Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/xeZNFTYdVtjY5n_HH6ODi2gAB6Q.roa
File: xeZNFTYdVtjY5n_HH6ODi2gAB6Q.roa (raw, json)
Hash identifier: Re6KtFiLeDRrYboME5+3+L6sa1oxk/bCfWlHYhzQNLI=
Subject key identifier: C5:E6:4D:15:36:1D:56:D8:D8:E6:7F:C7:1F:A3:83:8B:68:00:07:A4
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 034CA71D
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/xeZNFTYdVtjY5n_HH6ODi2gAB6Q.roa
Signing time: Sat 01 Jan 2022 06:02:54 +0000
ROA not before: Sat 01 Jan 2022 06:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48303
IP address blocks: 91.216.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55355165 (0x34ca71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: Jan 1 06:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5e64d15361d56d8d8e67fc71fa3838b680007a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:74:b3:30:26:db:9c:52:26:ef:83:b6:42:
fa:74:32:f0:de:81:71:46:d1:c6:b1:10:a5:7c:53:
22:a8:bd:cc:05:37:0f:01:16:65:61:a5:cf:d6:b2:
ee:00:2b:5e:05:b2:87:60:50:1f:72:0a:88:79:aa:
be:ee:a1:18:0d:5c:42:db:66:11:ff:17:f2:76:ee:
08:9f:b3:fe:d6:fb:d6:08:c3:86:51:08:b1:b0:83:
1d:f5:f1:a1:7a:49:bf:66:66:eb:f9:a1:57:c0:8f:
63:fb:36:1c:da:bd:c0:66:1a:1a:50:17:5a:37:71:
70:bb:75:ab:26:71:9f:76:a6:de:d8:45:74:ca:53:
c0:b7:8e:a1:f9:c6:2c:d9:d6:43:d9:45:11:f0:0b:
3d:7d:60:35:2b:ff:c9:b9:98:77:9d:48:6a:df:0b:
fe:23:df:eb:f7:e4:ba:36:be:ee:d8:d9:e7:e7:b0:
96:62:c3:4d:f6:2f:b3:dc:e5:38:bb:23:1b:d2:44:
55:c0:4e:c4:16:0d:cf:f6:e5:36:ad:54:1c:06:8f:
15:ee:5f:3a:df:be:cf:a6:5f:f8:8a:fc:bb:e3:7e:
6e:2b:0a:a1:16:91:00:d7:66:48:d8:ce:a2:ac:b9:
68:71:21:40:dc:f5:f1:20:23:c5:28:30:85:28:04:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:4D:15:36:1D:56:D8:D8:E6:7F:C7:1F:A3:83:8B:68:00:07:A4
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/xeZNFTYdVtjY5n_HH6ODi2gAB6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.44.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2b:a1:7d:d9:69:fe:33:9b:32:d3:3b:45:5d:db:6c:4c:22:
7e:2a:f3:e2:99:c8:bf:64:17:a1:48:a5:79:1f:a7:53:64:f7:
33:80:95:e9:ca:79:02:a4:ee:f0:8a:34:dd:17:01:e8:1b:de:
8f:b3:31:76:1f:57:7d:1e:74:31:28:68:fb:77:02:d6:a9:f7:
8a:e8:44:52:8a:99:42:5c:35:d6:d9:85:fd:f1:d2:18:2a:9d:
1b:24:24:b5:28:26:1a:8f:1f:43:f8:1d:ee:d1:d0:d0:05:5e:
ba:53:8a:21:e4:4a:bf:1a:89:32:82:08:46:27:94:1e:d8:ad:
1b:a3:61:04:13:9b:3d:dd:ee:2d:7b:31:0c:dc:d9:e5:23:9d:
dc:4c:2e:00:28:d5:e8:df:35:6c:5f:fa:d0:a8:4d:5b:2c:8c:
f4:2b:83:71:e8:0f:8e:bf:08:86:cb:67:2e:fa:96:75:eb:50:
c7:ba:0d:6e:e3:7f:aa:73:55:81:ae:f6:33:c7:d4:50:36:4e:
58:3c:4a:57:65:f6:3f:9b:43:50:87:73:32:3f:3f:20:1f:2c:
6d:3f:cf:1b:61:79:9e:1e:47:3d:b2:96:bc:10:bf:29:6e:6a:
76:7e:e9:2d:b0:5f:6e:5d:ca:ea:63:c9:87:95:c9:11:3b:d3:
fb:bd:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org