Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/1gGW3q3-7ufnRdlMuZhp8dyxOHk.roa
File: 1gGW3q3-7ufnRdlMuZhp8dyxOHk.roa (raw, json)
Hash identifier: U/Wb7elNxCY7hMNb57U9xUXCSoqPBnLGz8GTcPOtw0k=
Subject key identifier: D6:01:96:DE:AD:FE:EE:E7:E7:45:D9:4C:B9:98:69:F1:DC:B1:38:79
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 03EAD437
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/1gGW3q3-7ufnRdlMuZhp8dyxOHk.roa
Signing time: Sat 01 Jan 2022 01:03:11 +0000
ROA not before: Sat 01 Jan 2022 01:03:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212777
IP address blocks: 91.194.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65721399 (0x3ead437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Jan 1 01:03:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d60196deadfeeee7e745d94cb99869f1dcb13879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:e9:a8:14:af:4d:9d:60:f2:b4:1d:9d:e5:
c5:f7:00:29:cc:73:98:d1:d0:fc:f0:c9:95:b1:48:
22:1f:5f:1a:96:0c:4a:83:9a:e0:c6:62:81:ef:d7:
9b:f2:e5:01:61:77:29:ae:ac:3e:5a:f7:ad:51:cb:
51:3a:ca:43:a2:5d:96:8a:0f:1e:b1:e1:99:c8:ed:
2a:92:c7:03:ed:74:dd:73:36:cf:bc:ee:d7:87:ff:
f8:16:74:be:bd:48:dc:a9:40:0d:7a:90:3c:b4:0d:
43:7d:71:f6:f6:21:85:cd:cc:41:a3:8a:b6:a0:33:
49:3a:8d:4d:00:b5:c1:8c:73:15:87:ac:ae:50:92:
e5:2a:b6:e7:69:8a:98:ec:be:a7:e5:ce:fa:9d:de:
2a:b6:cb:2f:bd:b4:cc:77:e4:1e:af:27:2c:74:a3:
76:24:12:25:90:12:23:00:7e:95:e5:b7:9f:7e:80:
25:2b:9f:2c:1a:98:2c:26:cd:42:69:d8:c8:f5:e5:
c7:8d:48:f7:90:74:85:75:7a:8d:35:d7:cb:d3:0b:
14:bb:bb:b8:cd:18:32:d3:19:60:95:e3:fd:ec:6c:
28:9d:14:9a:fd:df:b9:2e:ce:d4:0d:54:ff:d7:79:
de:e1:ae:68:ae:44:4c:04:5d:0d:aa:1d:b1:48:77:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:01:96:DE:AD:FE:EE:E7:E7:45:D9:4C:B9:98:69:F1:DC:B1:38:79
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/1gGW3q3-7ufnRdlMuZhp8dyxOHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.111.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4f:09:fc:dc:21:f1:d6:69:8a:2e:48:67:3a:a4:5b:cd:7f:
54:7d:73:5f:cd:1b:80:c2:68:a7:05:b7:6c:4c:e1:b3:1e:f7:
15:7f:dd:17:e5:d7:f8:cf:99:03:df:b7:88:e3:9b:2d:db:94:
79:94:a0:92:83:88:c2:85:4e:fa:14:18:e3:79:ed:ac:69:83:
4d:ca:78:39:58:5c:8f:a5:df:a4:51:93:f1:b1:21:a2:48:71:
9d:78:57:05:51:db:d1:bd:92:24:60:a8:b9:2d:c3:2b:fe:d8:
c4:70:df:8d:5a:bd:36:86:3d:e9:5f:f7:69:a6:f5:79:ca:d2:
5a:9b:c2:93:58:41:fb:22:84:e9:7b:13:1a:96:97:1d:fe:51:
4f:7e:c7:34:dd:eb:7a:5c:48:c1:dd:fd:4b:a1:2a:d6:f0:51:
be:3b:38:85:59:0a:77:e5:b1:c7:31:f7:cb:f7:b4:ad:4a:c1:
b5:15:69:56:95:ac:58:e5:8d:ee:3c:9d:e0:7b:c1:82:78:0b:
d7:f7:59:25:6a:f9:ff:b7:19:1a:28:bb:ac:84:35:60:12:d5:
37:7d:8a:6c:9a:5f:54:0f:69:51:53:30:0c:70:e3:8c:da:77:
06:62:f7:6a:86:8e:7f:60:64:ac:f6:20:33:1b:c6:30:e3:b4:
5c:fb:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:19 2024 by rpki-client on console-fra.rpki-client.org