Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/6W57Gm3E503yiswK8fH-KYSuBVc.roa
File: 6W57Gm3E503yiswK8fH-KYSuBVc.roa (raw, json)
Hash identifier: GqG/T2W/e/thmlF9CSB5Ux9+PC3Gyra+9iMABFL2WcI=
Subject key identifier: E9:6E:7B:1A:6D:C4:E7:4D:F2:8A:CC:0A:F1:F1:FE:29:84:AE:05:57
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 094B2FF1
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/6W57Gm3E503yiswK8fH-KYSuBVc.roa
Signing time: Sat 01 Jan 2022 10:01:49 +0000
ROA not before: Sat 01 Jan 2022 10:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42174
IP address blocks: 91.234.226.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155922417 (0x94b2ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Jan 1 10:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e96e7b1a6dc4e74df28acc0af1f1fe2984ae0557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:a8:a2:93:0b:27:96:17:5e:68:b1:d4:e2:
aa:17:cb:d3:ca:0b:a1:02:b3:8c:25:64:72:9a:b7:
0a:cd:84:6e:de:5c:03:02:4b:ef:a3:68:7b:b1:dc:
84:02:43:5c:a0:a8:03:87:63:6a:b1:05:07:f7:ac:
6f:28:7f:64:96:60:9c:fe:f2:24:7d:12:07:89:ad:
06:e8:c8:e7:19:93:44:00:76:ac:fc:41:50:cc:4c:
33:8f:6e:4c:8e:87:29:7c:eb:cc:bb:8f:65:21:f6:
f9:36:f3:ca:8d:de:09:42:8a:0e:8c:f5:71:d6:71:
15:74:c7:af:41:39:2a:41:0c:81:07:45:ad:82:c4:
b7:9c:5e:08:2b:f6:a7:1a:2b:a1:6c:eb:b7:91:b3:
c1:54:01:3a:3d:90:71:50:ae:62:b3:81:d9:c0:c7:
41:c5:e8:f8:f1:d6:df:52:b6:18:3d:a0:46:04:96:
3d:eb:09:e7:88:bc:f5:0a:5d:6d:78:97:2b:a1:16:
c7:96:c0:60:42:e7:d5:4b:27:cf:76:86:08:d9:ea:
06:96:63:89:64:da:95:e5:62:02:cc:b2:74:79:9f:
9f:df:0d:f4:0f:a7:e7:6a:58:df:23:04:7c:9b:22:
af:b4:e9:89:46:13:c0:0e:87:23:17:ac:cd:b8:b9:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:7B:1A:6D:C4:E7:4D:F2:8A:CC:0A:F1:F1:FE:29:84:AE:05:57
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/6W57Gm3E503yiswK8fH-KYSuBVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.226.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:90:3f:3b:e7:0f:6f:9b:75:a0:60:40:62:da:09:ba:66:68:
6d:0b:6f:2d:3c:e0:d1:4e:a4:c6:c8:a6:3e:c9:8d:de:9f:43:
a2:ab:a3:7f:68:b4:21:64:f6:55:7c:3a:e1:aa:b7:67:d2:17:
bc:90:68:49:c0:98:05:fa:3d:1d:c5:7d:1e:41:dc:5f:49:95:
5f:eb:2a:2e:1c:d9:8f:d0:8b:87:09:25:1a:50:e0:13:32:64:
52:b8:3d:8e:3e:56:3a:3e:e5:51:80:18:55:8f:48:3c:13:01:
0c:ac:26:e1:92:33:e3:b2:6a:d6:58:4f:6a:bf:14:98:87:bf:
17:98:05:e5:52:3d:88:4e:1c:5a:44:22:8a:d6:9e:9d:e3:d6:
7c:80:4f:c8:16:ca:74:ee:18:37:5e:e1:37:be:9d:9e:fc:cf:
2e:5b:4b:a0:d6:73:58:18:ec:9c:bc:20:66:69:b7:43:c6:5d:
01:7f:1e:ab:22:b3:88:0d:39:bc:07:09:ec:c4:34:69:30:e6:
40:90:59:fc:71:3b:c1:0e:88:f7:00:72:db:6f:42:51:8b:4e:
52:6a:6a:92:48:b1:f8:64:24:e1:8c:74:b2:80:c8:69:74:7d:
8e:24:16:20:ce:0d:13:51:be:48:ad:da:1c:9e:53:11:04:fa:
f3:83:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:04 2024 by rpki-client on console-fra.rpki-client.org