Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/iOGtGSMFv6c3FP2MNOlNNRJHL04.roa
File: iOGtGSMFv6c3FP2MNOlNNRJHL04.roa (raw, json)
Hash identifier: A3rCxBW9rfvrlttoQKP5SyHZYSyZSqYplP6nhYKwfIU=
Subject key identifier: 88:E1:AD:19:23:05:BF:A7:37:14:FD:8C:34:E9:4D:35:12:47:2F:4E
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 01ECB49E
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/iOGtGSMFv6c3FP2MNOlNNRJHL04.roa
Signing time: Sat 01 Jan 2022 02:50:49 +0000
ROA not before: Sat 01 Jan 2022 02:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48593
IP address blocks: 91.209.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32289950 (0x1ecb49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Jan 1 02:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88e1ad192305bfa73714fd8c34e94d3512472f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:79:18:62:1f:a0:43:95:96:44:e2:9f:34:
7d:a9:47:bc:3d:50:c1:01:13:91:0e:18:2a:d1:19:
0a:12:bd:2a:82:de:cf:ed:01:9c:a7:cb:a0:d6:a0:
ec:6c:45:6a:cd:d5:41:21:f3:47:0f:17:b9:fc:da:
24:7c:81:32:12:a6:95:4d:09:b0:fd:1f:39:16:80:
f1:f1:15:1c:05:b0:3b:83:61:07:fd:97:2e:73:21:
e4:84:df:44:36:f1:64:8c:64:4e:f3:c3:00:38:26:
a6:ab:f6:f2:41:38:12:d6:f9:80:ee:84:79:4c:8c:
4b:e3:ec:e7:de:f3:c8:d5:1d:80:5b:87:34:15:5a:
98:7a:bc:fd:e1:da:c7:8d:e8:4b:30:2f:30:a0:bb:
ab:e4:02:0e:83:74:ff:3b:61:09:87:dd:a6:68:dc:
6f:96:7b:5f:73:0d:b9:c1:af:b1:48:73:da:b9:dc:
67:85:fc:4a:39:a7:5b:f4:5d:79:6f:41:cd:0b:99:
a3:29:f0:5a:df:b1:45:03:da:fc:d6:bb:eb:6b:c5:
50:f3:e6:60:81:7d:9e:e8:a3:ea:e5:05:9c:00:09:
a6:a3:28:fa:36:0d:72:8c:38:b1:b6:08:b5:59:f1:
54:dc:8c:ab:a0:54:e0:e1:3a:6f:87:7a:28:fb:04:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:AD:19:23:05:BF:A7:37:14:FD:8C:34:E9:4D:35:12:47:2F:4E
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/iOGtGSMFv6c3FP2MNOlNNRJHL04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:50:d9:78:f6:85:db:c4:95:b6:54:fe:7d:ae:52:0a:06:86:
b4:b9:08:89:9a:91:0a:64:c5:8b:6e:e6:80:d0:0c:4f:2c:8c:
74:42:58:85:c8:64:e6:be:9b:96:4e:2d:e5:e5:91:97:ff:b3:
61:11:06:f8:45:87:6e:2c:bb:e3:34:78:40:58:1f:ff:78:5a:
f6:fa:58:43:21:fd:82:7f:2a:aa:69:de:3a:de:f5:ed:65:bb:
51:c1:77:f7:b3:fd:12:0a:f6:a0:25:4a:b6:2b:80:d7:07:14:
4c:51:bd:ae:98:a1:ee:78:7b:45:81:d1:87:6f:97:32:81:e9:
10:f3:12:a7:9b:d5:0c:b9:cc:a6:8c:fb:82:9e:22:c7:01:95:
7e:fb:f2:40:80:52:59:35:b8:15:b2:b3:5d:de:f8:96:5f:6d:
fb:1f:5b:ce:5b:ae:35:d1:d7:a5:f7:d7:cb:40:91:81:34:7e:
bb:8a:b7:e9:b4:9a:76:c4:a9:7d:7b:59:62:bc:2b:d2:c2:ee:
7f:7a:8b:a2:b1:37:13:fd:5c:48:98:01:f5:ac:35:9c:c6:29:
43:3d:da:f7:18:b1:2f:92:5d:49:ac:fb:b3:db:72:31:91:d7:
2e:8f:03:37:0e:36:64:f2:5f:db:68:04:3a:85:2b:a2:fa:2c:
81:71:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:26 2024 by rpki-client on console-fra.rpki-client.org