Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/aBeXpFM36bxrgdBrxeKGfjxRNLk.roa
File: aBeXpFM36bxrgdBrxeKGfjxRNLk.roa (raw, json)
Hash identifier: TmnAGWkw7AQ108tW+vWsVDpuSVj56BOrfbRuLnXhb5A=
Subject key identifier: 68:17:97:A4:53:37:E9:BC:6B:81:D0:6B:C5:E2:86:7E:3C:51:34:B9
Certificate issuer: /CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Certificate serial: 0110FB
Authority key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/aBeXpFM36bxrgdBrxeKGfjxRNLk.roa
Signing time: Fri 10 Jun 2022 09:21:02 +0000
ROA not before: Fri 10 Jun 2022 09:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57117
IP address blocks: 91.201.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69883 (0x110fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Validity
Not Before: Jun 10 09:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=681797a45337e9bc6b81d06bc5e2867e3c5134b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:76:37:ff:b3:75:31:c7:45:60:e0:7c:4b:
7d:0a:10:20:26:bb:89:b5:2e:d3:15:06:ce:be:1c:
de:d6:d3:57:60:46:45:22:93:c7:1d:80:00:4a:88:
7b:2d:d8:87:54:63:ff:02:d7:aa:75:0a:b5:8a:6f:
54:18:98:d7:a9:ab:6c:88:64:fd:db:80:a9:df:40:
9f:c2:1a:e1:de:3e:40:5c:b6:c6:96:d7:06:d7:1b:
0d:92:7e:60:60:62:33:bb:72:62:92:9a:ca:fe:f4:
b1:51:0b:8a:b4:0d:40:aa:c9:f9:b6:f9:7f:fb:79:
b5:8b:ab:6d:95:79:9b:10:7e:0c:2e:85:d0:e5:d5:
50:6e:4a:bf:e6:90:27:49:e8:98:a5:70:3d:2c:a1:
45:b2:c7:48:00:1c:e8:c9:21:47:a2:56:03:4c:14:
60:8c:1d:5a:ac:90:2e:af:24:cd:8a:2e:d5:a3:6f:
92:d1:bb:47:96:f1:e8:a9:69:4e:f8:6f:45:2e:ef:
0c:00:0f:ec:65:ef:01:36:6f:d0:de:23:ae:95:80:
26:b2:30:70:35:91:c7:3b:56:cf:5f:71:b0:b7:c1:
75:2b:80:ef:b4:4e:18:52:14:80:01:23:8e:67:18:
33:21:0f:61:de:46:e6:fb:10:c2:28:db:d1:47:d4:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:97:A4:53:37:E9:BC:6B:81:D0:6B:C5:E2:86:7E:3C:51:34:B9
X509v3 Authority Key Identifier:
keyid:0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/aBeXpFM36bxrgdBrxeKGfjxRNLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.197.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e4:1d:b2:33:85:e7:f8:d4:7d:df:8f:97:e0:db:67:cb:ac:
01:16:36:4e:0b:9b:99:81:46:b5:86:4b:6e:f5:32:0c:46:62:
8d:bd:bd:c0:ea:df:f3:27:2d:a4:8d:47:34:fd:6a:b1:1d:c0:
fd:19:b8:1d:e1:d2:8e:63:c5:cd:b3:7c:71:66:84:60:3e:e0:
e9:23:d0:55:c6:fb:a2:10:00:09:02:1b:a3:86:b8:14:43:9f:
b8:c3:38:d2:d9:19:ee:a1:86:60:8e:2d:1a:ce:29:dd:09:a4:
0a:ff:62:29:6a:06:c2:bd:94:ce:0c:82:71:2f:e1:ec:6a:8f:
4a:e6:c9:79:df:0d:86:81:07:b5:5e:9f:fc:03:97:3e:29:e0:
fd:7b:f4:c9:e2:25:7b:9d:43:d1:59:23:ac:c9:fa:9e:8c:c1:
69:b6:67:2d:63:53:d6:39:81:4a:07:a3:0b:df:91:29:ee:ca:
e3:a7:88:0b:35:58:ad:81:cf:fb:d4:ab:cc:92:a3:72:5d:23:
fe:69:61:6c:5d:ed:13:69:44:39:de:97:0b:63:91:a8:8a:c6:
89:71:36:0c:25:60:b0:88:c0:b1:1b:d0:0b:77:78:64:0c:01:
6a:2d:53:ef:20:d5:35:f7:86:6a:dd:a3:b5:21:32:ca:60:cb:
9e:6d:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:34 2024 by rpki-client on console-fra.rpki-client.org