Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/v6Gh3M_buiN_3KtjTmD4tduM-Ps.roa
File: v6Gh3M_buiN_3KtjTmD4tduM-Ps.roa (raw, json)
Hash identifier: ALjRhbNDlIEOiv8bedsCxASwpAhSIuV3xJfQ6l9IAvY=
Subject key identifier: BF:A1:A1:DC:CF:DB:BA:23:7F:DC:AB:63:4E:60:F8:B5:DB:8C:F8:FB
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 087F83E1
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/v6Gh3M_buiN_3KtjTmD4tduM-Ps.roa
Signing time: Sat 01 Jan 2022 10:00:03 +0000
ROA not before: Sat 01 Jan 2022 10:00:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12642
IP address blocks: 91.195.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142574561 (0x87f83e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 10:00:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa1a1dccfdbba237fdcab634e60f8b5db8cf8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:7d:98:13:6e:61:ab:8d:1a:a7:d2:34:c3:
c4:d6:dc:bf:f1:58:b9:91:9c:7c:ff:58:66:3b:f2:
5b:18:d1:b9:e5:24:43:a4:1b:63:6a:56:49:7d:ad:
2c:c2:1a:8b:0c:30:34:13:22:79:57:d1:d0:3c:cb:
b9:3a:31:ac:5d:4c:d5:36:ab:f0:40:73:0a:b1:88:
96:67:72:5d:15:6f:43:67:a4:c1:20:58:ff:d3:6b:
c7:cb:d5:f5:8e:35:68:52:9b:26:ee:54:e2:75:c7:
7b:0a:66:ff:28:40:ed:af:8a:2c:e9:8e:e3:7b:e0:
30:16:cc:31:fb:c5:b4:84:8f:e5:a6:f4:41:44:e9:
d6:09:c2:6f:8a:2a:1d:47:2c:b3:74:cc:07:ec:f1:
2f:6f:9f:9c:7a:ab:56:f7:fd:59:59:77:fc:5c:fd:
2b:2d:49:75:ce:4f:12:82:73:f4:e6:31:f9:10:29:
31:22:9a:a1:50:a7:9f:91:42:f9:76:87:aa:0d:d5:
11:b0:39:0d:c9:7d:92:e6:7a:15:56:ae:3a:65:50:
c5:11:c2:07:f2:0d:de:29:09:05:66:b9:01:f7:b3:
85:0d:ee:05:dc:1f:d6:88:09:d1:21:c3:c0:33:56:
72:43:9d:f5:20:85:a3:40:53:93:5e:13:e2:9d:f2:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:A1:DC:CF:DB:BA:23:7F:DC:AB:63:4E:60:F8:B5:DB:8C:F8:FB
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/v6Gh3M_buiN_3KtjTmD4tduM-Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:99:d5:14:3b:5b:ca:50:0e:43:5c:bf:a4:4c:ea:e5:9c:aa:
da:a9:76:4c:f7:c7:11:b2:19:92:f8:26:bf:52:e1:19:8a:e0:
70:3a:b1:bb:85:17:a0:2c:4d:90:a2:3b:28:f3:d8:bb:d5:43:
a6:3f:1b:46:c1:6c:80:57:07:54:b4:3a:36:68:0d:45:fe:22:
d9:a9:b5:74:4e:56:61:84:d0:a2:2f:44:72:3b:b1:9e:33:a5:
ac:6f:18:02:89:17:23:85:94:5e:0e:f3:bc:eb:e3:0e:dc:09:
32:c4:aa:53:6c:28:35:b2:ce:65:33:ce:6d:01:8d:e8:e6:79:
20:64:15:90:ea:35:f0:4a:e8:d2:5f:76:97:5a:50:fb:55:d1:
71:a3:0c:8c:d3:04:a1:93:18:5a:e9:ed:31:0b:42:80:a1:b0:
88:f8:df:4f:b0:20:0c:19:f3:64:7e:17:a3:f6:a4:9c:e9:c5:
da:9e:6b:89:89:04:77:56:5f:e4:3f:2d:e7:1d:a3:65:24:71:
8a:2e:8d:fb:a7:89:e7:93:50:00:7f:b3:1a:56:df:62:3c:68:
1e:68:3d:24:9d:56:d2:8e:7d:79:53:c3:50:bd:ac:91:a7:52:
d0:b8:70:c8:ee:91:2e:12:a1:90:6d:c7:e3:97:6c:b1:a7:fb:
ab:e1:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:22 2024 by rpki-client on console-fra.rpki-client.org