Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/7FlU96sSSviZsy-T3MdnmU9Bz-o.roa
File: 7FlU96sSSviZsy-T3MdnmU9Bz-o.roa (raw, json)
Hash identifier: UQBF70XBv1mIyCTaPbEqBccsswYhubJuZqclXj3TSkQ=
Subject key identifier: EC:59:54:F7:AB:12:4A:F8:99:B3:2F:93:DC:C7:67:99:4F:41:CF:EA
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 018524A648274A49EE04567BA4D03951FCC6
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/7FlU96sSSviZsy-T3MdnmU9Bz-o.roa
Signing time: Sun 18 Dec 2022 09:52:35 +0000
ROA not before: Sun 18 Dec 2022 09:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210402
IP address blocks: 91.106.36.0/24 maxlen: 24
91.106.37.0/24 maxlen: 24
91.106.38.0/24 maxlen: 24
91.106.39.0/24 maxlen: 24
91.106.57.0/24 maxlen: 24
91.106.58.0/24 maxlen: 24
91.106.56.0/24 maxlen: 24
91.106.52.0/24 maxlen: 24
91.106.60.0/24 maxlen: 24
91.106.61.0/24 maxlen: 24
91.106.62.0/24 maxlen: 24
91.106.63.0/24 maxlen: 24
91.106.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:24:a6:48:27:4a:49:ee:04:56:7b:a4:d0:39:51:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Dec 18 09:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec5954f7ab124af899b32f93dcc767994f41cfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:f4:ee:bc:4a:e6:a1:27:4a:a2:28:5e:60:
64:72:02:4b:5b:55:d8:1b:56:7d:b0:e6:7b:b8:b7:
e6:95:92:7a:20:76:ed:33:b9:49:f1:2f:fd:e1:14:
4f:7a:b9:85:b2:78:4b:41:8f:88:a9:71:1c:95:2f:
80:f0:42:78:8c:26:94:ec:a0:68:be:d8:04:8f:96:
48:44:f4:69:46:25:5d:b4:30:76:47:f3:b0:21:4e:
37:b0:32:6e:e3:fe:e8:ba:bf:ed:f0:69:bf:21:d7:
38:72:ad:31:65:c4:07:52:59:e5:f8:67:da:a6:a9:
77:93:30:1d:06:6d:32:15:98:59:17:00:82:8f:c1:
58:6f:d4:d0:45:a8:ba:5e:ca:7d:7b:3c:60:41:16:
a6:c5:5d:0d:8c:ad:34:3a:2e:f7:ee:43:00:3e:55:
91:d6:4b:ea:f8:26:b2:0e:94:39:e1:20:30:26:5e:
24:df:3c:9d:90:4c:fd:12:06:23:c4:a1:2a:6e:0c:
c0:0e:a3:a4:ef:d5:28:d3:87:d7:55:ca:fd:37:10:
12:d9:2f:7f:7e:72:21:2d:5d:58:b2:20:0a:bc:74:
c4:87:9c:3a:b8:fd:df:52:0d:6a:ba:23:5e:5a:47:
de:1a:16:a9:18:c4:ac:62:1e:66:42:6f:04:42:c0:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:54:F7:AB:12:4A:F8:99:B3:2F:93:DC:C7:67:99:4F:41:CF:EA
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/7FlU96sSSviZsy-T3MdnmU9Bz-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.36.0/22
91.106.52.0/24
91.106.56.0/21
Signature Algorithm: sha256WithRSAEncryption
37:aa:23:d2:08:be:45:03:0a:48:11:d4:b7:6e:4d:1f:19:16:
9f:ab:20:10:42:5c:c8:08:d4:e4:0a:de:80:c5:b5:08:24:97:
69:64:7b:ea:01:3a:18:06:5d:39:02:d5:77:12:08:1a:f8:06:
89:92:d9:31:33:b4:47:81:84:95:14:68:18:55:0a:af:22:4e:
af:1a:8b:08:d5:0d:13:3c:39:78:68:7c:78:b5:a8:1f:a1:3a:
54:a7:2e:71:b2:5c:68:59:25:10:e7:a0:25:bb:6c:e2:d5:a1:
80:d5:79:50:9f:fc:17:43:36:6d:dd:5d:50:57:04:c1:f3:d6:
7d:32:99:ec:46:6f:e2:f8:29:e3:0c:88:e0:cd:47:54:0b:0a:
af:a2:a5:4a:e2:a6:e1:3d:bf:d7:7f:e9:af:30:38:63:f6:48:
a3:3b:4e:44:53:bc:11:ef:7c:e7:dc:05:71:f1:27:5e:d5:4b:
f4:01:ea:af:63:40:f1:d1:19:76:61:b8:7c:e3:cc:b3:da:b6:
04:f6:d9:f9:26:01:cf:a7:a5:ba:ca:74:25:6e:93:b4:26:1c:
91:6d:8a:b6:db:d7:df:12:4d:61:e3:d1:65:79:3a:e7:f4:74:
8a:4c:f3:40:26:29:01:92:2d:3a:5a:76:61:c7:26:a1:3b:96:
66:75:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org