Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6gmHcMM7sRjDsfFdtZabjfabNwo.roa
File: 6gmHcMM7sRjDsfFdtZabjfabNwo.roa (raw, json)
Hash identifier: Tw/KNDm2GXaV57LsupE5n+Bslt6niEh65TPyP6cW38Y=
Subject key identifier: EA:09:87:70:C3:3B:B1:18:C3:B1:F1:5D:B5:96:9B:8D:F6:9B:37:0A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1391A2F6
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6gmHcMM7sRjDsfFdtZabjfabNwo.roa
Signing time: Sat 01 Jan 2022 05:56:24 +0000
ROA not before: Sat 01 Jan 2022 05:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207177
IP address blocks: 91.242.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328311542 (0x1391a2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea098770c33bb118c3b1f15db5969b8df69b370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:91:3c:c9:a2:40:15:42:bc:4b:a6:4a:8e:
1e:7b:a2:4a:26:b1:bb:5d:fa:dc:ac:fc:45:5b:09:
1a:3f:df:f6:13:c1:86:32:e6:42:f7:13:cd:dd:cc:
fa:3c:e3:e2:1e:d5:5f:6d:52:d0:27:b7:84:51:62:
7f:47:91:98:d5:de:63:32:ef:9e:13:fb:31:46:49:
99:48:49:b3:bc:64:18:a5:53:a4:4e:1e:46:cc:b9:
32:37:9f:c9:00:57:5b:56:46:0b:0a:f2:e9:8a:84:
5b:5c:64:73:da:6e:ec:27:32:b1:d0:29:b9:04:cc:
07:a3:8f:64:0d:7a:59:6a:4f:f2:97:94:8c:93:ec:
d5:16:5e:ad:9e:6b:ce:1c:67:f8:ff:d8:eb:91:fe:
84:47:1f:6b:41:ab:9a:55:54:31:97:d4:60:04:53:
2f:2e:65:8d:e8:27:65:94:24:ea:c2:18:45:dc:62:
a0:e6:58:ee:2a:32:79:f0:87:f8:f1:86:c6:86:92:
00:42:09:4c:da:95:0b:03:88:6a:87:bc:36:0f:f5:
85:60:0a:d4:ee:13:35:2d:7b:4c:50:ba:98:91:4f:
6e:de:c0:6e:6a:76:ca:e9:4c:0e:7a:de:0a:29:16:
b7:18:fb:2d:8e:ef:c6:60:08:23:c5:50:ab:2d:c7:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:87:70:C3:3B:B1:18:C3:B1:F1:5D:B5:96:9B:8D:F6:9B:37:0A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6gmHcMM7sRjDsfFdtZabjfabNwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e0:2c:11:54:59:e7:9d:a7:1e:f9:b0:6c:30:bd:2b:7c:31:
a3:da:fc:c1:9b:81:9f:3d:f1:c6:75:b8:18:59:4e:c9:e3:44:
40:77:73:28:f8:98:a2:97:ec:eb:55:d2:aa:a7:65:0e:21:09:
1d:52:d3:b8:e7:f2:bf:22:63:e8:34:b0:7f:51:ce:5b:72:68:
07:55:6f:ff:ec:b0:e3:ef:c1:fb:6a:ee:fc:52:d7:2e:20:95:
64:73:09:a0:47:f8:a9:1d:9e:f6:b9:69:3a:f5:32:b5:8e:33:
16:64:57:36:a3:f1:09:02:30:a1:7d:1d:1b:57:6f:37:d3:e2:
72:b2:3d:3b:b7:0f:53:a6:0b:50:83:0e:99:37:4c:3d:05:f5:
01:a8:23:29:5d:a7:f6:65:84:3b:ed:c3:5c:65:23:55:c3:61:
54:51:fb:8a:ea:49:a7:4d:70:82:ae:25:cd:99:99:67:c2:01:
15:f7:2b:5c:8d:83:dd:5e:90:52:13:3c:d3:35:31:37:93:5c:
ba:47:43:e5:a2:21:95:cc:ab:e5:7e:53:67:bf:ae:df:32:be:
ab:47:dc:09:85:1a:0f:a2:7b:b7:67:25:a7:93:f2:36:7d:d2:
98:f4:31:81:74:cd:1b:8c:03:8f:d1:21:16:23:24:35:af:96:
1b:43:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org