Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/Rq1biN8N-QCYn0_ea2yZNI9FlhQ.roa
File: Rq1biN8N-QCYn0_ea2yZNI9FlhQ.roa (raw, json)
Hash identifier: Na5TIq9km/DZ8hYbXZIyxuJEsFizht3seIrqff4yzW8=
Subject key identifier: 46:AD:5B:88:DF:0D:F9:00:98:9F:4F:DE:6B:6C:99:34:8F:45:96:14
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 0D69CE74
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/Rq1biN8N-QCYn0_ea2yZNI9FlhQ.roa
Signing time: Sat 01 Jan 2022 07:58:47 +0000
ROA not before: Sat 01 Jan 2022 07:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57461
IP address blocks: 91.232.73.0/24 maxlen: 24
91.232.72.0/22 maxlen: 22
91.232.72.0/24 maxlen: 24
91.232.75.0/24 maxlen: 24
91.232.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225037940 (0xd69ce74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jan 1 07:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46ad5b88df0df900989f4fde6b6c99348f459614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:fd:f3:02:ad:ec:ae:21:f4:94:0b:01:eb:
6b:3f:2d:05:7b:9d:ee:d9:15:65:ae:d8:af:0a:db:
f8:93:1d:36:da:bb:95:37:f3:25:e0:bf:1b:10:29:
ac:80:2a:8e:a4:23:d6:d9:af:32:27:15:5b:b1:bc:
b6:8a:c9:b0:c7:a9:91:71:5d:ed:f5:24:07:ef:4c:
0a:48:15:6b:d9:24:ed:ce:7e:ef:a7:72:b7:d9:c1:
35:0a:c0:09:b0:cd:41:84:c6:bd:0d:dd:84:f3:b4:
e1:5d:50:74:b2:2a:1d:3f:b4:e1:98:98:3e:8c:2a:
08:dd:da:54:25:58:df:7c:50:93:02:c9:46:a6:78:
bb:7d:ab:b5:f0:9f:a2:1e:18:2e:1c:af:1b:0c:c8:
31:e5:3c:ec:3f:c5:33:e9:0e:aa:ba:70:da:f5:9a:
cb:e0:46:0a:34:03:ae:ac:c7:dd:59:51:6a:5b:b0:
d1:ee:a8:f2:04:26:03:b9:18:b2:5a:41:1b:cf:67:
41:54:8c:d2:b4:c3:c3:07:7d:3f:8d:08:3f:ea:5f:
90:1f:36:bd:c6:30:6a:76:48:45:09:f9:61:5f:7c:
57:1b:84:ee:c9:21:a4:e0:69:ad:fc:33:6f:b9:15:
ad:5b:27:02:bf:61:88:ec:20:cf:25:e8:a6:ae:ac:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AD:5B:88:DF:0D:F9:00:98:9F:4F:DE:6B:6C:99:34:8F:45:96:14
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/Rq1biN8N-QCYn0_ea2yZNI9FlhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c2:95:46:40:5c:2e:e4:51:bf:61:5b:6c:e8:cd:6c:fe:03:
68:26:42:f0:9b:ab:f0:b1:0f:2f:88:03:22:bb:ac:fe:b3:44:
2c:a5:ab:dd:2b:c1:4a:a1:84:46:92:56:a0:be:b2:f0:d4:69:
7c:7f:38:75:31:34:8e:2a:d3:33:27:13:51:f1:a7:8c:11:5f:
ef:74:c1:53:1a:0a:06:83:67:4d:7b:22:b8:85:aa:f9:98:0a:
8f:5c:fa:36:3a:b3:0e:ce:08:1b:2b:2a:4b:60:4a:c3:c3:ae:
33:29:c3:ff:7a:44:cd:9a:1b:b3:6a:61:db:43:99:0e:e4:4a:
73:a7:c1:63:cf:96:a4:e8:0c:ba:bb:6a:2c:79:b4:a1:48:30:
2c:a1:a9:0c:27:de:79:fb:24:39:b0:6a:f1:8a:c3:3b:38:e5:
28:ee:fb:ee:75:83:ed:20:69:57:1f:76:67:8d:b4:60:ab:d8:
19:56:8a:28:44:89:19:54:29:f1:09:4c:1d:d1:b6:af:ee:74:
44:bd:a6:fb:c0:2c:95:db:3b:37:d0:2e:c1:e2:c1:8b:48:9e:
b4:b4:11:62:eb:01:b5:0e:ac:8b:a5:5d:01:3a:ab:a5:46:7c:
fc:9a:6a:14:b1:01:9e:51:29:45:63:20:4b:1a:45:83:e7:61:
a8:60:3c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:15 2024 by rpki-client on console-ams.rpki-client.org