Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ctixt-c-U8x4Fs-QOPtv0nDrdWs.roa
File: Ctixt-c-U8x4Fs-QOPtv0nDrdWs.roa (raw, json)
Hash identifier: yBfm8BONqj1YRdL/cWiKgf6cZRYjfjwsv9KLJAmF7Ic=
Subject key identifier: 0A:D8:B1:B7:E7:3E:53:CC:78:16:CF:90:38:FB:6F:D2:70:EB:75:6B
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01840ED728263DAABB7CC470E3580280157F
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ctixt-c-U8x4Fs-QOPtv0nDrdWs.roa
Signing time: Tue 25 Oct 2022 11:11:32 +0000
ROA not before: Tue 25 Oct 2022 11:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.243.179.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:d7:28:26:3d:aa:bb:7c:c4:70:e3:58:02:80:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 25 11:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ad8b1b7e73e53cc7816cf9038fb6fd270eb756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:e1:08:66:4e:d1:cc:f7:49:fe:70:6e:4c:
df:8b:b1:c6:cd:57:fd:e9:06:85:2c:b7:5d:f1:c2:
7e:fe:16:c0:5d:6c:81:62:ef:83:ec:05:b1:36:d3:
e9:aa:bf:e7:1d:6f:1c:d8:11:77:9a:8c:2a:ce:a6:
5b:13:18:3e:0f:be:4f:9f:b5:2c:02:e4:6e:f6:59:
89:c3:b4:0f:a2:0f:4a:33:46:bd:36:48:53:41:19:
19:54:76:cc:fa:20:16:5c:22:6e:a9:a7:2e:5f:ff:
2f:67:28:50:14:7b:d7:28:22:1d:6d:1f:8f:42:28:
e0:c2:d8:48:79:46:f6:99:dc:1c:d2:b4:1b:4a:2d:
07:bb:37:4a:ba:44:ed:6f:e5:9d:e9:06:36:b0:7c:
15:a1:a5:76:e8:ab:5a:4e:3c:e1:0c:15:55:5a:e8:
20:ce:41:a1:58:ac:96:07:42:ff:b6:45:72:cd:16:
9a:16:f5:3c:ec:19:be:d3:dd:60:dd:1f:78:88:c8:
7a:31:69:77:7f:73:f4:c1:ed:93:55:8b:37:ce:dd:
69:8e:f6:f2:ed:e2:01:e3:cf:4c:83:78:14:0b:c4:
93:53:fc:4c:b4:6c:be:9b:26:c1:ad:4b:ba:92:9a:
5a:b6:5b:7b:4f:27:e8:f0:3a:67:47:5f:7b:bf:18:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:B1:B7:E7:3E:53:CC:78:16:CF:90:38:FB:6F:D2:70:EB:75:6B
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ctixt-c-U8x4Fs-QOPtv0nDrdWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
91.243.179.0/24
Signature Algorithm: sha256WithRSAEncryption
34:76:35:03:8d:90:76:78:8e:51:ee:9c:13:3f:51:b9:7b:fa:
0b:26:4d:97:4f:e5:fb:62:95:42:af:81:58:d6:80:32:04:9b:
9a:3c:b9:37:ae:71:5b:23:bc:11:e9:e8:1c:88:64:a8:58:16:
fa:30:a3:eb:82:6f:b1:6e:71:1d:7e:24:be:8e:80:ce:cb:a7:
28:99:61:a7:6c:f6:07:81:bb:94:16:f8:b1:1b:de:57:4f:99:
10:fd:ba:31:a1:87:8c:13:3f:08:7c:60:ce:a0:d2:33:02:07:
dc:3b:58:6a:25:b6:7b:86:d1:cb:e0:cf:f1:87:19:01:55:95:
eb:92:dc:f9:61:31:3a:fe:98:88:c4:26:5f:7f:a8:44:77:65:
cb:e3:91:16:02:3e:e1:b6:d5:c9:23:07:a8:23:13:49:8e:b7:
ee:78:57:9a:2e:85:87:8f:df:47:90:c1:0c:5b:d2:eb:6e:77:
69:cf:de:a2:47:40:7a:45:32:3c:24:42:59:b7:4c:ee:b2:56:
b6:67:68:1e:d5:bd:bd:98:6e:1d:8b:49:82:fd:3c:6a:ce:55:
cc:eb:7b:8c:2b:df:b3:28:9a:b6:6d:90:fb:bf:e4:08:c6:9c:
cc:ef:41:eb:ea:af:44:ab:1c:b2:73:64:2d:1b:d2:11:4f:03:
16:55:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org