Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/qC5cIo-SkN_zDjJg66i9D7LlOyE.roa
File: qC5cIo-SkN_zDjJg66i9D7LlOyE.roa (raw, json)
Hash identifier: 4230UpOJElL5Tytzd+6V9Phy3hZELmmB1dnZA3bPmM0=
Subject key identifier: A8:2E:5C:22:8F:92:90:DF:F3:0E:32:60:EB:A8:BD:0F:B2:E5:3B:21
Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial: AFC466
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/qC5cIo-SkN_zDjJg66i9D7LlOyE.roa
Signing time: Sat 01 Jan 2022 01:58:00 +0000
ROA not before: Sat 01 Jan 2022 01:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59934
IP address blocks: 91.247.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11519078 (0xafc466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Validity
Not Before: Jan 1 01:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a82e5c228f9290dff30e3260eba8bd0fb2e53b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:0f:e7:dc:ce:b5:c9:07:ed:01:81:2d:32:
87:89:a7:2d:97:7c:5c:d6:c2:77:4b:b3:40:aa:e4:
eb:6b:28:d9:c0:9d:ec:c2:f0:79:b6:89:d0:71:6a:
db:bf:0a:2a:e4:db:a1:33:35:6d:d3:f9:bf:09:23:
53:49:6d:74:86:a4:44:25:59:78:98:3f:92:d3:d7:
bb:0e:a6:f0:fa:f5:b5:57:ee:95:e8:e5:9f:dc:63:
fa:14:87:2b:43:b2:04:8a:cd:fc:22:3b:a0:18:52:
88:8d:7c:3c:ce:d1:7b:04:9c:00:4d:1e:62:52:8b:
b5:d7:16:c9:43:6c:90:94:e8:5c:f5:80:aa:57:1e:
74:dd:9e:88:42:24:4e:8a:af:85:be:57:02:80:05:
79:1b:b8:c1:90:7b:19:38:c9:cc:24:f9:af:b7:09:
bd:1f:cd:b9:d8:15:e7:29:3a:47:c3:db:fa:45:82:
91:dc:70:66:07:41:52:dc:18:a9:e4:e0:ce:3b:54:
a1:45:b1:8c:f8:8f:80:8c:f2:dd:62:97:ad:af:f3:
e7:4b:7a:46:18:62:a0:89:cb:e5:7b:a6:9b:b4:55:
28:9d:9c:01:09:99:3a:ca:11:1d:d8:b6:fb:cf:c7:
f9:76:16:9a:ed:7d:12:f5:e5:07:02:fb:be:a8:8b:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:5C:22:8F:92:90:DF:F3:0E:32:60:EB:A8:BD:0F:B2:E5:3B:21
X509v3 Authority Key Identifier:
keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/qC5cIo-SkN_zDjJg66i9D7LlOyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
42:47:4b:4c:bd:01:26:bb:79:a9:49:43:93:72:5f:25:27:77:
27:35:fa:ea:ab:7d:7f:dd:c5:3a:b6:1b:f2:38:08:4c:ea:96:
9d:01:85:f7:cd:95:90:6d:bd:e7:b1:6a:6c:b2:26:6f:7a:0b:
b6:8a:91:67:87:86:5d:56:e6:d0:fa:ad:8e:09:7c:8b:df:0e:
52:f1:17:80:f5:8f:24:ca:4b:d9:02:a5:d5:90:51:0d:79:d6:
08:14:81:f5:51:2f:b2:92:d7:c3:3a:b2:c9:72:8f:c3:ef:9a:
f2:2e:02:86:f2:78:e1:90:9b:3a:66:02:44:e7:3f:99:e5:2d:
65:71:e2:ab:c2:ce:fe:64:5f:84:41:59:f6:d8:03:1a:fc:8e:
25:07:18:e0:20:43:55:0f:33:1b:5a:69:ed:5b:a9:6e:f9:61:
ae:37:fc:64:82:3d:d5:40:e2:b0:8d:87:67:e9:55:10:0b:e7:
51:c0:bc:65:bc:1b:3c:02:41:6c:3e:c3:52:f1:d8:a4:d5:fe:
2c:08:cb:85:ff:48:5c:f2:fd:82:ab:af:1f:13:96:b4:9e:c4:
52:35:12:8f:f7:b9:f9:1a:81:e5:90:5a:71:83:dd:f4:b1:54:
f3:c9:2d:e3:ed:aa:96:5a:fa:99:de:66:14:f5:9e:32:01:e7:
08:86:44:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:51 2024 by rpki-client on console-ams.rpki-client.org