Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/xt8E-6Xse8UrDqufJc5c_VASuzs.roa
File: xt8E-6Xse8UrDqufJc5c_VASuzs.roa (raw, json)
Hash identifier: Oopo4fGzTGC/HqZFjypZoOezXqVpTD6JiIwq3ecxoAQ=
Subject key identifier: C6:DF:04:FB:A5:EC:7B:C5:2B:0E:AB:9F:25:CE:5C:FD:50:12:BB:3B
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 01831FE8564FA1BFBD41B7FC2A956A05E538
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/xt8E-6Xse8UrDqufJc5c_VASuzs.roa
Signing time: Fri 09 Sep 2022 01:41:03 +0000
ROA not before: Fri 09 Sep 2022 01:41:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210612
IP address blocks: 91.246.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1f:e8:56:4f:a1:bf:bd:41:b7:fc:2a:95:6a:05:e5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Sep 9 01:41:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6df04fba5ec7bc52b0eab9f25ce5cfd5012bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:4b:a5:18:ee:48:4f:8e:ac:f6:c2:b1:a7:
2e:68:fb:f4:d2:ab:2e:63:ea:3b:73:7a:81:a8:69:
a1:69:19:33:8c:ad:cc:ca:22:20:41:4f:32:db:3c:
49:7a:b3:d1:1b:a2:0f:79:bc:82:58:e5:f9:0a:29:
5f:f0:c1:28:5b:38:43:24:53:10:fe:05:04:1f:97:
b2:8b:ad:0a:fb:f0:1b:5f:9b:ec:9d:8f:92:45:6c:
64:98:d8:25:8d:00:d8:f4:1a:59:83:38:6d:98:74:
03:cf:3f:66:fe:63:c0:55:d5:2c:f2:fd:0d:49:9f:
aa:46:b9:58:20:fd:01:96:92:98:0f:a0:76:38:56:
68:ea:8a:1a:90:ea:86:dd:9d:65:28:fc:62:73:51:
20:18:83:e0:e3:62:a0:be:ac:ac:f9:56:ea:a6:10:
01:76:1c:72:17:0b:51:3e:a9:c0:28:dc:32:f5:4f:
8b:6e:4f:42:aa:16:c7:98:ce:57:06:d5:90:02:d0:
34:f0:57:c9:86:b8:20:fd:92:d5:ec:82:f8:1a:5e:
e3:04:52:5b:00:a7:bf:e2:b1:5d:b0:96:cc:5f:fd:
eb:69:c0:0a:44:e6:1c:c8:c8:36:00:45:69:da:88:
07:9a:54:fa:1f:b9:47:0b:e9:3f:75:1c:fa:83:36:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DF:04:FB:A5:EC:7B:C5:2B:0E:AB:9F:25:CE:5C:FD:50:12:BB:3B
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/xt8E-6Xse8UrDqufJc5c_VASuzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.61.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b2:17:ea:2e:20:61:c4:4c:64:b7:04:fe:8f:6c:3d:d7:9d:
d6:72:cb:ff:2b:aa:1c:46:7f:dc:3c:08:c4:65:54:18:a6:56:
c1:2f:4b:28:ba:d0:f1:a3:0e:c0:14:47:40:12:fc:c1:96:65:
62:3d:01:1d:c9:c5:f4:91:67:69:16:51:35:38:3e:30:59:f5:
a0:64:08:4c:4e:87:6c:9d:cd:fd:16:8a:ee:c9:8f:0e:2b:c2:
de:ba:34:60:cf:16:a3:ea:16:2e:89:47:c9:d2:ae:97:05:80:
3e:87:f0:9d:bf:82:88:0f:6f:6c:73:55:67:99:b8:27:e3:22:
18:95:c5:7e:be:10:9b:40:a3:ac:17:df:aa:97:99:a2:7c:01:
e2:27:09:5f:88:02:93:b3:4c:58:13:0c:87:1c:ea:64:b6:4f:
d7:b3:91:13:f8:4c:53:86:97:50:4a:6b:cc:92:2e:38:a9:0e:
40:c4:b6:08:85:b6:ed:c5:e6:72:66:e0:be:f5:73:c6:99:fd:
c0:24:00:fb:f7:05:2d:0b:3c:6c:de:f4:5f:d0:3a:03:86:e4:
ee:95:74:93:1b:9a:f6:96:5e:65:8f:3f:d4:b0:85:9b:64:1c:
b2:50:8f:b9:60:82:d4:63:65:a6:fa:3f:60:a1:c4:85:a4:28:
56:9c:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:06 2024 by rpki-client on console-ams.rpki-client.org