Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/684GH2Y1hQFuYEXEGRAZR1ZMndQ.roa
File: 684GH2Y1hQFuYEXEGRAZR1ZMndQ.roa (raw, json)
Hash identifier: 8GsF/BUEGtlzO8OwJsdm94HY6ruvj2BD9CGT2jrJ28g=
Subject key identifier: EB:CE:06:1F:66:35:85:01:6E:60:45:C4:19:10:19:47:56:4C:9D:D4
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01837AD932C2B24EBC717C6A7BAF3A6F04E3
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/684GH2Y1hQFuYEXEGRAZR1ZMndQ.roa
Signing time: Mon 26 Sep 2022 17:29:58 +0000
ROA not before: Mon 26 Sep 2022 17:29:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133296
IP address blocks: 91.225.14.0/24 maxlen: 24
185.76.60.0/24 maxlen: 24
185.76.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:d9:32:c2:b2:4e:bc:71:7c:6a:7b:af:3a:6f:04:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Sep 26 17:29:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebce061f663585016e6045c419101947564c9dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:be:61:b1:8f:68:44:6a:59:94:eb:81:96:
b3:39:e1:6f:48:d5:44:3d:0b:8b:d0:83:eb:d0:54:
a4:aa:df:9c:85:f5:39:b6:fe:27:b5:c7:53:27:ec:
78:93:60:54:29:67:29:16:5e:ac:2a:5a:30:9e:52:
06:de:e3:d3:1e:5a:97:05:7d:ee:ac:01:4a:88:f6:
9c:c4:28:c5:de:99:54:44:76:73:ad:53:3c:72:32:
49:9a:18:c8:66:9f:d5:b5:fc:a4:93:35:c1:fa:ca:
00:ed:69:3d:3a:8a:f4:a0:c5:3d:00:f3:af:f4:ab:
12:10:17:f5:92:b0:91:2c:76:f3:ed:40:62:82:e4:
95:89:18:ba:c1:d8:03:53:20:42:ea:be:51:17:2f:
16:64:5e:67:53:6e:b6:de:e4:3c:1c:9d:e5:fe:9b:
86:92:02:b8:b6:c9:b2:0d:3f:d1:6c:e4:52:3a:5a:
b6:7f:a4:95:21:45:60:72:cc:5b:ad:b6:2d:9a:5a:
db:ac:50:b3:39:34:62:7b:7b:ed:d9:4d:14:8e:f3:
d7:60:a1:3a:48:29:94:d3:ca:22:c5:be:70:16:44:
10:c2:8c:d8:f9:27:d2:60:8b:e2:c9:69:ca:80:de:
77:fe:f9:e9:32:73:7a:df:2b:39:6f:08:75:25:c8:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CE:06:1F:66:35:85:01:6E:60:45:C4:19:10:19:47:56:4C:9D:D4
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/684GH2Y1hQFuYEXEGRAZR1ZMndQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.14.0/24
185.76.60.0/24
185.76.62.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2d:14:e7:78:ed:44:9c:eb:7c:02:07:3a:5b:d7:22:67:e5:
dc:3d:25:aa:93:53:31:24:d9:72:f3:da:03:61:e1:e9:d0:95:
25:ce:3b:6a:e5:2c:86:e3:d9:67:d9:57:3a:18:1e:19:88:ec:
d4:a3:d7:38:ff:1e:de:da:48:10:ce:fb:eb:cc:17:02:1b:4e:
69:c5:5a:c4:bb:24:c9:fe:1a:25:b1:a3:da:9f:44:9e:d2:bd:
5f:67:c5:25:8d:27:a1:2f:6d:e6:8b:62:bd:87:32:ea:f4:57:
1f:68:72:0d:ba:ad:d8:41:1b:0a:8d:5d:34:e0:94:26:6f:b2:
c9:ff:64:0b:86:61:a7:64:bf:e9:61:f1:9a:30:be:37:eb:8e:
ce:7d:07:95:5c:5d:9c:50:84:2d:6f:48:29:18:e4:02:87:55:
0a:f2:07:c1:71:02:2d:34:ef:94:3f:c6:63:68:c1:c2:15:14:
ff:95:b5:7b:33:aa:24:51:9d:08:79:00:a1:96:62:66:fb:fb:
46:74:46:1e:a9:b8:e2:59:6d:ef:5c:c6:cc:33:f6:bc:3b:58:
7a:ff:9c:0d:40:30:7f:71:82:90:68:37:d3:bf:c5:a6:32:dd:
cc:c4:cd:d1:d6:87:dc:3a:73:40:fe:c0:ae:e3:59:70:4a:28:
58:d4:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org