Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/9hzRXlzs8DvoE1e7aTwnYdMGt_8.roa
File: 9hzRXlzs8DvoE1e7aTwnYdMGt_8.roa (raw, json)
Hash identifier: dr868xhqUcvawOH6JQyCcrRShkjBq39V1lenxQu8IMA=
Subject key identifier: F6:1C:D1:5E:5C:EC:F0:3B:E8:13:57:BB:69:3C:27:61:D3:06:B7:FF
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 03B3B8A2
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/9hzRXlzs8DvoE1e7aTwnYdMGt_8.roa
Signing time: Sat 01 Jan 2022 11:58:53 +0000
ROA not before: Sat 01 Jan 2022 11:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209576
IP address blocks: 91.132.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62109858 (0x3b3b8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jan 1 11:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f61cd15e5cecf03be81357bb693c2761d306b7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:4a:2a:9b:a3:a9:30:54:db:76:85:97:5a:
ba:c2:be:09:68:d0:28:71:e3:6c:9c:1e:85:b7:4a:
ac:e4:d1:6e:4c:72:b1:17:9c:6e:42:79:6d:b7:40:
e5:7b:ec:f0:ad:1e:b6:30:66:9e:c4:92:58:03:c8:
41:7e:60:09:10:7b:7e:5c:0c:85:6f:ae:bf:c5:d2:
ba:f0:24:64:a1:10:81:39:ef:a5:6c:55:89:46:f0:
a1:6d:8e:4b:54:b8:0b:f2:a5:4d:11:40:f6:f8:6b:
26:c8:0d:9c:e0:6f:02:8a:15:f8:2b:42:86:7f:f2:
80:37:5f:d2:21:29:ab:44:a4:91:45:e7:76:6a:71:
d8:3b:fd:d1:4c:76:8e:15:76:bc:d9:0a:84:59:59:
b3:a8:ef:95:f9:be:9c:6b:63:f8:3a:eb:20:f4:b2:
aa:ec:29:04:b6:42:af:cc:30:ac:25:2a:fb:2e:1d:
70:f0:11:62:ea:df:8f:eb:c3:23:c7:95:8a:17:3d:
3c:ad:44:1a:ad:24:f7:8b:09:95:da:bf:75:c4:7c:
7f:3f:0f:16:47:10:db:6b:02:4f:28:5c:a1:62:3d:
b9:21:66:e8:db:7c:06:f1:14:40:06:bc:32:be:e6:
72:ab:1a:3a:43:7d:00:4c:19:ec:cb:bc:ae:5d:56:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:D1:5E:5C:EC:F0:3B:E8:13:57:BB:69:3C:27:61:D3:06:B7:FF
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/9hzRXlzs8DvoE1e7aTwnYdMGt_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.66.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:45:62:93:2f:f1:14:b3:c1:5e:56:b6:4b:6d:10:8e:94:02:
f6:20:87:2d:fe:fa:57:8d:7c:bb:e3:a4:26:6a:7c:fd:7d:68:
f6:17:79:03:59:0a:fa:a1:a8:f7:42:10:50:76:f8:af:d7:88:
98:c3:69:19:04:72:94:5e:23:ff:06:3e:ff:ff:91:59:3f:6d:
5d:4a:a9:f8:79:f8:65:1a:fe:af:bc:73:07:b0:a9:49:74:ca:
6a:f6:2e:b7:c6:cd:39:bc:c5:41:28:ed:fb:98:db:d7:de:15:
64:9d:cc:6a:6c:8b:9a:3e:a8:0c:52:f0:9c:85:d9:e3:01:b8:
1e:10:f4:9a:58:e7:3c:55:d0:8e:ff:c3:86:b1:b9:25:26:5a:
fd:17:9b:03:29:70:02:d5:03:45:b7:ab:7d:b4:9b:54:4d:6e:
da:1e:a7:ab:72:49:f2:b0:d2:6f:dc:4c:a1:c8:89:0d:fe:63:
39:c9:bc:d8:80:85:59:97:65:55:12:ff:2c:db:ee:e7:66:80:
13:e2:73:e2:91:db:6f:ae:4b:a0:bc:c5:72:ac:c0:2e:6a:d0:
5d:99:56:3f:52:46:4d:ff:40:f1:d2:82:ec:3e:a7:42:4c:02:
8e:2a:03:e2:cc:43:8b:4b:e1:ab:30:da:84:fe:60:ba:9b:86:
8a:03:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-fra.rpki-client.org