Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/8srbI1eAFYKs0Vb5DLpQ1wwm9a4.roa
File: 8srbI1eAFYKs0Vb5DLpQ1wwm9a4.roa (raw, json)
Hash identifier: Ze/L4FkEvZhuixYYEYNg0u54zAB/zpBnHSnUgR5zJos=
Subject key identifier: F2:CA:DB:23:57:80:15:82:AC:D1:56:F9:0C:BA:50:D7:0C:26:F5:AE
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 01856288AAE220BBF9E9575D0180F606307C
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/8srbI1eAFYKs0Vb5DLpQ1wwm9a4.roa
Signing time: Fri 30 Dec 2022 10:16:41 +0000
ROA not before: Fri 30 Dec 2022 10:16:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48868
IP address blocks: 91.209.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:88:aa:e2:20:bb:f9:e9:57:5d:01:80:f6:06:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Dec 30 10:16:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2cadb2357801582acd156f90cba50d70c26f5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ea:15:48:0b:89:7a:f9:9e:50:40:6b:01:74:
73:7c:b3:6f:fa:1d:82:97:8d:e0:a8:8b:e5:56:2c:
e9:3a:bb:3a:85:53:b1:c3:ba:1f:f8:72:44:ca:db:
4c:35:fc:c1:e5:bf:26:68:b1:8f:98:17:12:5b:b4:
7e:38:f1:30:c2:62:44:02:b9:0c:1a:11:b7:2c:ed:
5f:e0:91:f0:57:04:86:26:0f:6a:37:d0:b1:92:df:
ea:0f:c5:ab:17:e4:11:71:8c:d1:73:cc:b7:18:a5:
89:b7:d1:9f:a6:1e:87:33:08:e4:88:00:68:0e:f5:
38:7b:ca:ec:62:ac:db:d3:ab:08:7e:26:4f:d3:58:
1d:2c:d0:c5:71:98:29:20:23:b2:39:47:91:83:37:
19:84:f3:e3:7f:73:e7:e8:f4:3e:df:16:31:44:da:
fb:73:ce:36:3f:48:9d:90:aa:5b:b5:d5:88:a9:76:
40:96:0f:b9:6c:ab:e6:2d:48:87:bc:2b:2c:c3:10:
63:d6:a1:9b:3b:ca:25:f5:f4:52:86:88:04:5f:f5:
d5:36:29:d4:a7:91:2e:2d:a3:a1:21:24:a8:f3:8b:
cc:c5:37:af:b5:c8:85:60:69:fc:cf:4c:e7:7f:1c:
31:28:4e:57:f6:4e:3f:7a:14:49:96:d5:47:20:c6:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:DB:23:57:80:15:82:AC:D1:56:F9:0C:BA:50:D7:0C:26:F5:AE
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/8srbI1eAFYKs0Vb5DLpQ1wwm9a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.243.0/24
Signature Algorithm: sha256WithRSAEncryption
38:98:87:95:4e:55:31:8b:d8:9c:32:23:21:83:f6:d0:be:15:
a4:86:c6:d0:0e:ef:62:3b:51:03:35:3a:85:03:5d:75:31:ee:
40:41:12:f2:71:4f:1c:86:ed:1e:83:85:45:6b:8f:a4:f6:74:
7c:c7:26:5f:7f:d4:db:0f:0c:5f:1b:0b:68:cc:fb:bd:dd:b1:
51:12:cc:17:77:f3:7f:bd:61:56:4d:91:78:42:cc:45:bb:8b:
5f:40:72:25:51:dd:01:02:08:ca:a9:6c:68:d3:58:01:bf:ee:
a8:78:a2:d5:a1:25:ab:b9:f6:2e:79:da:90:20:5d:b9:fa:60:
13:33:b7:5b:6d:cc:41:15:4e:16:7c:f9:a7:00:0d:3f:27:bb:
99:43:ec:5d:d8:52:3d:73:ff:8a:74:5c:f7:83:89:35:9f:3e:
a4:68:07:15:af:1d:a7:60:a2:ec:1b:1d:14:76:4c:1e:25:c0:
5f:1d:d4:24:d2:52:17:eb:0e:9f:41:76:97:7f:0f:b4:90:7e:
f3:4d:03:ed:b8:e1:88:97:ea:8d:1e:36:99:76:9e:e3:e4:96:
90:ed:ba:68:50:d8:4c:e4:eb:8e:f9:92:5e:10:d6:99:e6:37:
cb:58:1d:6e:95:50:07:ff:0e:64:ed:95:ab:0b:b5:9c:b7:23:
18:70:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:22 2024 by rpki-client on console-fra.rpki-client.org