Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/btphNfitGB_oGDt4Ilihqf3fUrw.roa
File: btphNfitGB_oGDt4Ilihqf3fUrw.roa (raw, json)
Hash identifier: byHuiRLQ7dJOU/5/MutSEB8WpAM7OiUjZLA7S7YyvlE=
Subject key identifier: 6E:DA:61:35:F8:AD:18:1F:E8:18:3B:78:22:58:A1:A9:FD:DF:52:BC
Certificate issuer: /CN=273a88c578166988506e13642adb12f631e0a3c2
Certificate serial: 0183D07DEB3FA62701D73FB2FD09081EBC09
Authority key identifier: 27:3A:88:C5:78:16:69:88:50:6E:13:64:2A:DB:12:F6:31:E0:A3:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzqIxXgWaYhQbhNkKtsS9jHgo8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/btphNfitGB_oGDt4Ilihqf3fUrw.roa
Signing time: Thu 13 Oct 2022 08:37:36 +0000
ROA not before: Thu 13 Oct 2022 08:37:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47950
IP address blocks: 91.234.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:7d:eb:3f:a6:27:01:d7:3f:b2:fd:09:08:1e:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=273a88c578166988506e13642adb12f631e0a3c2
Validity
Not Before: Oct 13 08:37:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eda6135f8ad181fe8183b782258a1a9fddf52bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:ce:0d:57:c8:8a:ab:a8:4d:47:ee:d2:4b:
8d:06:73:0c:9a:38:03:52:cd:06:20:03:d9:d4:54:
0c:e5:81:08:4f:0c:60:80:14:ea:1a:a6:0e:98:7c:
eb:ba:60:1e:d9:95:ec:0e:3c:c9:f6:84:7f:a0:e2:
68:b9:d3:7d:20:73:6f:37:8e:e0:5a:e3:6c:4d:ab:
2b:78:37:8d:b1:86:bf:1c:49:ee:b4:86:46:4e:c4:
28:a3:92:38:3f:8a:4c:3a:80:8d:a2:49:2f:da:2d:
f3:10:90:ba:0d:3a:1c:3f:9a:31:ca:4c:82:45:4a:
5c:61:36:ca:6b:ac:20:b5:84:14:cc:5a:21:9e:6a:
93:79:32:fa:67:b8:2c:86:46:76:88:e2:e6:f5:30:
de:a3:07:15:12:c1:ab:26:87:e1:bd:34:6f:a9:7e:
48:43:85:c8:ab:09:e4:8a:65:ca:27:9c:62:bb:85:
84:d6:9a:34:99:d3:3f:b8:46:b8:24:da:d5:49:30:
34:06:6d:71:94:3c:a1:e1:45:17:b2:f4:5f:12:bd:
c4:81:d7:ef:8f:41:a2:11:eb:75:e1:9c:7f:d3:40:
c2:f1:5d:e8:de:37:6d:9f:07:7c:f4:e1:90:77:46:
69:77:0c:6a:66:69:60:da:9e:5e:f2:5a:53:af:6b:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DA:61:35:F8:AD:18:1F:E8:18:3B:78:22:58:A1:A9:FD:DF:52:BC
X509v3 Authority Key Identifier:
keyid:27:3A:88:C5:78:16:69:88:50:6E:13:64:2A:DB:12:F6:31:E0:A3:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzqIxXgWaYhQbhNkKtsS9jHgo8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/btphNfitGB_oGDt4Ilihqf3fUrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/JzqIxXgWaYhQbhNkKtsS9jHgo8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cd:fc:f1:10:e3:8a:a2:b1:fc:a8:28:47:e9:f1:8d:ca:30:
ea:5c:c7:5e:f3:1c:37:8d:e0:36:1a:1a:5c:3d:34:ad:fd:39:
ac:ea:5d:73:31:68:b5:88:71:38:06:8f:e9:65:df:33:85:25:
54:ff:0c:74:ff:52:20:a2:40:c6:60:bc:ac:19:89:3f:2d:d8:
3e:4e:44:08:c0:06:da:de:0f:94:4e:5a:ab:14:ea:2a:53:c8:
11:05:50:24:4a:73:af:b7:b2:da:3a:85:dd:58:12:f8:cc:09:
b1:01:09:db:b0:bc:e5:22:6a:ed:7d:e8:a0:0c:52:4b:51:2c:
0b:5a:b2:7f:81:76:73:1f:74:2b:cf:74:28:c9:f9:d2:0f:3f:
f1:7a:87:8d:fb:7e:3c:9f:49:4b:c8:49:3a:85:0f:b8:47:f6:
33:52:75:7d:eb:f2:92:31:3e:47:00:1d:68:94:dc:fa:eb:b9:
84:7f:c8:d8:69:e1:f3:22:00:fa:4f:19:d5:2f:62:fc:a7:1d:
aa:b3:6c:97:a2:e7:da:91:c1:6f:bc:33:7f:0c:84:2d:ac:b8:
81:20:ce:39:be:cb:06:7f:cd:96:42:55:32:b5:ba:33:4c:52:
01:ba:ab:8e:2a:15:c5:59:39:4b:e3:a0:a7:b0:e0:48:a9:08:
c5:ed:04:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:27 2024 by rpki-client on console-fra.rpki-client.org