Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/iVCWukC59VKce1H771-FqAANZbM.roa
File: iVCWukC59VKce1H771-FqAANZbM.roa (raw, json)
Hash identifier: /N13+T/osMwdXd6y+hIpT+KrbVOXW0Wdf5KJuUqFj54=
Subject key identifier: 89:50:96:BA:40:B9:F5:52:9C:7B:51:FB:EF:5F:85:A8:00:0D:65:B3
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 33250475
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/iVCWukC59VKce1H771-FqAANZbM.roa
Signing time: Sat 01 Jan 2022 10:59:09 +0000
ROA not before: Sat 01 Jan 2022 10:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197148
IP address blocks: 91.83.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858063989 (0x33250475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=895096ba40b9f5529c7b51fbef5f85a8000d65b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:cf:e0:dd:5d:22:97:39:a5:8f:69:72:d3:
4d:b1:2a:58:b1:0b:37:7d:fa:b2:fa:79:ee:69:4c:
82:ef:0a:da:dc:b9:4b:dd:9e:63:6b:fe:22:07:93:
4b:cd:cc:be:51:e5:26:ae:d5:b1:6f:85:d1:66:e3:
87:2c:1e:be:51:c1:06:bf:e8:a5:8e:b3:ea:df:8c:
4d:37:e6:10:50:2e:f8:d7:aa:3b:94:d4:cc:1b:5e:
26:d9:f4:2f:48:92:f0:d7:24:5d:7d:30:43:8b:ac:
ec:f4:05:74:db:65:af:57:79:de:7f:de:a1:ad:16:
81:e0:9b:3d:b5:5c:b9:e3:05:58:ce:a6:39:ed:8f:
87:b3:13:4f:68:f2:61:bf:47:7f:94:64:94:92:10:
5f:e0:66:af:74:78:80:0b:a7:cc:bc:16:4a:c7:09:
02:34:17:dd:a7:68:4c:ad:79:83:2d:21:0a:82:62:
5b:24:39:e2:7b:bd:be:9d:cc:95:2f:ad:3e:e2:90:
aa:42:0f:a3:cf:6b:0b:d4:6c:ed:a8:cd:3b:6d:40:
73:4b:2d:3e:ac:e6:4c:31:80:ca:8a:f3:5a:b2:7e:
0b:52:ee:70:98:46:e1:be:46:61:bb:59:40:9f:6f:
69:fe:d1:75:71:3a:3e:fd:0b:4f:5f:e4:21:ab:39:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:96:BA:40:B9:F5:52:9C:7B:51:FB:EF:5F:85:A8:00:0D:65:B3
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/iVCWukC59VKce1H771-FqAANZbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c4:3c:bb:2e:20:9e:ba:a8:b8:9f:c7:fb:8a:83:04:d8:99:
74:9f:d4:32:28:a6:fe:6d:2d:a8:09:60:ac:0e:12:e7:54:03:
9c:c9:2e:c1:42:07:3d:3f:4b:41:0c:83:aa:d9:e7:51:3d:92:
35:2d:f0:59:30:b2:46:6a:82:64:59:3a:a5:9e:be:db:d5:bb:
8c:d9:4b:02:cc:95:b6:1e:ae:55:e9:9d:5a:be:f4:89:a6:12:
8e:ae:60:0c:69:11:63:97:0b:1f:76:dc:a1:84:9b:a8:d1:e9:
c8:a1:cd:c3:90:cd:1c:aa:03:3b:8c:21:a1:cd:87:d3:0f:16:
46:85:f7:c4:67:b0:17:98:3b:5e:13:c6:68:a0:c8:ee:46:6b:
5d:17:a2:ef:66:19:aa:00:89:02:30:fb:12:a8:d5:3e:04:55:
70:15:94:ad:06:b7:38:92:ce:b0:01:d5:b1:2f:4a:c2:8f:85:
1b:6b:55:35:af:8d:55:d1:a1:5d:82:5c:46:25:54:b3:3f:6e:
ee:5c:4e:21:2b:0b:f6:66:dd:04:72:8d:3f:06:48:65:f5:0b:
3f:8e:e6:2b:42:ae:2e:c2:41:4d:7e:7e:18:72:a3:7c:5f:63:
3c:c1:a5:92:fd:89:a8:88:2d:64:da:22:92:06:e5:c4:e7:f8:
a3:7e:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:44 2025 by rpki-client