Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/u4v5jPGjq5sUz1C98vfsNhnfz3Y.roa
File: u4v5jPGjq5sUz1C98vfsNhnfz3Y.roa (raw, json)
Hash identifier: 170ihBxen+31gpwi+jf36+jT80+/bEHaMMY26hwaurU=
Subject key identifier: BB:8B:F9:8C:F1:A3:AB:9B:14:CF:50:BD:F2:F7:EC:36:19:DF:CF:76
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 038E45C3
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/u4v5jPGjq5sUz1C98vfsNhnfz3Y.roa
Signing time: Sat 01 Jan 2022 05:54:45 +0000
ROA not before: Sat 01 Jan 2022 05:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.236.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59655619 (0x38e45c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Jan 1 05:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb8bf98cf1a3ab9b14cf50bdf2f7ec3619dfcf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:ce:0a:23:f4:f7:1d:d0:da:61:1c:4c:70:
1c:75:ff:3e:1d:b1:a2:53:0c:08:09:78:ae:47:25:
8a:18:33:6b:cd:fc:f4:20:98:9d:a0:e7:94:58:67:
b3:6b:f2:c1:49:37:66:bd:fd:27:65:03:44:38:01:
22:cf:32:01:5c:46:a7:68:f4:09:17:c8:43:9e:e8:
62:09:23:b1:86:a2:14:49:d5:29:e3:b1:4d:c2:12:
92:c1:b4:0b:0c:03:94:c2:cf:1a:c9:14:0a:fe:8e:
5e:59:9f:ff:6b:ae:71:9c:3e:00:db:a0:6f:9a:62:
62:43:03:4d:c1:f7:14:bf:66:07:3f:f9:a5:16:60:
99:c1:af:96:0c:b6:eb:e1:ce:2d:73:f6:f7:b2:7b:
77:c7:40:b4:40:c7:65:7a:01:3d:11:3c:9f:70:df:
34:53:67:de:74:a5:7f:b1:26:ae:fa:b3:e8:dc:29:
4b:73:ff:a3:8f:66:53:ff:74:24:49:89:7a:db:39:
65:bb:27:22:8e:32:06:77:17:6e:e7:46:98:08:ac:
f6:4d:3b:d4:39:bd:3a:e1:7a:6c:48:9e:1d:1e:a2:
a8:87:2e:1d:2d:a6:5f:1c:57:12:13:6f:80:9b:23:
a0:1a:1e:f2:19:b9:cc:26:4b:72:92:54:ac:0c:33:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:F9:8C:F1:A3:AB:9B:14:CF:50:BD:F2:F7:EC:36:19:DF:CF:76
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/u4v5jPGjq5sUz1C98vfsNhnfz3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.67.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:0a:73:22:2d:7a:25:c0:8a:eb:14:06:6e:1f:5b:00:db:
4f:26:bc:6f:8d:35:42:2b:de:6d:ab:37:9b:d7:fe:d0:0c:56:
f1:be:6d:c9:55:bc:f6:f3:6f:6b:3c:4b:9a:06:3f:48:ee:4e:
91:7e:9c:ca:e6:12:da:c7:7f:79:73:23:e1:74:43:a6:d5:1a:
33:b0:50:44:75:0b:85:6d:7c:84:95:39:35:da:4f:92:5d:19:
ef:91:38:c6:42:a1:9b:05:b7:1c:ac:10:f4:bc:d1:0a:32:73:
e0:3b:17:98:dc:51:ad:16:8f:e1:11:a5:fb:ae:34:63:13:43:
5b:a7:01:b0:2b:59:d8:47:bc:04:68:1a:45:d5:bc:61:5c:b2:
5c:6d:36:85:49:a1:b2:e8:a7:d2:74:7b:23:59:44:7f:ce:fd:
9d:87:cb:cc:86:d8:71:ca:5b:da:33:60:5d:ef:1e:8a:c1:ee:
9d:dc:cd:60:f8:a8:84:07:8a:e5:32:cb:89:12:fc:e4:23:0e:
b3:4c:9e:a2:0d:b1:6b:d0:88:44:5a:93:e7:01:64:e4:a7:41:
d0:d9:94:95:1f:64:13:6b:ad:12:6a:68:b8:00:c9:0d:74:63:
11:2c:2e:77:64:fc:36:75:52:a2:6b:b4:47:c7:65:bb:99:d2:
7d:71:88:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:43 2024 by rpki-client on console-ams.rpki-client.org