Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/HrqT5IKyY5NVr9563uUdux69n80.roa
File: HrqT5IKyY5NVr9563uUdux69n80.roa (raw, json)
Hash identifier: tsBZ13CPtCtKVUCE/s/ATTGhYWY3GslGVH2kLIUPVKY=
Subject key identifier: 1E:BA:93:E4:82:B2:63:93:55:AF:DE:7A:DE:E5:1D:BB:1E:BD:9F:CD
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 07865D53
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/HrqT5IKyY5NVr9563uUdux69n80.roa
Signing time: Tue 14 Jun 2022 19:18:06 +0000
ROA not before: Tue 14 Jun 2022 19:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8454
IP address blocks: 91.213.98.0/24 maxlen: 24
2001:67c:2f78::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126246227 (0x7865d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Jun 14 19:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eba93e482b2639355afde7adee51dbb1ebd9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:0d:1c:43:6e:fa:f4:73:05:14:dc:1f:d1:
ae:20:7a:8c:a1:40:f4:3a:1a:39:ce:bd:44:df:9b:
21:5c:fa:24:c3:b7:80:65:0a:73:63:d3:50:47:91:
57:be:55:36:9a:59:46:19:32:65:91:84:ee:b5:c4:
17:18:70:be:44:3f:54:51:f6:7c:31:cb:32:81:4f:
94:b5:43:37:d0:04:25:b3:2f:46:3a:7a:03:75:4a:
17:89:29:9c:76:d1:8d:0a:fe:7b:59:c4:2a:fe:9a:
4a:bd:9e:b9:e5:33:45:8d:16:ea:f6:ef:ec:aa:af:
f5:c0:6d:3f:1f:0a:2f:69:5e:c4:61:0d:fb:b3:81:
2d:9f:db:39:a5:d7:a2:5c:ae:7b:27:1f:1b:7b:d1:
56:c0:7f:f5:5b:47:b1:fc:3a:71:50:b1:c4:74:32:
82:85:2e:15:fe:1e:c8:fb:f7:ae:e4:94:17:32:de:
5d:2c:3d:12:72:08:94:30:23:25:9d:42:35:fe:3e:
98:82:84:17:19:fb:46:43:84:ad:f6:54:b5:55:8a:
5c:83:8d:8a:ab:87:84:fb:a3:65:30:8a:61:ee:41:
ae:06:5f:55:bd:4a:44:a3:bc:a2:a7:8a:7b:a7:96:
93:aa:bf:59:b4:f2:57:da:08:be:46:fb:16:14:15:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:93:E4:82:B2:63:93:55:AF:DE:7A:DE:E5:1D:BB:1E:BD:9F:CD
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/HrqT5IKyY5NVr9563uUdux69n80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.98.0/24
IPv6:
2001:67c:2f78::/48
Signature Algorithm: sha256WithRSAEncryption
4e:3d:96:26:01:24:92:a8:ab:96:07:8f:e0:95:29:72:f2:82:
2d:5f:d0:a8:f8:b8:66:81:78:51:dc:f5:c9:4c:94:73:24:17:
f6:83:d0:a5:15:b8:15:17:ec:2e:29:29:df:53:fd:a9:0c:01:
8c:77:ec:45:6d:f6:bd:8d:b2:81:d7:45:cc:51:9c:2a:86:43:
88:44:32:50:27:67:f0:e2:c9:24:e5:4f:a3:9e:28:3e:d3:cb:
ed:5b:18:0e:b4:d5:fe:01:d5:67:84:33:fb:5e:b1:cb:37:7a:
0e:fb:f3:80:30:ee:50:58:1a:fb:7f:69:e6:ed:c2:5f:0e:12:
0f:98:f4:f9:ec:9d:3b:7c:e4:60:a2:41:d1:35:f5:e3:3d:83:
e6:23:0f:2c:bc:5e:54:3c:88:62:d1:90:c7:ea:3a:23:e1:f7:
ea:99:22:dc:cc:3f:cf:7d:66:f5:72:02:c7:0b:b8:1e:f1:c6:
b0:b0:4f:88:8e:ab:df:2e:e5:da:bb:5f:04:c9:26:93:36:77:
6d:49:40:59:72:99:97:d3:fc:01:c6:3b:6a:3b:e2:f7:32:7b:
08:28:cb:ed:eb:b6:d4:30:13:6e:d0:89:33:b5:a6:7b:e7:ba:
02:16:79:1f:64:87:d8:b5:87:89:66:3f:0d:a4:14:48:99:b6:
b4:97:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:54 2024 by rpki-client on console-fra.rpki-client.org