Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/F3k6SUIB5WNMkKDnxHgyFdbzseQ.roa
File: F3k6SUIB5WNMkKDnxHgyFdbzseQ.roa (raw, json)
Hash identifier: BxP/VklnR4ttNvUuiMQvG+7ZblHA9YByImeEfgix14A=
Subject key identifier: 17:79:3A:49:42:01:E5:63:4C:90:A0:E7:C4:78:32:15:D6:F3:B1:E4
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 01FF6853
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/F3k6SUIB5WNMkKDnxHgyFdbzseQ.roa
Signing time: Sat 01 Jan 2022 13:05:15 +0000
ROA not before: Sat 01 Jan 2022 13:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211332
IP address blocks: 91.233.183.0/24 maxlen: 24
2a0d:c140::/29 maxlen: 29
2a09:f140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33515603 (0x1ff6853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Jan 1 13:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17793a494201e5634c90a0e7c4783215d6f3b1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:7e:40:db:ac:9f:6d:56:21:63:86:dd:ae:
51:8e:61:d4:f9:b1:1d:a0:a5:e9:ad:3a:66:2b:b4:
e4:89:1f:56:55:35:4e:f5:c7:09:9c:0f:bb:b4:27:
04:64:ec:9c:96:b8:d8:fc:3d:35:40:7d:73:b5:d5:
45:23:94:cc:a8:27:5c:9c:22:d3:6c:59:c4:8d:c9:
e1:a2:56:ce:fe:22:4d:e8:1d:c6:e9:2a:e2:2e:c7:
0f:36:18:48:2b:ea:71:30:67:9f:fc:5a:be:42:bb:
75:00:86:6d:12:23:90:f0:c5:b5:6f:5e:db:10:e3:
90:1a:26:4c:cb:e8:e5:70:92:18:8f:ea:07:80:fe:
2a:6b:83:06:e3:3a:18:61:58:58:2d:91:b3:5b:95:
72:51:91:fc:58:96:43:c7:0f:83:c6:cb:0e:3e:e4:
50:4a:58:ab:f3:de:63:80:14:27:fc:46:f0:5c:03:
09:c3:14:49:01:73:03:28:93:75:82:7d:ff:65:07:
86:ab:01:e3:ce:a1:00:ab:b0:d5:cb:86:0d:21:9a:
15:0b:4d:fe:9f:5b:cb:c5:05:ea:25:ce:23:37:f8:
77:1d:e2:8e:68:05:67:28:c5:d3:08:9f:b7:8a:00:
b6:54:f1:76:e5:30:5d:76:62:b5:ec:30:6d:fd:4f:
dc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:3A:49:42:01:E5:63:4C:90:A0:E7:C4:78:32:15:D6:F3:B1:E4
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/F3k6SUIB5WNMkKDnxHgyFdbzseQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.183.0/24
IPv6:
2a09:f140::/29
2a0d:c140::/29
Signature Algorithm: sha256WithRSAEncryption
6b:c1:39:ce:69:50:0a:10:c6:e3:f2:9f:36:31:e6:20:3d:47:
c9:d0:e4:5e:96:4d:98:4b:22:04:01:80:a3:7d:88:a0:24:2b:
9a:57:32:37:87:6f:96:26:d4:d5:ff:31:5e:3b:45:f6:c7:b6:
89:fb:57:fc:73:12:87:a8:89:77:39:fa:d9:82:f6:fe:b9:f6:
5c:7f:0b:9c:7c:33:de:93:b1:67:12:14:f8:f8:26:d9:87:05:
68:fa:cb:c0:26:92:15:a5:17:9c:19:f4:f0:2c:e0:7a:97:4f:
40:5c:39:1f:ce:15:23:3d:e5:e2:7c:10:b4:7a:77:c6:93:c6:
28:ef:c5:8e:e9:71:18:db:c3:df:45:d6:a4:21:10:3f:2f:ed:
f8:7e:be:70:55:f3:10:63:c4:e8:ea:29:4c:2a:e5:10:d3:c9:
22:a4:69:b2:43:25:62:bc:e8:93:12:4f:d7:b3:bd:f0:6f:65:
b0:55:4d:c5:f5:61:f7:a6:25:4c:9c:0a:9f:36:68:4c:d2:68:
db:fc:a7:2d:5a:a7:47:61:09:88:ed:ee:94:c8:ce:46:b3:84:
ac:9c:b4:c2:28:24:03:49:bc:9c:85:66:91:9f:f0:82:c9:c2:
a7:9d:c1:73:d6:73:44:a5:3a:04:58:a9:b1:ff:27:3c:22:e3:
ea:6c:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-fra.rpki-client.org