Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/6rXliYZuQ1_BzFqtYfi9HQZShM0.roa
File: 6rXliYZuQ1_BzFqtYfi9HQZShM0.roa (raw, json)
Hash identifier: A6FtCr5XZY4OU6hvY4JMCottkebtV0VSzml9e1LwIvo=
Subject key identifier: EA:B5:E5:89:86:6E:43:5F:C1:CC:5A:AD:61:F8:BD:1D:06:52:84:CD
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 04671422
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/6rXliYZuQ1_BzFqtYfi9HQZShM0.roa
Signing time: Sat 01 Jan 2022 00:50:28 +0000
ROA not before: Sat 01 Jan 2022 00:50:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58272
IP address blocks: 91.199.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73864226 (0x4671422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jan 1 00:50:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eab5e589866e435fc1cc5aad61f8bd1d065284cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:1a:41:91:61:bb:ad:02:38:9e:02:85:75:
2a:4d:86:dd:32:11:b3:0f:95:c7:5c:cf:d4:f0:02:
0a:e2:ae:da:e9:6e:ea:ce:ff:b9:c8:2e:ee:27:bb:
a7:ce:d8:05:cc:88:0d:16:b3:fd:22:f0:0e:45:9e:
52:b7:30:ef:0b:df:41:46:a7:91:93:b8:df:9f:de:
79:9f:f2:72:7e:da:50:13:70:b5:4d:e7:01:c1:60:
91:5a:2e:10:c8:09:4d:b5:8a:3e:2b:53:e5:c1:c4:
d5:2a:7e:cd:b5:fd:09:3e:92:91:04:b2:86:17:c6:
f8:5c:48:69:a0:90:c1:6e:d7:4f:81:f2:ad:ff:3e:
f2:93:0b:a6:20:3d:f8:1b:8f:2b:1d:88:e1:2b:4b:
2c:14:20:7f:ab:75:d0:d4:43:f6:99:ce:55:9e:16:
40:f3:15:cd:e7:27:69:a0:51:40:8f:48:e3:cb:03:
17:75:83:16:7f:55:1a:64:da:48:c9:fb:88:e1:f1:
4b:6a:08:23:57:0d:af:29:1f:4c:34:89:d0:a5:d6:
cf:11:75:a1:47:3c:1b:94:ce:19:97:80:fa:a8:11:
6f:09:15:73:b4:6f:c7:ce:ba:5e:6a:15:38:bf:e3:
cb:dc:d2:6b:a4:44:9f:a9:81:d9:e0:63:7e:dc:e9:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:E5:89:86:6E:43:5F:C1:CC:5A:AD:61:F8:BD:1D:06:52:84:CD
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/6rXliYZuQ1_BzFqtYfi9HQZShM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9e:e7:fb:1b:ae:83:24:45:18:8c:e8:a7:81:3e:6f:26:20:
1d:ab:dd:db:f6:62:42:41:f6:de:1d:42:bc:18:7a:5d:98:e1:
2f:7d:4e:b6:31:ab:7d:6e:10:8e:ea:07:21:8e:5d:7b:69:c5:
b6:ca:a7:03:c2:98:f3:a5:c1:30:26:ae:d7:fe:3f:b0:b8:27:
73:d7:c5:30:e0:25:51:f5:24:f3:2f:86:f3:a0:8a:03:15:f2:
a3:10:1c:21:6a:46:36:6a:a1:a8:83:45:4b:43:03:a5:d0:e7:
c2:f7:8c:9f:ff:77:97:54:fc:97:f3:a9:e4:6c:79:b8:c4:28:
0d:dd:7c:55:ce:17:75:d2:c9:ed:fb:d5:a0:fc:df:99:fa:7b:
b2:e0:9c:74:f1:b0:ef:c2:be:f6:f9:7f:f9:9d:0b:cf:b2:5e:
96:b1:d8:33:dd:1b:ad:f9:02:cc:e6:3b:04:d2:2b:c0:24:37:
17:b6:97:05:fd:48:10:97:77:62:ce:46:e2:95:de:df:9a:13:
a5:c0:97:95:d1:0e:41:df:b8:91:01:a3:47:15:18:2a:49:08:
56:71:35:9e:10:25:5b:96:07:c9:e6:17:56:41:0b:21:cd:f5:
be:cf:c4:9a:39:c2:b9:36:37:54:a0:5c:90:eb:0b:5a:97:7b:
6c:d8:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org