Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/70RQ36PW6q2yDSpje0on_579rKQ.roa
File: 70RQ36PW6q2yDSpje0on_579rKQ.roa (raw, json)
Hash identifier: B7TTW9qWs1CbLGQzdU3dPl03U8S4D3jNNGQ+jr5d50g=
Subject key identifier: EF:44:50:DF:A3:D6:EA:AD:B2:0D:2A:63:7B:4A:27:FF:9E:FD:AC:A4
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 02D443
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/70RQ36PW6q2yDSpje0on_579rKQ.roa
Signing time: Wed 18 May 2022 13:20:17 +0000
ROA not before: Wed 18 May 2022 13:20:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207114
IP address blocks: 91.207.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185411 (0x2d443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: May 18 13:20:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef4450dfa3d6eaadb20d2a637b4a27ff9efdaca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:da:a9:7a:f6:3d:9e:7e:81:b4:34:ef:a4:
33:27:b8:9f:ea:d4:16:65:7a:6b:48:ea:7d:04:8c:
84:03:0b:32:d4:2d:e9:03:77:7a:55:73:68:62:f1:
02:1b:b8:a8:cd:df:f1:01:1f:05:8c:f4:aa:0a:d9:
86:1e:b7:ed:b8:f7:0a:ff:d6:ce:b8:ab:1f:34:b7:
47:50:b9:d7:20:bd:95:93:84:43:4d:aa:c2:6d:8d:
10:ea:97:fd:5b:b9:5f:b9:b2:7a:25:fe:f9:c2:d9:
7c:3c:72:99:c7:e1:88:b4:b8:41:90:8c:28:4c:39:
30:5e:6d:d7:cc:72:43:ab:66:af:b2:21:a6:d5:e3:
2e:38:60:8a:cd:fc:a7:97:c6:20:a5:37:59:92:ee:
dc:0d:3f:a6:2a:9d:cc:50:2d:9d:6a:07:e7:ed:f0:
50:7e:ba:83:5d:03:f7:a8:c8:91:86:e1:52:5f:bb:
e7:f3:32:96:5e:4a:04:e6:be:ea:f1:bb:93:ef:be:
5c:94:97:c2:94:1f:80:79:61:e8:d1:ba:be:2d:f4:
15:16:a6:83:00:6d:c7:23:c4:7c:16:6a:2a:8a:6c:
3d:70:5d:fb:3b:7c:18:fb:8e:23:ab:70:e1:e0:b3:
19:37:87:27:47:5b:df:f8:96:ed:ab:9c:e2:a8:68:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:44:50:DF:A3:D6:EA:AD:B2:0D:2A:63:7B:4A:27:FF:9E:FD:AC:A4
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/70RQ36PW6q2yDSpje0on_579rKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9a:bd:ec:e4:1c:e0:68:b7:28:8d:5f:aa:47:c3:4c:71:3f:
b1:82:16:54:64:76:3e:52:91:db:ac:6b:d9:39:0e:8a:0e:8e:
36:22:74:fb:14:f0:4f:3f:ff:2b:89:32:24:04:39:cb:51:9a:
b7:e1:a3:ef:5e:bd:bf:b2:4e:16:9d:4a:f0:e5:2a:ce:5a:73:
08:8b:c3:79:30:4b:b0:46:4f:92:71:32:aa:fa:ff:be:03:8d:
15:13:65:16:84:be:42:50:4f:31:69:a0:0e:ef:01:fa:9b:a4:
b0:27:c9:64:c2:84:63:de:ab:f2:18:b4:bd:e2:83:6a:71:d6:
e5:3f:bc:8d:26:38:50:8a:8d:22:0d:9d:69:54:b9:a3:d1:ca:
0e:69:9e:b6:ad:23:2c:d3:e5:16:6d:66:fc:99:d3:ec:0a:f0:
28:76:6a:5a:90:01:3c:81:2f:b4:fc:f3:e8:b1:a7:b5:fd:04:
b8:ac:93:af:e6:33:02:f2:1c:b7:9a:78:0d:53:a8:f9:c5:ff:
f2:f6:4e:00:5f:72:1e:4c:05:d5:1d:51:65:8e:33:16:2b:53:
a4:dc:31:56:7d:f0:ba:10:ba:74:82:f5:cd:01:b6:0b:e2:7d:
81:99:1b:08:e4:39:e0:55:99:03:5a:15:f6:30:06:2e:eb:36:
2a:74:b3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org