Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/3v14o91wVJDGSy5cxDN6wVDrOWk.roa
File: 3v14o91wVJDGSy5cxDN6wVDrOWk.roa (raw, json)
Hash identifier: q9SHJDQ7/18QOe5WGW7U4MS80WtQcbhnPoIX4NDdwRE=
Subject key identifier: DE:FD:78:A3:DD:70:54:90:C6:4B:2E:5C:C4:33:7A:C1:50:EB:39:69
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 03546E73
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/3v14o91wVJDGSy5cxDN6wVDrOWk.roa
Signing time: Sat 01 Jan 2022 11:56:53 +0000
ROA not before: Sat 01 Jan 2022 11:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.209.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55864947 (0x3546e73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jan 1 11:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=defd78a3dd705490c64b2e5cc4337ac150eb3969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:68:c3:95:e0:28:22:1c:de:a9:51:92:7e:
5e:82:2e:66:7c:7f:73:67:71:77:ea:06:8c:03:dd:
7f:da:06:dd:9e:60:4a:56:49:20:66:d9:90:ab:e6:
be:c8:7c:0d:5b:6a:c9:a9:ee:94:39:4d:64:51:f6:
84:e5:bb:f1:b5:11:ad:a9:35:6d:68:84:ea:ad:39:
b4:66:86:f2:ed:e7:a6:56:16:11:06:97:9b:5b:ce:
a3:3d:4d:26:48:1b:9a:90:a6:7b:21:f1:70:4f:e0:
19:c6:15:86:7a:5a:36:29:ea:ec:ee:8a:36:e5:76:
64:3e:37:96:a8:a2:8c:7a:f3:3e:69:ab:b6:42:47:
73:15:9b:b7:fd:23:49:e2:09:fe:f0:d9:c6:ec:c5:
0f:ae:9b:fb:c8:04:55:8d:e3:00:8e:7f:f1:35:0e:
b4:f1:cf:9f:50:e0:9f:e0:34:96:5e:8a:41:72:03:
44:66:f5:63:62:32:ba:6a:e9:7f:7d:78:5e:d4:6c:
88:59:fb:1a:76:ce:2a:95:7a:60:af:5f:22:84:7e:
78:67:aa:fd:4d:89:fe:75:8c:4b:3b:c0:16:59:77:
12:96:71:ab:46:20:42:bc:e3:35:20:58:12:97:ce:
b1:4f:32:4e:45:70:da:50:7b:05:3b:1c:e1:92:f4:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:78:A3:DD:70:54:90:C6:4B:2E:5C:C4:33:7A:C1:50:EB:39:69
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/3v14o91wVJDGSy5cxDN6wVDrOWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.81.0/24
Signature Algorithm: sha256WithRSAEncryption
16:49:48:52:57:98:a3:b8:53:fb:75:9e:f8:81:ea:75:dc:53:
75:6d:72:4f:a2:6f:c1:8d:95:51:89:19:c7:1f:cd:29:58:e2:
c3:d8:c6:ce:88:c2:4f:d1:03:9d:23:27:f2:de:44:bd:85:b0:
49:21:a8:4f:84:8b:73:86:f6:56:c3:0d:b2:bb:50:ad:8a:d3:
b3:bd:a6:d9:96:30:2b:7c:3f:7b:86:a8:63:1d:7d:5e:cd:18:
7a:c7:47:cb:8f:72:4c:9f:9a:f4:e6:24:4f:ee:87:b3:d7:de:
ab:ec:6b:30:3f:67:b3:4e:ff:9b:b3:10:06:bc:93:f4:9f:15:
d9:51:13:f1:03:6a:eb:28:62:6e:50:6c:ed:c6:2f:34:88:e0:
b7:9d:5c:a3:88:14:dc:a6:75:7f:74:bc:2a:64:15:ff:cd:f2:
77:ed:de:aa:88:c6:73:01:ee:b7:b0:48:38:15:67:db:04:cf:
04:4a:6e:1f:89:1c:ac:b4:fa:64:db:40:e8:20:99:b7:27:de:
86:6b:60:7e:c3:c3:3d:ce:fa:a8:a5:e0:46:cf:95:34:93:44:
05:2d:7f:80:e8:49:7a:f1:e8:65:ba:d3:cb:3d:2c:2a:81:d0:
c9:87:fa:9f:ce:a7:97:77:0d:74:35:b6:3b:73:a9:ab:ee:1e:
f7:b4:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:17 2024 by rpki-client on console-ams.rpki-client.org