Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/uJCxaoxNpzkSaPutrX78ZrwewDg.roa
File: uJCxaoxNpzkSaPutrX78ZrwewDg.roa (raw, json)
Hash identifier: zAaLUv5YTfT5pT8V2qhSpP/Jl7G7XUfY6hwzbdjR72o=
Subject key identifier: B8:90:B1:6A:8C:4D:A7:39:12:68:FB:AD:AD:7E:FC:66:BC:1E:C0:38
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 02054647
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/uJCxaoxNpzkSaPutrX78ZrwewDg.roa
Signing time: Sat 01 Jan 2022 13:05:14 +0000
ROA not before: Sat 01 Jan 2022 13:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48069
IP address blocks: 91.208.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33900103 (0x2054647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Jan 1 13:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b890b16a8c4da7391268fbadad7efc66bc1ec038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:c4:e4:50:13:ee:73:08:55:1b:07:bb:60:
4c:08:04:cf:1d:b6:ef:06:7c:11:ee:b0:29:7d:bc:
7d:73:35:c8:ac:31:ac:98:3c:32:90:d0:15:81:9d:
63:32:a8:16:d8:cc:8c:ec:7c:ad:37:0b:18:c4:da:
90:aa:51:d5:a8:a5:11:ca:d6:ec:cd:5a:d3:ec:c2:
dd:5c:1d:e5:1d:d0:c9:71:4b:13:5d:b5:03:3f:b2:
c8:e5:85:38:22:7c:00:60:fa:a7:d5:5c:56:bf:36:
3f:54:14:5a:0e:43:ad:29:7a:d8:76:bf:79:25:4f:
ac:47:32:09:13:e7:b9:68:22:e2:c4:a8:39:c3:2a:
86:33:1a:ab:53:62:a3:aa:1d:8f:9a:3a:a1:7e:c9:
7e:8a:7e:6f:94:c8:5a:2f:83:61:af:18:dc:7a:2e:
ea:ba:a3:3c:45:18:d3:a0:0e:7d:a9:23:fc:e1:ec:
55:3b:32:0e:77:19:1a:20:da:11:ad:90:14:99:4d:
ed:1e:35:a8:65:30:22:0b:d5:45:58:2d:ab:3d:a1:
55:3e:ca:15:02:ca:75:f0:1c:19:a2:db:be:8e:7c:
8e:3f:c4:16:77:37:1b:09:bd:ed:aa:16:6f:e1:0e:
6d:0b:0c:ec:3f:fb:b6:cc:3e:a7:58:ea:7e:ca:2f:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:B1:6A:8C:4D:A7:39:12:68:FB:AD:AD:7E:FC:66:BC:1E:C0:38
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/uJCxaoxNpzkSaPutrX78ZrwewDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e0:98:e9:9f:99:1e:53:04:b4:2d:4d:c8:a0:f8:3f:d3:2d:
17:d6:7a:cd:f3:8d:90:a6:7c:19:f2:24:59:e5:69:b2:16:38:
e5:99:87:b2:02:56:dd:71:a6:44:e9:54:4d:f1:73:9f:80:45:
eb:e5:b7:85:b1:15:8c:d0:f7:44:c1:bc:91:fe:6c:e2:9d:3d:
6e:58:41:c3:e5:c5:8e:59:be:ef:b6:ab:f4:8e:3a:32:e4:31:
f6:b3:f1:5a:37:d3:9f:d7:06:11:d8:52:e4:ff:01:06:ef:50:
0a:9a:d7:67:11:66:b7:4f:dd:ff:59:67:81:b9:b7:ac:f7:02:
9c:2e:4b:13:5c:e1:bd:28:5d:d2:58:d2:d1:07:91:09:c7:74:
02:fb:dc:d7:76:f2:95:15:a3:3c:b1:9a:15:c0:fc:17:d7:77:
e3:59:76:11:d0:32:5b:ea:ea:aa:17:69:30:ab:50:e3:36:99:
a1:40:74:69:1e:da:e8:54:34:1b:bc:36:e7:6a:73:2f:2f:74:
cb:b4:39:83:40:ae:ec:87:a0:28:66:b6:7e:c5:72:95:96:20:
0d:ff:74:c2:0c:41:83:5e:bb:b1:2b:96:e1:68:87:f1:6d:96:
ed:14:d9:e9:17:b4:ee:72:37:f6:0d:57:0b:d0:72:a9:a8:4e:
39:d8:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:19 2024 by rpki-client on console-ams.rpki-client.org