Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/X_ab4d8Cv5-Rb8OE9d0qjtgeKzM.roa
File: X_ab4d8Cv5-Rb8OE9d0qjtgeKzM.roa (raw, json)
Hash identifier: CKvotav5vqpebrScynAKKra1FfsriDfLdu3l1/dak2o=
Subject key identifier: 5F:F6:9B:E1:DF:02:BF:9F:91:6F:C3:84:F5:DD:2A:8E:D8:1E:2B:33
Certificate issuer: /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial: 0699CC15
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/X_ab4d8Cv5-Rb8OE9d0qjtgeKzM.roa
Signing time: Sat 01 Jan 2022 09:01:30 +0000
ROA not before: Sat 01 Jan 2022 09:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198635
IP address blocks: 91.199.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110742549 (0x699cc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Validity
Not Before: Jan 1 09:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ff69be1df02bf9f916fc384f5dd2a8ed81e2b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:b1:a5:74:b6:9e:98:5c:e9:c6:7b:ea:90:
3c:59:5f:0b:72:3b:c4:fa:a2:f3:4f:59:ac:81:ff:
a3:bd:e7:05:63:d7:67:47:df:9c:80:58:2d:44:71:
03:b4:2c:33:2f:cb:04:3e:be:bb:bd:ca:f8:1b:d7:
f9:34:da:aa:52:f8:95:5f:6c:79:af:e8:03:c2:f1:
be:f6:c7:97:9b:c8:42:66:6b:9c:18:bb:80:b1:88:
2a:dd:30:5f:97:12:31:cc:53:f1:7f:b4:e9:44:90:
3a:ac:30:b1:a8:87:71:fc:a5:8d:07:a6:69:cb:e0:
75:f8:d5:08:a3:a1:fe:70:37:77:2c:00:11:81:ef:
c7:65:35:c7:94:9d:54:f4:59:68:c9:cb:15:f0:8f:
54:f5:10:61:62:8a:b4:77:bf:49:a5:24:9d:38:0a:
b1:80:81:f0:70:c1:37:43:d5:93:91:3a:e4:1d:27:
73:fa:ae:78:df:7a:e6:bf:02:18:a5:a5:93:6e:b1:
2e:21:b4:68:a8:c0:76:b9:7e:99:43:2b:11:2a:d3:
05:57:23:bc:d5:6c:f4:11:79:c2:a6:be:1a:ef:e0:
3a:30:d0:78:ba:09:33:22:a0:ee:5c:7d:83:05:a6:
9d:d0:fa:be:75:63:30:c7:a3:12:cd:d1:c9:28:92:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:9B:E1:DF:02:BF:9F:91:6F:C3:84:F5:DD:2A:8E:D8:1E:2B:33
X509v3 Authority Key Identifier:
keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/X_ab4d8Cv5-Rb8OE9d0qjtgeKzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ca:13:54:84:5e:5b:98:39:a1:ef:87:5b:9a:d9:d1:e2:ff:
c3:45:ac:8b:eb:b5:41:93:27:56:08:fa:84:e1:f0:20:85:38:
4a:9a:a6:62:54:bf:f1:a4:64:da:ad:c3:51:60:a1:ed:09:09:
4c:a8:d5:ae:62:1e:aa:64:5b:23:10:68:e3:61:d1:f3:28:25:
07:c5:47:f1:59:1e:16:5e:d8:5e:af:0c:4d:93:e8:c9:09:a2:
21:67:81:6b:31:ae:e7:d1:83:e0:58:88:a4:60:d5:b4:c0:85:
b7:09:61:b4:f0:d6:75:c1:ed:68:71:6d:90:45:d0:f4:d4:46:
21:01:93:3a:d3:8f:a7:7f:ff:0f:f6:ad:28:d4:61:a7:91:21:
c8:3e:52:5c:ea:f0:f8:61:e0:3d:21:ef:8e:78:c7:ae:d4:28:
28:4c:ce:43:86:9f:50:25:2b:bb:72:8e:b4:43:b8:9f:26:e5:
c9:6f:5f:2c:0c:ef:2f:10:b1:b8:9a:3a:08:02:a2:34:15:da:
db:c9:1c:18:ac:04:79:bb:a4:ee:fd:96:e6:58:dd:47:5f:ce:
d4:4f:ff:34:16:d1:a7:e7:00:67:22:d2:57:30:d4:01:66:c4:
8f:cc:2c:c4:57:78:f5:30:5a:6d:9f:f4:dc:4d:b0:c1:20:32:
e0:02:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-fra.rpki-client.org