Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/aJjUBuH8-VsnCfm9uuTA6QkKQYA.roa
File: aJjUBuH8-VsnCfm9uuTA6QkKQYA.roa (raw, json)
Hash identifier: 09zMGsMiHv/0g3hS7+YTLbWxgW8OTnKJilZByYQQrTo=
Subject key identifier: 68:98:D4:06:E1:FC:F9:5B:27:09:F9:BD:BA:E4:C0:E9:09:0A:41:80
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 03CCCE3A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/aJjUBuH8-VsnCfm9uuTA6QkKQYA.roa
Signing time: Sat 01 Jan 2022 02:56:36 +0000
ROA not before: Sat 01 Jan 2022 02:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139659
IP address blocks: 91.208.240.0/24 maxlen: 24
91.208.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63753786 (0x3ccce3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 02:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6898d406e1fcf95b2709f9bdbae4c0e9090a4180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:71:4b:c3:a3:9f:4b:f5:41:da:be:7d:5b:
fb:ad:e1:9f:fd:a2:99:b3:40:6d:64:e7:c5:fb:3e:
84:bc:37:e0:35:4e:65:bb:0f:53:65:6a:de:6c:c2:
89:ae:4f:1a:5c:ed:53:2a:3d:16:45:42:2d:a8:e0:
46:40:54:3b:81:0a:1a:6e:83:9b:06:bb:af:db:1d:
23:55:a9:79:40:1c:fc:42:e4:e0:1d:0a:1a:45:be:
22:5d:24:72:47:a5:c9:77:99:e3:26:af:ce:2d:86:
c2:ea:c9:f6:10:91:c5:ac:e2:0f:0c:a7:27:8a:8f:
df:26:98:2b:e7:51:66:d3:49:7f:25:49:49:40:a8:
82:2a:5a:7c:e6:51:b8:12:d5:90:f3:11:37:1e:25:
05:72:e2:d1:05:47:f6:57:79:77:fa:50:b6:1f:a7:
57:b8:bc:c8:7e:5d:b5:7d:b3:63:1b:6f:56:4c:13:
ec:08:34:e9:72:b8:8d:f3:6f:5d:8b:86:7e:b5:22:
43:a6:11:a6:55:16:09:bb:00:fd:6b:4b:e5:1d:a0:
1c:34:b5:65:29:e3:95:97:66:46:c5:3e:f5:4e:b1:
4c:ed:87:65:a9:f0:cb:95:52:9c:c0:d3:b1:f1:12:
4d:cd:70:e4:c6:5e:83:55:32:4e:9a:11:e8:3f:61:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:D4:06:E1:FC:F9:5B:27:09:F9:BD:BA:E4:C0:E9:09:0A:41:80
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/aJjUBuH8-VsnCfm9uuTA6QkKQYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
09:16:8d:26:2d:65:58:a7:15:f4:2a:8a:eb:58:48:a4:7e:79:
1d:45:6f:eb:36:30:68:7a:2f:83:99:94:b5:1c:9e:e4:f3:cd:
60:24:1c:c5:f2:cb:1b:10:1b:68:66:c7:f4:6f:0d:6b:87:44:
c3:bc:88:14:41:a2:f7:67:8a:7d:14:da:08:9e:8a:a9:c6:7c:
cf:b4:08:6e:e2:f1:f0:84:64:e1:4d:b6:fc:d6:8b:9e:18:27:
a3:5e:2f:67:28:a8:73:a2:df:f2:9e:74:d9:82:21:ba:44:ca:
67:06:f0:1b:83:9c:05:00:59:2a:b3:f9:26:56:0f:b3:3f:07:
b3:c1:25:e0:d2:1e:99:6e:03:67:7a:a0:f8:cd:a7:5d:af:27:
94:a3:97:d4:4f:57:dc:45:ce:6e:cd:b2:02:ad:12:0f:df:ad:
5a:13:3a:6a:4d:9d:b2:9b:8a:82:da:63:2c:d4:68:fe:84:38:
19:c0:38:26:ac:0b:ab:3a:e9:d1:07:64:0f:b2:85:3d:81:31:
c8:55:36:9d:4f:f7:12:37:68:1e:18:19:b4:f6:b7:cb:bb:7d:
fd:f5:c9:86:72:97:e8:52:d7:46:07:f0:93:00:d7:24:ca:e5:
48:b5:47:2c:b3:ee:ab:89:1b:84:cb:97:81:ee:11:c9:27:1a:
c2:a1:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org