Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/37lC8qTf8ccIbn_SqtWMgyM7HcQ.roa
File: 37lC8qTf8ccIbn_SqtWMgyM7HcQ.roa (raw, json)
Hash identifier: w4cnGTBv4O9VenFypL7TgVJ/clkNrt5w+DppdPmECQI=
Subject key identifier: DF:B9:42:F2:A4:DF:F1:C7:08:6E:7F:D2:AA:D5:8C:83:23:3B:1D:C4
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 021716AA
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/37lC8qTf8ccIbn_SqtWMgyM7HcQ.roa
Signing time: Sat 01 Jan 2022 01:56:23 +0000
ROA not before: Sat 01 Jan 2022 01:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213202
IP address blocks: 91.196.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35067562 (0x21716aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Jan 1 01:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfb942f2a4dff1c7086e7fd2aad58c83233b1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:9b:6c:a7:59:a5:9f:30:09:85:35:0d:cd:
e0:80:5d:f5:1e:ad:9e:c4:92:81:6d:b7:ff:87:05:
c6:c2:dc:8b:be:79:12:08:a3:99:d5:c8:e4:bb:dc:
d5:b2:62:29:29:45:10:44:d9:5f:d7:b0:fb:6b:4f:
ae:71:96:e0:17:90:73:01:a8:a2:e3:a3:91:5b:c5:
5f:f8:42:a1:a0:b8:fe:a3:4d:d1:b7:e7:25:35:c6:
5f:24:fa:07:13:d5:83:de:93:d5:48:94:e4:b3:fc:
8b:20:37:fc:67:f1:7f:ed:60:b1:e0:e2:0c:89:78:
40:01:fc:61:b4:ac:60:17:ae:fa:9f:fa:dd:07:83:
6c:b3:2f:a4:32:af:61:54:68:17:24:1c:bd:4a:61:
4e:88:f3:20:84:4c:f1:32:47:9e:8c:b5:13:0a:dc:
7c:f9:88:bf:87:56:e6:74:d4:98:f8:e3:83:84:77:
21:57:a1:d1:84:46:ad:8d:75:08:8f:c5:3f:b7:e9:
be:14:04:8d:5c:e9:49:6c:24:ce:c1:71:23:85:2e:
65:0e:6c:54:1b:86:ef:92:4b:75:26:74:cd:3f:95:
6a:15:49:2b:24:fc:fc:7d:19:2c:ee:e3:b3:f3:fe:
93:a3:48:ad:15:83:1b:c8:45:ec:65:ae:01:c7:84:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:42:F2:A4:DF:F1:C7:08:6E:7F:D2:AA:D5:8C:83:23:3B:1D:C4
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/37lC8qTf8ccIbn_SqtWMgyM7HcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.191.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ce:74:6a:67:72:52:38:27:84:d5:26:8e:ac:80:6e:83:52:
e2:c4:3a:20:18:3b:f1:f4:7f:c8:08:ae:47:a3:80:9a:6f:8e:
ae:ff:41:b5:01:30:7a:91:4e:ff:54:df:b6:5f:5d:ec:8e:26:
50:8b:d6:fc:49:8c:ba:68:ba:55:34:09:98:89:16:0d:52:f3:
ac:f8:0c:e4:9c:e8:0b:0b:bf:02:3f:30:56:df:aa:4c:9f:b1:
02:3a:b8:7a:92:53:19:df:9a:fe:05:ba:15:45:1c:97:4a:6b:
88:38:1b:ca:db:6d:c0:f5:5b:32:f4:14:f6:40:3e:6f:ce:6b:
a6:57:9d:ac:1c:17:e2:b9:dd:89:31:be:f1:4b:d5:34:ef:e5:
47:4d:51:9d:72:17:7d:21:06:4f:68:c3:49:8d:0c:ac:1c:19:
3e:68:95:38:b4:fa:13:d2:c1:bc:33:6e:7f:f3:ae:fb:29:94:
65:d3:14:8c:b8:cc:27:3f:0b:d2:bf:ee:72:45:92:9f:0f:f9:
d3:a1:90:81:ba:45:cb:68:b1:a0:c2:80:78:df:fc:48:92:88:
ce:c8:05:22:7d:bd:2d:c2:a0:be:a8:20:39:0a:79:a6:28:66:
43:62:60:22:32:e7:5e:3d:75:17:53:6d:06:3c:68:b3:6f:95:
7c:a8:d7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:27 2024 by rpki-client on console-fra.rpki-client.org