Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/1-7WVGuTdcTzuItx3Tz8KEF9epCc.roa
File: 1-7WVGuTdcTzuItx3Tz8KEF9epCc.roa (raw, json)
Hash identifier: q4o/WGxatQwmbFIj3uoSjxfMM+vZe4YnA1vc7CrqI14=
Subject key identifier: FB:B5:95:1A:E4:DD:71:3C:EE:22:DC:77:4F:3F:0A:10:5F:5E:A4:27
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 38504E30
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/1-7WVGuTdcTzuItx3Tz8KEF9epCc.roa
Signing time: Sat 01 Jan 2022 10:00:49 +0000
ROA not before: Sat 01 Jan 2022 10:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31742
IP address blocks: 91.208.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944786992 (0x38504e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 1 10:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbb5951ae4dd713cee22dc774f3f0a105f5ea427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:8b:c6:fd:6d:0b:5e:f7:35:21:aa:2c:0a:
f7:42:15:ba:29:fa:e3:12:94:d1:33:c6:bf:c8:0f:
01:de:a4:09:ff:5d:ef:6e:80:11:22:b2:e9:49:3c:
03:fc:fb:68:09:4f:81:af:e7:32:45:fe:73:7c:86:
a4:e1:51:34:33:cf:2d:08:7b:cf:ac:47:2f:7e:a6:
be:72:4b:98:9b:fc:36:3d:25:08:5e:07:46:4f:3d:
94:2c:90:6c:76:15:d7:aa:b9:1b:b3:7d:b4:89:60:
05:cf:ab:8f:53:d2:e8:aa:f6:5e:4d:47:d6:97:59:
73:35:f8:a5:6b:a5:7a:f9:ed:e6:48:2c:33:e2:8e:
c8:6a:ea:e9:cc:67:e2:e7:0b:cc:07:cf:e7:95:5c:
b3:64:f8:5f:1a:8b:3e:0c:60:06:6d:50:af:c0:87:
88:18:08:c4:35:e0:1c:4e:2e:b3:22:55:18:69:6b:
74:45:6a:b2:08:93:93:7b:83:40:e4:1f:ba:5c:38:
cd:a6:4e:54:0f:d6:4f:4f:fd:5b:c6:4c:f3:29:88:
17:96:e9:2a:d6:46:07:a8:88:fc:01:03:77:44:dd:
76:28:a5:ae:70:6e:47:4a:87:10:36:a7:42:9e:53:
72:40:1b:60:35:01:b4:bf:40:90:20:ad:cb:89:8a:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:95:1A:E4:DD:71:3C:EE:22:DC:77:4F:3F:0A:10:5F:5E:A4:27
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/1-7WVGuTdcTzuItx3Tz8KEF9epCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
80:12:3f:07:39:44:67:e7:5e:ad:69:83:08:7e:a3:9e:e8:ee:
47:74:00:d0:9a:6e:f3:6b:ef:f2:a2:ef:23:a6:ec:de:68:80:
27:ed:d2:53:06:2a:3f:a0:5c:67:c7:70:85:0c:43:f6:11:32:
d1:e2:7c:65:af:0f:96:9d:33:53:13:50:42:2a:a8:c6:59:66:
7e:a6:88:47:da:57:f6:a6:eb:42:52:f7:3b:0a:76:a7:65:e2:
5c:d8:04:98:e9:d4:12:cf:26:91:64:cd:0d:09:59:93:ae:c4:
17:21:83:10:ef:7a:35:26:80:16:12:c9:51:6d:00:3c:18:3b:
94:db:cb:52:6b:50:5e:56:4b:d3:cf:0e:43:16:79:1a:9f:0b:
00:88:07:47:b4:71:d6:a6:f6:b1:a5:b6:ec:56:35:27:7e:75:
30:e0:7a:56:9c:16:1d:e9:d9:54:93:e8:38:9f:11:f8:f1:4f:
98:da:18:29:bc:17:8c:df:5c:22:df:98:45:4b:34:21:53:7d:
e0:f0:81:8d:ce:85:54:85:b3:ca:77:c7:fb:10:7a:02:da:f8:
90:37:17:1a:fc:34:e8:82:db:26:6b:27:b2:59:8f:ac:45:38:
c8:b2:9f:31:3a:2d:59:4a:14:51:d0:48:d5:ff:7d:e4:5b:b1:
ae:c7:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org