Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/n8vW1cNYK59dp2eez-L5AexJJ48.roa
File: n8vW1cNYK59dp2eez-L5AexJJ48.roa (raw, json)
Hash identifier: rUmhFQ7QtlD8gziVKY+Sn5a4wCNG5cudj2s1VcdJ3Ow=
Subject key identifier: 9F:CB:D6:D5:C3:58:2B:9F:5D:A7:67:9E:CF:E2:F9:01:EC:49:27:8F
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 018201431648A96F33016B01BC65214BC7CB
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/n8vW1cNYK59dp2eez-L5AexJJ48.roa
Signing time: Fri 15 Jul 2022 09:49:09 +0000
ROA not before: Fri 15 Jul 2022 09:49:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48419
IP address blocks: 91.209.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:43:16:48:a9:6f:33:01:6b:01:bc:65:21:4b:c7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Jul 15 09:49:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fcbd6d5c3582b9f5da7679ecfe2f901ec49278f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:57:d8:be:88:bd:f5:dd:d3:b5:15:59:2e:
2d:90:07:b4:6e:0a:58:17:52:1d:d4:28:47:3c:11:
5c:f9:b1:75:a6:ad:f4:98:74:84:b8:a6:be:54:78:
be:f5:63:41:b6:44:87:03:d2:62:e1:50:b6:06:e2:
23:f7:a7:65:b5:fc:3d:5b:3e:cc:5a:cb:83:9b:87:
a7:09:f9:9d:be:7d:80:86:60:25:87:b3:fe:25:4e:
f5:37:9e:12:8d:fd:29:31:63:97:44:d1:6b:89:02:
80:a9:6c:54:59:9d:35:cd:0d:a0:c7:59:61:bf:eb:
6f:6f:93:b3:29:86:28:51:50:61:11:fc:7a:b0:3e:
8f:e8:c0:91:ad:4f:62:5e:bf:22:76:cd:33:38:f7:
7e:ae:12:94:25:44:23:e4:c7:27:fa:ca:6f:a2:d1:
9a:93:cd:0f:a6:ed:22:69:d6:b2:c4:45:1b:78:b7:
93:1f:0d:25:95:eb:0d:72:e3:f5:55:9f:bf:a3:b8:
c1:16:49:ad:b5:29:cc:50:c7:8f:4f:37:8e:b6:7e:
37:f4:ea:e7:87:10:de:8f:f9:6e:ae:b8:cb:26:49:
b7:ec:1a:cf:ca:73:b8:0f:98:71:e5:6d:dc:e2:f5:
ab:37:b4:d8:3d:5b:b6:c2:9e:28:67:92:87:81:ac:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:D6:D5:C3:58:2B:9F:5D:A7:67:9E:CF:E2:F9:01:EC:49:27:8F
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/n8vW1cNYK59dp2eez-L5AexJJ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
36:85:25:40:d9:09:c0:87:df:55:04:55:fa:59:00:29:07:49:
a6:f5:d8:c4:6c:ba:8a:90:88:bc:ba:89:9b:b9:61:b2:35:8e:
21:e2:0d:50:36:3a:f1:b7:c7:2b:bd:89:8f:2f:66:8f:8b:3b:
58:a9:0a:12:85:12:dd:9b:98:6b:7a:b7:b6:1c:e1:6a:3e:3f:
18:b5:c6:15:f8:96:81:dd:fb:e4:bb:54:b1:4d:62:76:15:8c:
05:ee:fe:e3:1d:4a:46:82:77:d7:ce:fe:c2:04:2c:e6:74:42:
e9:bf:c2:f7:2e:0f:94:e1:64:11:5f:c6:7f:47:9d:e7:9e:aa:
20:2b:ff:90:61:f5:7c:bc:05:36:d4:22:7d:83:0d:9e:d4:ca:
45:78:df:d4:c5:fd:2a:f5:cd:2b:59:24:ca:22:1c:f1:78:e2:
f8:2a:4d:53:60:26:ba:d0:bd:17:0a:65:48:65:ac:20:4e:04:
4b:52:0c:0f:7e:2c:b9:60:39:9f:c4:a7:b5:33:64:10:35:a1:
02:9e:a4:9b:15:30:6c:5a:f2:88:a5:a7:c1:97:50:9e:68:b4:
49:d1:41:86:08:3e:8f:9b:ff:a1:78:da:73:ee:e6:4a:71:33:
d4:d2:ab:47:5e:da:85:bc:4f:47:a3:d3:ad:89:5d:09:8d:58:
1b:a2:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:54 2024 by rpki-client on console-ams.rpki-client.org