Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/0KrigKR87hEYjIDimwhKfgTQWio.roa
File: 0KrigKR87hEYjIDimwhKfgTQWio.roa (raw, json)
Hash identifier: kj4AgbuMtLMNEH/wrHgatcg8J5aVb5kYC9GPA4CeZfM=
Subject key identifier: D0:AA:E2:80:A4:7C:EE:11:18:8C:80:E2:9B:08:4A:7E:04:D0:5A:2A
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 18A682BB
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/0KrigKR87hEYjIDimwhKfgTQWio.roa
Signing time: Sat 01 Jan 2022 00:58:58 +0000
ROA not before: Sat 01 Jan 2022 00:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48613
IP address blocks: 91.233.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413565627 (0x18a682bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Jan 1 00:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0aae280a47cee11188c80e29b084a7e04d05a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6b:a1:5d:ba:79:7f:8b:a4:33:a9:5e:ae:67:
c8:66:5c:2b:5d:a9:77:58:95:aa:76:df:be:e1:02:
15:fe:90:9e:ed:58:04:a8:a2:79:87:e0:82:f3:ac:
32:14:87:be:e7:a3:83:16:78:af:65:6c:6b:9f:02:
cd:32:ae:3d:d3:79:cc:5c:a6:8a:6e:89:85:35:a7:
b1:f4:d2:94:7a:21:24:a5:53:aa:0b:ec:70:cc:89:
04:9e:68:88:28:22:51:3d:d4:8e:f6:bc:ed:e8:c3:
55:b5:a7:66:6f:b8:8e:a5:d7:c3:c8:3c:90:1a:bd:
8b:86:c8:fd:ee:18:1e:0f:09:8f:09:8a:e6:a8:df:
07:25:a6:12:e7:30:da:cb:31:c6:cf:54:2b:e7:2b:
4c:2a:80:3c:3b:86:e1:23:a0:59:54:78:b7:74:c9:
1b:ff:9a:4b:8e:61:f1:f2:71:08:1c:49:68:37:1c:
0e:36:8b:72:5e:0f:b1:33:4d:ab:2b:3c:85:3f:9c:
be:71:9f:b9:ac:82:73:35:d1:f9:49:29:0f:a8:71:
3e:85:51:15:09:d9:4c:7d:d8:e8:93:b2:a7:c8:fb:
f8:c0:21:70:9a:6d:24:f0:44:15:f9:eb:16:6c:9f:
8d:32:83:fb:9d:ee:f9:dd:f9:dc:65:f6:6b:a8:19:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:E2:80:A4:7C:EE:11:18:8C:80:E2:9B:08:4A:7E:04:D0:5A:2A
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/0KrigKR87hEYjIDimwhKfgTQWio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3c:ba:80:25:b1:0c:44:76:46:d6:45:a9:58:50:c4:39:ae:
37:4e:85:99:d3:ca:0d:e0:b6:63:2f:91:0d:86:63:09:d3:64:
9e:cf:45:e2:61:73:01:23:5b:59:d5:52:6e:8b:ee:e3:89:b6:
2b:ba:7e:7f:27:db:51:51:3e:c9:1d:de:c6:26:1b:01:e1:02:
60:09:80:89:93:80:05:97:04:cb:35:18:fb:83:b6:9b:50:07:
82:f0:64:66:c7:ff:7c:1c:2e:e8:74:66:b9:f4:42:5c:08:87:
72:79:3f:f9:32:a8:9c:e9:9b:3c:95:bb:b4:80:b9:87:35:10:
77:b6:1d:ef:a3:65:c3:a6:8c:9d:a1:ff:31:d9:f6:30:45:e4:
00:d8:48:52:31:3e:93:a3:ff:0c:a8:77:2e:a3:ba:4d:21:b2:
2c:b0:d3:12:11:a6:6d:ef:78:58:25:09:b3:4a:9f:a7:dc:91:
44:ba:ad:01:e1:81:03:3e:9a:28:2d:93:74:ba:86:73:3f:5a:
dd:ec:79:5c:26:d2:9d:48:57:d8:96:b7:87:7a:12:42:41:df:
07:5e:61:6a:57:99:ef:ec:9a:ce:ea:9a:1f:66:48:48:60:51:
6c:55:95:2b:96:05:e1:86:dc:6e:97:9c:32:00:e6:e3:66:84:
c7:95:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:33 2024 by rpki-client on console-ams.rpki-client.org