Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/a8HS_VRykSdTG367v07HMjvvgbw.roa
File: a8HS_VRykSdTG367v07HMjvvgbw.roa (raw, json)
Hash identifier: 5ASFBITK2Jn9QhT65kZG8sWoxdkosevEWTjcyPYaKeQ=
Subject key identifier: 6B:C1:D2:FD:54:72:91:27:53:1B:7E:BB:BF:4E:C7:32:3B:EF:81:BC
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 0D61288F
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/a8HS_VRykSdTG367v07HMjvvgbw.roa
Signing time: Sat 01 Jan 2022 13:06:16 +0000
ROA not before: Sat 01 Jan 2022 13:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34762
IP address blocks: 91.198.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224471183 (0xd61288f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jan 1 13:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bc1d2fd54729127531b7ebbbf4ec7323bef81bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:34:08:bc:b2:01:f1:16:52:63:8f:ef:b6:
e3:19:9e:4e:9c:23:14:d5:b9:b7:65:7e:a3:1b:07:
5d:25:83:49:b4:5f:6f:93:cc:78:d4:b1:c7:c6:48:
34:ac:38:64:c5:21:fc:7a:ee:a6:b7:7b:e7:d5:70:
2f:ff:37:64:d7:c6:52:9e:8b:fb:15:ff:a8:fc:3d:
7a:bf:3d:36:50:6a:a5:7b:01:d3:e8:c2:aa:c9:fb:
b0:9f:93:6b:b8:ab:e5:2c:86:1a:b2:d7:53:8d:31:
5c:04:e9:e3:c9:b5:0e:51:37:66:fe:10:aa:36:26:
77:b2:ab:0b:56:68:a3:5c:cf:59:35:d3:9c:ad:3a:
91:0d:da:33:9f:8b:e1:4c:6f:75:03:af:3d:66:fd:
16:e9:02:17:65:e9:24:89:79:1b:42:2d:ef:af:09:
21:57:c9:3c:2a:49:86:cf:65:85:a6:33:38:16:12:
4e:41:46:fe:2f:17:12:d1:6b:7f:45:04:1d:b3:82:
70:cd:4f:31:d9:c1:22:44:b4:a6:2b:9b:5d:5a:12:
63:1e:50:99:56:96:1a:ef:98:31:f0:e3:59:c6:58:
af:7c:96:34:fe:0b:0f:67:78:0a:06:8c:8f:de:91:
66:18:df:31:f5:92:ce:ab:98:4d:8d:53:88:68:2c:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C1:D2:FD:54:72:91:27:53:1B:7E:BB:BF:4E:C7:32:3B:EF:81:BC
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/a8HS_VRykSdTG367v07HMjvvgbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.243.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:aa:10:f6:c1:a3:ef:9e:4a:86:4b:66:9c:b0:0f:67:99:a1:
33:c8:ff:09:86:95:78:ad:81:7a:cd:ab:e5:63:15:f7:1b:68:
10:05:89:66:f5:21:9a:2b:55:9c:32:a3:25:fd:bc:e7:74:6f:
83:61:6b:ae:0d:31:b7:17:b5:6c:3d:ab:9b:43:a3:0b:61:1f:
6f:3e:ba:4b:c4:63:a6:fe:38:c5:1e:b0:29:7b:7d:84:d1:65:
ae:98:0b:98:20:81:08:45:26:5a:90:82:2e:ba:3a:ff:b8:a2:
ba:1b:2d:22:ce:22:23:de:ec:12:3a:e9:73:fc:f1:ca:3b:32:
46:d0:c8:6a:be:65:33:64:bc:cd:b9:67:11:71:80:a0:49:e1:
8a:d2:c5:61:92:77:65:61:e6:2d:75:85:2d:ab:8f:04:8e:b0:
d0:07:c7:f4:86:74:a4:08:12:32:22:53:e5:48:9d:07:6e:1e:
2a:e7:b4:13:19:28:a3:ff:c8:2a:7d:2e:d8:58:a0:d3:59:03:
c3:e1:59:12:f7:28:c8:95:61:0b:44:d5:12:72:46:d8:52:59:
0d:1c:4a:d6:86:c3:f5:da:65:6f:4e:47:1c:90:1a:ab:3c:13:
68:82:38:f0:10:b6:7e:75:e0:52:06:72:03:0e:26:a8:5e:c5:
9d:01:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:16 2025 by rpki-client