Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/CF_kZ76san43rUi-8LnkMJhCAt0.roa
File: CF_kZ76san43rUi-8LnkMJhCAt0.roa (raw, json)
Hash identifier: wIeQmz+GGGIrmAuac7pjxSMIV8MWDKR+mahJU8kroPA=
Subject key identifier: 08:5F:E4:67:BE:AC:6A:7E:37:AD:48:BE:F0:B9:E4:30:98:42:02:DD
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 15E2A71D
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/CF_kZ76san43rUi-8LnkMJhCAt0.roa
Signing time: Sat 01 Jan 2022 13:00:57 +0000
ROA not before: Sat 01 Jan 2022 13:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206012
IP address blocks: 91.198.46.0/24 maxlen: 24
185.90.224.0/22 maxlen: 22
91.192.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367175453 (0x15e2a71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Jan 1 13:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=085fe467beac6a7e37ad48bef0b9e430984202dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:db:fe:4c:19:22:6f:92:ca:aa:ee:81:b1:
e3:27:1e:ab:0c:6b:03:eb:d2:76:01:e5:23:4b:e1:
fb:4d:6b:35:e0:98:bc:f6:8f:86:ed:56:91:47:c4:
a6:09:41:ca:d2:c0:f2:3f:e0:c7:df:db:6d:98:ff:
cd:53:83:9d:16:82:ed:bd:a9:f6:aa:be:f9:04:85:
63:7f:10:fc:02:ca:bf:a9:98:00:f9:b5:7f:3f:d4:
ab:67:a3:35:65:28:8d:50:ec:d1:8f:35:09:71:c7:
66:05:bc:83:0b:18:6c:23:98:bb:3d:c7:43:14:b1:
a6:af:7e:7e:86:1a:54:21:69:b0:d7:eb:bb:6e:fa:
e9:4a:f9:3c:5a:04:84:77:1f:9b:ca:69:39:83:41:
23:0d:96:ff:9f:19:28:a3:fe:27:0f:ce:17:bf:e8:
9d:38:00:04:2c:d7:23:7e:13:b5:fa:31:7a:75:a9:
78:c5:78:eb:6a:1a:0d:10:10:62:30:c8:ef:3d:0d:
df:bc:92:0e:0a:ff:1b:33:ce:1f:25:51:00:c6:2e:
f9:69:b9:d4:8d:1a:2a:e5:ee:25:ad:42:0c:76:8d:
fc:23:be:0a:54:83:9c:e6:e8:fc:54:1a:dd:3c:6a:
9a:65:73:20:cd:7a:bc:fa:cc:5e:39:5f:6e:80:3c:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:E4:67:BE:AC:6A:7E:37:AD:48:BE:F0:B9:E4:30:98:42:02:DD
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/CF_kZ76san43rUi-8LnkMJhCAt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.96.0/22
91.198.46.0/24
185.90.224.0/22
Signature Algorithm: sha256WithRSAEncryption
88:e6:e1:1b:06:c3:7d:ce:16:42:9c:67:bd:07:e6:88:57:7d:
d1:83:b1:f6:eb:d5:30:ff:5f:97:33:f9:16:08:bb:bb:40:4c:
74:dc:ce:bc:69:96:4e:88:9c:81:9c:91:41:22:0c:a8:eb:40:
c7:ef:a6:e1:98:e5:83:5e:46:58:b8:88:6b:ae:c1:97:fb:9a:
04:3f:a5:e2:20:14:f3:45:3a:eb:60:4d:4a:09:77:0d:e8:50:
06:6b:27:51:c2:d9:19:f8:a8:fc:21:72:7f:dc:bb:d6:c8:2e:
63:06:eb:a8:de:1c:ad:bb:00:b8:dc:4e:4b:7b:31:68:d0:52:
ea:83:8b:9b:8c:66:fd:0e:0f:c8:93:ca:6c:a8:8e:9f:30:64:
4e:8e:00:bf:ba:0c:9d:6c:05:c8:d9:67:b3:9e:35:f6:31:0b:
23:2d:4d:94:3b:c0:a5:26:fa:a5:53:19:71:47:66:1d:22:5e:
64:84:8c:0f:e8:f5:47:0c:c1:ae:12:21:7c:40:09:6b:07:3f:
dc:ed:91:0e:76:88:15:1d:8e:fd:d6:4a:d1:a5:e6:1a:33:f1:
e2:b2:c5:7e:c9:a7:15:44:7a:f5:23:2d:02:92:62:28:c0:cc:
96:de:1a:1b:8b:f9:41:65:c8:ea:3f:cc:43:94:9a:68:e3:26:
92:5a:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:29 2024 by rpki-client on console-ams.rpki-client.org