Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/6AVRmGitGBZDeEmnHAJAoiWYxCw.roa
File: 6AVRmGitGBZDeEmnHAJAoiWYxCw.roa (raw, json)
Hash identifier: HaVQNWZkDKG+STEjgFr1NC8RZ1uUcqpA68L9LEajIt4=
Subject key identifier: E8:05:51:98:68:AD:18:16:43:78:49:A7:1C:02:40:A2:25:98:C4:2C
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 04C5DA70
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/6AVRmGitGBZDeEmnHAJAoiWYxCw.roa
Signing time: Thu 14 Apr 2022 10:02:34 +0000
ROA not before: Thu 14 Apr 2022 10:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 91.213.174.0/24 maxlen: 24
91.213.186.0/24 maxlen: 24
91.213.189.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
91.216.215.0/24 maxlen: 24
91.208.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80075376 (0x4c5da70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Apr 14 10:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e805519868ad1816437849a71c0240a22598c42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:5b:0a:87:79:fa:e1:60:3a:5a:2c:60:49:
3b:cf:be:2c:c0:d3:94:05:ae:b1:8f:89:5d:15:b9:
33:d1:58:a0:cb:09:20:9b:96:9c:94:7b:e5:bf:fe:
86:85:ee:9d:4e:af:1b:b6:33:37:95:be:a3:45:5d:
f1:a8:9f:78:d1:84:9a:fb:bf:1d:62:d8:c0:17:03:
64:fa:39:ff:64:80:7f:b4:9c:d9:90:2b:81:2a:6e:
c2:f6:bd:ca:7e:53:ba:ad:c7:4b:d5:8b:e1:b9:c8:
24:f5:78:5c:26:97:44:85:15:37:17:88:e5:b2:84:
15:7c:eb:e3:3d:6a:b1:68:3b:f0:c8:a0:b6:bf:44:
f1:49:5f:45:67:01:4b:f3:5d:14:53:93:48:d3:93:
a3:89:38:e7:d0:ae:09:9a:df:0d:8d:43:d2:69:cc:
7c:76:93:3c:25:e8:4d:ac:d5:c4:61:40:f8:bb:55:
95:90:39:d5:20:89:f3:2f:46:e0:87:d9:fa:72:d3:
fe:14:e0:a0:a3:64:e5:1f:9f:4b:57:71:6e:32:56:
15:bd:90:32:f6:3f:ed:83:c9:86:d9:f2:54:d7:9b:
8c:ef:a5:c7:a0:35:ea:e2:bc:98:4a:52:c0:09:eb:
fa:4f:aa:9f:44:7c:f9:cf:3e:0c:c4:78:7c:6d:14:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:51:98:68:AD:18:16:43:78:49:A7:1C:02:40:A2:25:98:C4:2C
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/6AVRmGitGBZDeEmnHAJAoiWYxCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.104.0/24
91.208.109.0/24
91.213.174.0/24
91.213.186.0/24
91.213.189.0/24
91.213.200.0/24
91.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1a:8e:ec:1c:72:c8:c7:ef:55:83:ef:2f:56:3d:62:a2:ce:
b6:75:22:5e:ef:1e:c0:0d:da:6e:38:c0:34:6d:35:85:58:e3:
07:1e:55:c7:d0:17:55:55:96:6a:d9:08:fa:d2:a5:9d:87:25:
9a:d3:f3:09:46:a2:60:86:a1:13:bb:50:0c:8d:65:f7:91:0b:
e1:f5:57:fb:3e:c7:e7:54:b2:c5:99:11:7b:f8:a8:07:61:13:
16:2d:30:f4:09:cf:2b:14:82:45:b4:99:2e:fa:32:e3:98:9a:
f0:d8:55:0f:02:1f:1b:81:8e:32:e7:e2:ae:5b:93:e7:37:91:
c9:f7:c2:2b:93:66:09:8e:36:c4:a8:09:8a:c3:70:8d:39:b0:
0d:2b:db:cb:34:f7:d0:1d:58:17:0a:c5:1d:4c:52:18:82:75:
4b:e5:99:19:0a:88:e3:25:af:28:46:d3:76:c6:9c:1f:8f:22:
88:3f:25:d9:1d:c2:e8:d8:f9:18:a8:5e:56:8d:4f:5a:37:13:
e7:3d:49:62:c3:3a:60:7c:29:ab:d5:0e:08:c9:d5:8d:04:9f:
82:5c:67:c3:4f:4e:a3:fe:5a:c9:0d:70:ce:88:bc:2f:78:90:
7c:5d:fa:13:d6:d5:b2:bf:bb:4b:0b:ac:e4:29:6f:13:07:0a:
90:c7:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org