 30 Sep 2022 13:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51823
IP address blocks: 91.220.132.0/24 maxlen: 24
193.3.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:b1:51:21:b9:b7:6b:f6:30:ea:f3:73:5c:16:01:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a21b1abe787e25464391fad61d00e3f376b98cf
Validity
Not Before: Sep 30 13:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb1555c5fcf01a4968fddeb9b856f9aaa52f748b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:20:7a:ac:7f:81:d2:fc:07:16:44:cd:03:
df:fd:a3:e5:b3:15:bd:2c:71:2f:2e:99:e3:0d:3e:
8b:30:c4:b3:e5:46:2b:79:3a:60:9e:e7:eb:b9:e4:
6b:4c:29:1d:fd:35:5d:b0:b3:9d:27:cb:d4:b1:bb:
2b:24:a8:fc:5f:b9:b5:87:b1:07:2a:ff:56:9d:03:
bf:f6:18:a5:91:df:21:59:69:9e:00:b2:d2:29:c3:
bb:d3:a6:a0:9e:e8:7b:aa:eb:0d:1c:25:b0:59:15:
4c:91:37:b5:b6:68:45:96:79:34:94:6e:dd:05:4d:
0b:db:9b:b6:5c:7c:4e:39:85:6a:fd:6b:da:34:f1:
35:b7:da:7a:75:01:6d:cf:15:c6:36:fb:6a:00:f1:
06:c5:f5:31:13:90:a4:55:3b:50:b3:61:57:cb:47:
5d:f7:4d:29:2b:a4:d2:9c:ab:cf:6c:cf:47:5e:b1:
30:ff:11:e5:61:7d:f0:8d:41:a3:77:d6:40:95:e7:
47:a8:8f:f7:3e:01:0e:8c:fb:f1:f6:e1:cd:f9:c0:
37:f9:19:1b:ea:65:20:24:6f:c0:c1:d8:c5:80:4e:
a6:d8:cf:1b:87:02:ce:c3:eb:54:79:8a:ac:a1:b1:
cb:2a:ba:51:13:96:10:6b:92:18:b0:c2:81:56:9c:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:15:55:C5:FC:F0:1A:49:68:FD:DE:B9:B8:56:F9:AA:A5:2F:74:8B
X509v3 Authority Key Identifier:
keyid:2A:21:B1:AB:E7:87:E2:54:64:39:1F:AD:61:D0:0E:3F:37:6B:98:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiGxq-eH4lRkOR-tYdAOPzdrmM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/1-xVVxfzwGklo_d65uFb5qqUvdIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.132.0/24
193.3.172.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1c:03:3a:1b:ec:ae:54:9c:3b:e7:8b:f1:11:33:c1:64:f0:
66:0e:98:45:17:be:68:76:73:3e:e3:a7:6b:63:ba:06:24:e7:
88:8c:99:c7:1c:26:e0:b4:a4:45:c8:89:0b:db:c5:9e:57:de:
2e:52:38:25:6a:be:67:d2:c3:c5:7d:be:d0:44:92:1b:33:13:
18:19:81:b2:9a:8f:72:f9:1e:c9:9f:42:8b:eb:9d:9f:15:fb:
4e:a7:f5:91:1b:76:d6:5f:b2:a1:b8:97:a4:53:ef:2f:0c:da:
c5:cd:5a:24:e9:e9:a6:8a:78:40:f7:32:90:8a:7e:b5:09:83:
32:7c:86:72:61:ba:f6:6c:39:98:ca:6a:8b:95:91:a4:f7:52:
d2:23:7d:6b:94:ec:f6:77:1c:78:09:77:cd:a9:87:78:ff:3c:
6b:63:f6:6c:2b:5f:bd:fe:07:ff:cf:ff:e9:3e:c2:9f:fe:f4:
ed:83:5f:a3:e6:b4:9f:3d:18:f8:b6:37:b8:9f:32:d6:10:9a:
e0:24:70:f6:8c:5e:66:74:bc:44:38:e2:5f:cb:bd:77:c7:34:
61:99:8f:7e:3d:71:14:70:f6:d5:8b:d0:59:31:6b:92:37:a6:
b4:9e:0a:bd:96:78:3a:98:16:3c:d9:e0:06:e0:a5:4c:12:39:
8e:10:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:54 2024 by rpki-client on console-fra.rpki-client.org