Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/rumfQht_65zbA7hX4XD0XAxu5s0.roa
File: rumfQht_65zbA7hX4XD0XAxu5s0.roa (raw, json)
Hash identifier: 1d88D7asEtL1XymsfOV6Xuzs+H4SspXNrQTS8qxCuiA=
Subject key identifier: AE:E9:9F:42:1B:7F:EB:9C:DB:03:B8:57:E1:70:F4:5C:0C:6E:E6:CD
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 01856288A9442B3C69E80A8940DA78BC4F53
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/rumfQht_65zbA7hX4XD0XAxu5s0.roa
Signing time: Fri 30 Dec 2022 10:16:41 +0000
ROA not before: Fri 30 Dec 2022 10:16:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21094
IP address blocks: 91.212.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:88:a9:44:2b:3c:69:e8:0a:89:40:da:78:bc:4f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Dec 30 10:16:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aee99f421b7feb9cdb03b857e170f45c0c6ee6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:95:be:c3:cd:a1:03:a5:b5:83:a7:10:b0:
d2:bc:7a:9e:42:95:27:3e:29:c8:6b:be:e6:20:1e:
8d:7d:2c:ea:c6:2a:3a:7e:95:e0:00:5d:70:fe:5a:
5e:bd:82:d4:d7:2a:61:77:88:36:20:a5:61:13:b6:
47:48:24:f9:7d:ed:c7:2b:a5:33:5a:58:32:51:ae:
43:c1:ec:43:fe:75:ac:75:26:1d:81:57:11:2e:2c:
0b:8c:0d:7b:25:ba:f6:41:d1:e3:8a:85:f5:92:b9:
5b:bf:b8:0e:38:83:27:c8:63:d4:f7:9a:a2:73:6b:
b3:8c:53:28:84:82:63:8b:8a:8c:f4:ed:f4:2f:d5:
ba:e6:ac:fc:3f:f2:48:3e:ef:ff:32:a4:55:c3:c5:
8f:96:94:a5:e8:89:fb:a6:40:29:a2:2c:99:04:fb:
1c:a4:a9:e7:78:e5:23:dc:bb:2e:fe:5d:2b:d2:20:
46:4d:2f:ed:d6:db:79:0a:4f:ab:03:af:a9:51:26:
a0:a3:10:55:6a:a2:ef:f6:c9:fb:7f:18:04:7f:ff:
16:d2:47:be:e5:74:31:b5:38:38:36:66:50:6d:5a:
d1:f0:e0:d4:f7:37:2a:19:f2:3e:f0:76:66:2d:c1:
94:22:de:8e:3e:f4:c9:38:db:32:49:5f:85:80:81:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:9F:42:1B:7F:EB:9C:DB:03:B8:57:E1:70:F4:5C:0C:6E:E6:CD
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/rumfQht_65zbA7hX4XD0XAxu5s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.202.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d4:26:e4:c7:39:19:96:c6:00:a3:db:9e:e5:5f:1f:d6:37:
55:06:3f:14:b6:d3:df:1c:2d:54:a0:40:33:fb:a3:94:70:5f:
9c:cd:60:16:c2:f7:5f:ee:65:17:48:77:62:ac:22:43:57:56:
2d:ae:a9:99:73:10:35:44:da:3b:80:4d:77:72:c8:7b:f8:2e:
49:d5:e1:16:ad:25:44:48:03:1f:36:55:9b:c2:e2:33:a3:66:
65:a4:88:35:96:cc:b9:42:98:59:7a:e2:4e:4d:22:ad:de:21:
9f:af:92:2c:57:9d:b5:c2:2b:6c:86:5a:6f:0e:59:63:05:70:
f0:b0:23:2e:91:23:f9:6e:79:dc:ab:c3:ea:e1:94:88:70:ba:
69:ff:1a:49:a2:b2:a3:cc:27:e5:2d:68:42:d6:8f:c1:1f:49:
70:9d:b8:09:d6:9c:aa:f2:d5:d5:38:fd:82:4f:88:9c:d3:a5:
81:b9:21:54:2c:8e:88:e5:2a:ca:b0:65:74:7f:f6:08:14:e2:
c2:96:5b:3a:5f:ed:09:07:20:3d:0b:78:47:32:41:33:8a:f9:
e8:73:f3:3b:5a:01:df:ee:b0:dd:35:aa:98:51:68:fc:41:9c:
d4:b2:53:fe:84:31:ba:87:11:71:25:b3:44:26:84:e1:c9:34:
3f:ba:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:48 2024 by rpki-client on console-ams.rpki-client.org