Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/2Nw0Rev8_IRySKBPFf8vfqHLrdI.roa
File: 2Nw0Rev8_IRySKBPFf8vfqHLrdI.roa (raw, json)
Hash identifier: tUXFrbKKxAutTWmNsEZBhHRMZawd4xL34CsGRM5UcLk=
Subject key identifier: D8:DC:34:45:EB:FC:FC:84:72:48:A0:4F:15:FF:2F:7E:A1:CB:AD:D2
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 03C50EE7
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/2Nw0Rev8_IRySKBPFf8vfqHLrdI.roa
Signing time: Sat 01 Jan 2022 10:03:56 +0000
ROA not before: Sat 01 Jan 2022 10:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49275
IP address blocks: 91.199.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63246055 (0x3c50ee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: Jan 1 10:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8dc3445ebfcfc847248a04f15ff2f7ea1cbadd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:24:79:48:b6:43:b7:43:4a:92:f5:69:ed:
29:d8:aa:a6:3f:8d:3b:47:6b:6e:8b:c0:d0:db:12:
85:52:33:4d:dd:8c:19:68:33:b5:85:db:bf:08:6f:
cc:0d:14:f5:39:01:b9:34:2c:f4:39:18:6a:4f:3c:
4c:d2:03:b7:57:ba:9f:d3:44:df:e6:64:10:9f:fa:
a5:a8:cb:45:65:b1:95:c4:9a:7a:59:ae:0c:d2:14:
bc:bf:9b:a9:b4:08:75:4f:9c:1f:48:fc:cd:76:dc:
08:3a:d2:c0:a2:27:08:1a:b8:16:98:c5:ad:50:18:
7a:8e:d3:20:1c:6d:a7:68:b1:6c:62:8a:54:3e:4e:
8d:46:d7:5b:d0:4d:d2:da:00:8e:e8:39:0d:35:00:
84:47:fd:80:34:af:65:71:c5:0e:ff:11:a8:16:36:
b7:fc:9c:fd:05:d6:e2:fa:fa:7a:9f:7e:b0:a8:d1:
fa:4b:19:20:ee:a9:1f:c9:3f:72:f9:aa:81:48:99:
98:a8:57:b0:82:d9:dc:e0:00:48:d1:98:15:0c:20:
8c:ca:8b:e7:75:ac:79:0e:44:6e:ee:1b:71:f7:cd:
5f:86:c6:17:13:2c:0d:b4:78:d4:ba:a8:87:e6:d7:
18:71:07:85:85:62:e6:e1:b8:1d:3e:38:28:9d:f8:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:34:45:EB:FC:FC:84:72:48:A0:4F:15:FF:2F:7E:A1:CB:AD:D2
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/2Nw0Rev8_IRySKBPFf8vfqHLrdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.239.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e9:c9:45:34:7c:2f:c8:fa:68:4e:9d:7b:55:6f:c1:c4:da:
5a:25:c0:d1:68:b4:2f:4b:30:8a:56:a6:8a:c9:b4:92:5e:74:
ca:4c:83:fc:72:fc:74:72:1b:30:53:db:46:07:eb:5a:71:21:
c8:25:61:f3:f5:48:39:21:a2:e9:07:de:56:66:30:97:62:60:
37:2e:db:3b:d7:7c:2c:1f:ce:14:fe:aa:21:9a:83:df:54:c7:
04:ee:11:d9:e0:b2:6d:ed:b0:20:ea:73:5a:ca:3e:a6:48:7a:
e3:ed:65:2a:5b:39:c4:fa:c5:1c:8c:e5:bb:e1:a4:b7:b7:e3:
60:5e:6a:81:8d:2f:9b:d8:97:a9:36:3e:9e:01:3c:07:55:cc:
fd:25:b1:ee:a5:49:5f:7d:7a:f9:a2:32:7e:06:aa:de:61:39:
de:56:e8:3f:e0:7a:38:cd:a3:6b:7d:9a:b9:66:0f:14:d8:16:
ae:3f:b5:00:26:2b:65:d7:fa:2c:82:80:c7:a5:8a:77:7a:cc:
05:63:04:2c:a9:d1:03:81:24:52:04:bd:31:ce:e7:1a:bb:58:
2b:a2:a4:53:8a:7a:ce:20:bc:a5:d4:b3:d6:cb:85:cf:e7:54:
11:75:af:05:ce:a4:4b:3a:81:74:0e:eb:ef:19:fb:ac:94:c8:
14:71:1c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-fra.rpki-client.org