Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/vK66FBjcWadaHtd7n9SL_K6RPHY.roa
File: vK66FBjcWadaHtd7n9SL_K6RPHY.roa (raw, json)
Hash identifier: VM54uax5rf64f5h0nuNe3o46HYzFl3LkNr7sNbgarI0=
Subject key identifier: BC:AE:BA:14:18:DC:59:A7:5A:1E:D7:7B:9F:D4:8B:FC:AE:91:3C:76
Certificate issuer: /CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Certificate serial: 074361D8
Authority key identifier: 18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/vK66FBjcWadaHtd7n9SL_K6RPHY.roa
Signing time: Sat 01 Jan 2022 02:56:15 +0000
ROA not before: Sat 01 Jan 2022 02:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47577
IP address blocks: 91.208.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121856472 (0x74361d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Validity
Not Before: Jan 1 02:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcaeba1418dc59a75a1ed77b9fd48bfcae913c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:1a:b5:04:a7:37:3e:66:07:dc:b0:3a:88:
fc:ca:c3:77:9f:86:2b:de:29:8c:00:c5:7c:f4:88:
b4:eb:78:0e:d7:47:e5:0a:60:0a:29:d7:74:e0:45:
fa:ba:53:8a:11:19:d3:01:ad:25:d9:08:ab:b9:7d:
2a:71:95:96:77:f2:60:60:3d:58:59:b7:ec:7f:66:
1a:72:e6:7f:fa:5e:9b:27:86:79:60:92:01:65:89:
6f:97:82:52:80:5f:73:3e:5a:73:a2:dc:41:eb:87:
21:0d:16:2a:2f:4e:8b:48:0d:4e:f5:5f:c4:e0:63:
74:52:13:27:a2:aa:0e:66:9c:bc:80:e4:84:ae:c3:
45:c9:37:c9:e5:63:21:5e:99:f0:b6:ac:1e:a8:19:
4d:92:4d:a0:2d:66:7d:79:d7:4f:1b:6a:f8:06:02:
d8:0e:48:de:f3:df:c6:e6:92:ba:1b:a0:40:6d:aa:
d9:52:19:c3:90:d6:60:9e:49:b2:a2:b9:81:5d:72:
56:9d:89:4c:d7:20:82:c7:57:86:05:66:98:b7:1f:
7f:56:f0:05:6d:fa:00:21:40:31:05:32:b0:b6:87:
d2:42:df:5c:24:73:53:41:13:9e:52:fc:4e:5d:cb:
e7:8b:df:ec:32:a4:1d:31:8b:52:8f:36:76:f6:53:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:BA:14:18:DC:59:A7:5A:1E:D7:7B:9F:D4:8B:FC:AE:91:3C:76
X509v3 Authority Key Identifier:
keyid:18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/vK66FBjcWadaHtd7n9SL_K6RPHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.42.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b3:39:44:94:89:23:d6:17:3c:b9:ac:c7:08:55:af:38:8b:
ac:ef:f2:71:89:3d:6a:c4:0a:ea:26:62:2f:b5:b5:df:44:f2:
bc:db:5b:ee:a2:15:e1:48:08:6d:b6:e5:4e:0d:b9:ec:13:9e:
47:77:70:75:f8:34:8b:15:c0:ac:2d:42:85:63:6f:03:48:82:
c7:ba:1f:96:34:cb:d1:4d:5f:cb:d6:a6:ad:32:04:56:1f:1a:
db:13:aa:27:b3:b2:96:0d:50:ed:98:18:38:f1:44:05:3f:8a:
bd:dc:c7:ed:04:01:64:c6:80:57:85:c4:b6:3d:b3:b1:75:7a:
88:ff:d5:a4:02:3c:95:47:57:5b:ad:38:c8:91:c7:b3:c6:e5:
20:2c:c9:31:00:49:bb:11:74:da:5f:65:ac:7b:4d:4e:50:f1:
22:5a:c9:90:11:6a:ce:2a:ba:d4:63:08:28:4e:69:ed:e8:58:
f1:b6:99:8a:c9:d4:1b:bf:02:9c:46:bc:5d:d2:51:e4:f2:88:
66:1a:16:ab:34:bf:8d:67:65:21:cc:27:67:34:33:80:35:06:
87:8e:40:42:3f:b0:e3:dc:a8:b5:53:8d:5f:72:52:0d:6b:fd:
f3:30:dc:97:40:a1:7a:2d:9c:54:b1:a6:f3:c3:88:49:3a:ae:
bf:e6:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org