Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/XrhQuDLhDwLpCUteahb4wm5XN4Q.roa
File: XrhQuDLhDwLpCUteahb4wm5XN4Q.roa (raw, json)
Hash identifier: iCpt56SKITdRF7hRMoSMYMnSDl+yc37xQCWUOBXuo3s=
Subject key identifier: 5E:B8:50:B8:32:E1:0F:02:E9:09:4B:5E:6A:16:F8:C2:6E:57:37:84
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 073AA444
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/XrhQuDLhDwLpCUteahb4wm5XN4Q.roa
Signing time: Sat 01 Jan 2022 07:02:24 +0000
ROA not before: Sat 01 Jan 2022 07:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197055
IP address blocks: 91.216.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121283652 (0x73aa444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jan 1 07:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eb850b832e10f02e9094b5e6a16f8c26e573784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:cf:67:13:77:4b:ba:4b:99:aa:a2:ba:97:
e7:36:eb:7d:95:db:22:14:38:02:92:9c:fa:5a:6c:
49:a7:8d:58:19:f0:95:6e:84:93:46:dd:c1:63:e3:
6e:53:f0:79:59:02:07:a1:4d:11:93:fe:35:0c:20:
74:ef:cc:53:d0:2a:b5:ac:ed:b4:d6:f4:80:39:d7:
80:c6:ad:98:6f:48:c3:74:97:bc:67:0e:4d:78:c7:
e5:e1:7d:d0:bd:63:c8:7c:ab:c8:3a:e7:d5:c6:f2:
1c:f8:b3:83:89:ea:f3:62:32:6b:84:59:91:9a:51:
5c:bf:3c:94:ed:ae:28:ac:e1:10:95:4e:4f:6e:73:
6e:82:5a:0b:32:57:7a:ee:f3:17:bc:8f:7a:8b:f2:
ae:03:80:75:93:49:c9:f9:8d:0a:a9:26:91:ba:61:
38:fe:75:50:09:48:da:22:09:80:37:14:9e:b7:b7:
ed:66:de:05:e2:87:7e:d3:03:bc:ca:30:70:52:ac:
75:15:ef:5a:bb:60:d9:e5:30:54:6a:e0:b6:ad:c3:
2e:67:2f:cb:81:87:be:64:8c:f4:11:5f:ca:51:61:
be:de:ad:d2:1d:1b:83:25:7d:a5:43:84:5c:72:d6:
6e:c7:0e:9d:dc:d8:3d:66:61:ac:b9:07:22:e7:a7:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:50:B8:32:E1:0F:02:E9:09:4B:5E:6A:16:F8:C2:6E:57:37:84
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/XrhQuDLhDwLpCUteahb4wm5XN4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:91:2d:a3:44:1f:86:09:be:04:97:c7:15:66:62:bd:96:74:
6e:40:1c:16:ab:9c:9a:93:b3:f1:79:7d:f4:1b:86:1d:63:51:
f4:0d:a6:c0:b1:b1:04:7f:44:0b:7b:41:53:1d:af:fc:3c:77:
25:96:22:56:59:d5:8b:c9:29:aa:8d:1b:be:57:19:e2:59:55:
86:4f:cf:01:11:8f:47:f1:90:4e:6b:80:2c:0e:83:a3:33:ba:
92:e4:89:87:b1:9f:dd:20:17:7e:59:64:68:b4:a8:78:d2:dc:
67:2b:bb:3e:06:86:66:31:3b:24:6e:be:e7:37:ca:2f:9b:d7:
c2:e9:a0:aa:fd:9e:0a:a4:61:19:68:a5:06:fe:ce:7f:57:9f:
af:a4:38:20:e3:31:c3:12:34:5e:e2:47:99:ab:9b:bd:47:9f:
2b:b6:7c:38:42:3b:8f:5b:b0:6f:38:af:ca:8a:4f:c7:e2:14:
1c:5c:68:f6:87:06:58:a1:6a:2e:0c:e9:10:12:5a:32:c4:7b:
10:db:8c:c2:5d:bd:01:15:0b:01:f7:67:02:35:63:73:1b:af:
8d:31:89:ef:7e:cd:1d:0d:5e:8b:62:e4:2d:e8:c9:97:66:be:
30:84:90:ee:fa:7b:0f:1e:bc:c3:85:b7:b5:85:69:d2:e1:00:
7a:35:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:45 2024 by rpki-client on console-fra.rpki-client.org