Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/aKV-tJOpW1kS25lMDmHWtrWhJIg.roa
File: aKV-tJOpW1kS25lMDmHWtrWhJIg.roa (raw, json)
Hash identifier: DwUCEppERRXlHnjKPPMCN7hkCSyh0ZfByK2UefK4Oss=
Subject key identifier: 68:A5:7E:B4:93:A9:5B:59:12:DB:99:4C:0E:61:D6:B6:B5:A1:24:88
Certificate issuer: /CN=46a8cc61de20a90048831facae22fa370e576936
Certificate serial: AA3235
Authority key identifier: 46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/aKV-tJOpW1kS25lMDmHWtrWhJIg.roa
Signing time: Sat 01 Jan 2022 05:05:53 +0000
ROA not before: Sat 01 Jan 2022 05:05:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.246.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11153973 (0xaa3235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a8cc61de20a90048831facae22fa370e576936
Validity
Not Before: Jan 1 05:05:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68a57eb493a95b5912db994c0e61d6b6b5a12488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:98:67:f0:77:ea:95:51:85:a9:af:6a:5b:
6b:8e:23:31:6f:2d:94:9b:ea:70:c6:24:96:99:07:
e5:d3:e1:6f:c9:eb:1c:e4:e9:3d:89:ab:e5:40:7e:
93:a5:f8:2f:a0:19:b2:e8:3b:1d:18:d0:48:a8:45:
11:58:62:ce:50:b3:2d:8a:81:60:4c:04:70:3c:29:
e3:df:d0:0e:4f:61:b2:af:d1:55:35:76:6d:17:b3:
83:fd:20:d6:9f:f6:73:ae:65:0d:4b:36:10:1b:50:
46:de:14:e0:ec:9f:7e:0c:4f:19:26:07:49:66:9b:
da:f0:e0:85:9b:34:2b:60:2e:69:7d:3b:44:7d:1c:
d3:fa:45:d9:f0:a6:5e:c5:87:6e:73:8f:f3:1a:e3:
f0:8f:86:bd:46:7f:65:43:15:cb:32:e8:0d:26:6f:
49:df:cd:a3:29:9b:68:83:e2:62:63:cd:64:05:9b:
1d:15:72:03:40:70:8e:3a:bd:8c:67:b5:9f:1d:c7:
d7:a8:09:1a:a5:a1:bd:94:49:ed:1d:59:b0:8d:56:
78:94:d9:8b:05:43:5a:f9:ea:63:12:cd:80:e6:d7:
d0:da:f5:9a:33:cd:59:d4:fc:06:d0:61:45:93:ae:
1f:2a:b2:4d:52:03:4f:24:32:38:18:0f:e6:bc:12:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A5:7E:B4:93:A9:5B:59:12:DB:99:4C:0E:61:D6:B6:B5:A1:24:88
X509v3 Authority Key Identifier:
keyid:46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/aKV-tJOpW1kS25lMDmHWtrWhJIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a7:28:fc:6c:dc:05:e8:48:8f:8c:4e:2e:e6:7c:4d:f5:67:
74:6a:a7:36:3c:e8:29:69:b8:40:7c:bd:b9:83:2a:8d:a6:03:
da:2d:14:e8:ea:c5:c0:29:17:9a:01:1d:5b:15:b3:1d:5d:ea:
da:cb:95:79:64:f9:3f:9b:9f:8e:3b:16:47:29:72:f7:73:fd:
46:a4:f5:08:4b:d6:f5:53:54:1b:33:63:61:02:b2:fc:1d:ea:
2a:b5:2b:fe:e6:07:8c:d3:dd:11:4b:ca:4d:f2:56:3c:c5:43:
5f:e4:6d:92:d0:53:02:42:30:bf:af:29:30:bb:80:c4:ea:95:
90:6b:40:c8:40:97:36:9d:3d:1d:7c:c2:f9:84:95:8a:47:6d:
53:58:57:56:e6:9a:b3:e6:8b:ef:a5:f1:6e:16:a0:bc:9b:3a:
03:d2:a4:5a:0d:57:e7:0f:9b:ca:59:1a:d7:ee:4f:6b:af:1c:
51:44:0a:77:3d:d1:aa:b9:a3:b9:a7:31:81:cd:e5:9e:7c:71:
21:62:71:68:ef:87:7b:a8:4d:7e:0a:7d:ed:54:24:6e:db:83:
18:87:c2:58:b9:03:27:74:93:6e:fb:8c:19:dd:4a:5f:eb:d8:
92:b1:91:f9:49:46:45:72:dc:e8:e1:d0:3a:83:1f:62:f4:61:
48:8e:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:03 2023 by rpki-client on console-ams.rpki-client.org