Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/GE0G5sOznfI9EHxJBLZZFW8zFC0.roa
File: GE0G5sOznfI9EHxJBLZZFW8zFC0.roa (raw, json)
Hash identifier: cU7Vb5/yJqTERbheGc0szExRQoq2dW7bT3NxfvofQNo=
Subject key identifier: 18:4D:06:E6:C3:B3:9D:F2:3D:10:7C:49:04:B6:59:15:6F:33:14:2D
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 02EE105E
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/GE0G5sOznfI9EHxJBLZZFW8zFC0.roa
Signing time: Sat 01 Jan 2022 15:02:30 +0000
ROA not before: Sat 01 Jan 2022 15:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 91.239.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49156190 (0x2ee105e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jan 1 15:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=184d06e6c3b39df23d107c4904b659156f33142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:fd:27:3e:b6:d2:c2:65:9a:0c:17:f0:75:
7a:a1:a4:4f:23:46:5a:22:04:a3:86:7a:07:f9:ae:
b5:59:9c:24:7e:8d:2b:6e:ae:ab:31:d0:b7:37:61:
39:41:88:ca:7a:d0:4a:88:d7:2a:cf:84:6f:2b:1d:
4e:49:c1:26:4b:17:72:cb:87:6a:4b:b5:12:a8:e0:
bd:9f:df:a6:f0:46:50:99:8a:15:ad:f6:9f:15:d4:
63:fc:9e:01:44:e9:4e:10:d9:65:b6:4f:31:03:2c:
45:8a:63:ad:d4:f4:5f:9a:1a:aa:32:62:95:9b:2d:
3b:41:e4:5d:67:b3:c5:f4:28:5b:31:aa:79:16:5d:
e1:cc:ed:03:27:c6:dc:d4:9f:da:72:20:b7:47:74:
f8:44:b6:54:2f:d2:6e:a4:25:ee:47:91:fe:85:00:
ac:f2:31:50:4c:07:de:ce:28:15:9e:ad:07:40:c9:
4b:d5:95:fa:a1:98:c6:b0:e6:4f:02:fb:9b:64:9e:
af:75:d5:e7:56:3c:52:fa:43:9c:53:21:f3:72:7c:
23:6e:e7:eb:d8:92:63:c7:54:5e:a7:8c:d8:2e:0b:
ae:d0:93:89:8d:62:07:bd:eb:81:54:f5:da:b3:64:
76:e2:d4:fa:f6:84:6d:91:86:ac:73:00:29:0f:fb:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4D:06:E6:C3:B3:9D:F2:3D:10:7C:49:04:B6:59:15:6F:33:14:2D
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/GE0G5sOznfI9EHxJBLZZFW8zFC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
52:62:81:fb:6c:91:56:d7:6b:2c:9f:fa:7e:c5:47:c8:b0:99:
3d:bd:8b:4a:ff:8a:10:15:ef:71:b2:96:24:07:64:8f:63:eb:
3e:82:54:1c:d8:83:5e:0e:05:6b:d7:5a:07:30:9a:9c:e1:88:
a6:0b:4f:81:a7:dd:32:23:49:68:b2:22:53:16:33:91:3d:96:
b3:7a:61:36:53:6b:4d:98:e8:3d:20:56:c2:94:1c:0b:a8:94:
d5:01:b6:28:5b:e6:e1:94:2b:e6:16:0f:04:0b:e2:88:e5:88:
a9:ea:61:c8:61:f7:f5:07:66:fc:01:b8:8a:79:2b:da:10:38:
8c:0b:af:42:bb:d4:4d:49:79:2b:9e:18:a5:4e:1a:40:7a:6c:
62:2c:28:f4:f3:36:fb:26:3c:de:0e:b3:df:3d:89:eb:8c:e3:
ff:95:6f:e2:a1:db:59:41:8a:77:85:1d:bc:bd:d1:de:69:38:
50:ed:b9:19:a8:8f:03:ba:85:60:63:aa:81:95:0e:fb:ec:74:
ec:f7:96:67:dd:a4:43:9c:28:ed:7e:8a:2c:25:7d:99:37:1c:
9a:9e:e6:e1:eb:fb:35:55:f1:b7:02:31:a0:b1:6b:10:0b:33:
78:ec:6b:f6:98:c3:ed:c7:69:9d:01:74:bb:f0:17:be:2c:b7:
e4:55:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:58 2024 by rpki-client on console-ams.rpki-client.org