Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IgEuz1QUp7VZE9GV2Sw9Etmqo5o.roa
File: IgEuz1QUp7VZE9GV2Sw9Etmqo5o.roa (raw, json)
Hash identifier: ajv0qbM0eCNZ186pOBsIsKWysr4/Rtcss58j0dRyt9Q=
Subject key identifier: 22:01:2E:CF:54:14:A7:B5:59:13:D1:95:D9:2C:3D:12:D9:AA:A3:9A
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AC62847
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IgEuz1QUp7VZE9GV2Sw9Etmqo5o.roa
Signing time: Sat 01 Jan 2022 03:02:33 +0000
ROA not before: Sat 01 Jan 2022 03:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204457
IP address blocks: 91.194.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180758599 (0xac62847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22012ecf5414a7b55913d195d92c3d12d9aaa39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:d2:ae:8b:59:f7:43:eb:47:50:de:60:de:
9c:7a:e8:33:5d:59:6d:15:32:27:eb:dd:cb:57:ef:
b0:c5:e2:68:29:1f:33:5b:6f:56:25:a0:00:0e:96:
cf:8a:73:1d:ba:bf:22:81:d3:5b:db:c2:15:90:37:
cc:cb:71:07:20:0e:47:02:ad:56:2b:9d:9a:8b:c8:
24:15:e1:ce:59:ec:80:51:7d:39:00:10:c9:50:4e:
13:8e:c2:61:81:e3:f8:20:3a:50:7e:f3:e8:3f:51:
c5:e6:ad:3e:e8:b0:39:14:f2:db:ec:08:52:02:e0:
12:a7:a4:75:cd:6f:8f:d6:de:06:e4:64:b6:f9:63:
be:da:d7:f8:70:dd:6c:cb:d6:bb:b9:c0:84:f1:9d:
bf:76:ed:9a:18:72:19:7f:b5:86:ef:ae:bb:90:af:
ab:54:0c:9a:06:10:c9:4b:30:e2:91:e0:75:45:28:
0b:49:43:a2:43:07:04:bc:8d:80:4d:28:6a:d8:d3:
7f:db:3c:b7:7c:b7:68:3d:97:a4:27:19:5a:22:74:
cd:0c:9c:2b:59:0f:87:23:31:2e:49:d3:19:5e:cd:
ac:d7:cb:43:8b:8f:ff:74:c4:12:15:ea:27:37:df:
34:4a:4a:ae:51:f2:9b:c7:e8:4a:40:3e:c2:47:bf:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:2E:CF:54:14:A7:B5:59:13:D1:95:D9:2C:3D:12:D9:AA:A3:9A
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/IgEuz1QUp7VZE9GV2Sw9Etmqo5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.53.0/24
Signature Algorithm: sha256WithRSAEncryption
67:69:91:6a:56:09:95:b2:80:d4:5b:6b:e2:7b:17:32:26:83:
4e:dc:4b:d7:d7:c1:6a:c2:13:54:0f:05:e7:28:53:9a:cb:56:
80:6f:fa:92:4d:6e:e1:83:59:c2:b0:c6:c0:2f:ed:d8:f4:ff:
02:8f:a3:6d:b8:7d:18:6d:a5:e9:20:41:1c:cb:9c:39:d0:5f:
6b:35:b9:71:23:72:1b:12:8c:ae:94:ae:24:85:ef:82:6e:39:
cf:df:79:a1:5b:5c:0b:5e:d8:a0:79:c9:a0:7e:1a:60:a3:46:
fd:25:06:51:08:a8:52:3f:14:3a:e8:ec:86:2c:b4:90:52:42:
ce:3e:8e:26:db:61:6e:74:08:31:2c:07:bc:b6:e9:38:12:47:
16:d1:b6:55:34:b6:58:ec:e7:b9:8e:ff:9f:82:1f:c8:b7:34:
1c:15:00:27:b6:f8:e6:fd:1d:dd:ec:75:b9:77:a7:01:56:d9:
cf:39:33:31:8e:a1:92:3d:d7:c1:04:89:da:c5:a4:d3:6e:2a:
92:c7:2e:9e:b5:4d:f3:3e:27:d1:b4:22:0b:b8:1f:b1:32:b8:
77:8e:33:96:16:29:6a:b9:5a:bc:c4:1f:dd:1a:b7:88:8f:19:
43:6d:1e:88:4a:70:8a:26:84:42:4d:f2:0c:6a:a4:54:b7:f4:
64:15:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org