Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/E6ySKGe89i7knHqqKIBUdMpPsZw.roa
File: E6ySKGe89i7knHqqKIBUdMpPsZw.roa (raw, json)
Hash identifier: G2umXQmhLDbx4fFWl9lrrYZswLzj76vvyfEoiMivh+Y=
Subject key identifier: 13:AC:92:28:67:BC:F6:2E:E4:9C:7A:AA:28:80:54:74:CA:4F:B1:9C
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 05A22A53
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/E6ySKGe89i7knHqqKIBUdMpPsZw.roa
Signing time: Sat 01 Jan 2022 01:59:04 +0000
ROA not before: Sat 01 Jan 2022 01:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196659
IP address blocks: 91.102.232.0/21 maxlen: 24
91.102.233.0/24 maxlen: 24
91.102.238.0/24 maxlen: 24
91.102.234.0/24 maxlen: 24
91.102.239.0/24 maxlen: 24
91.102.235.0/24 maxlen: 24
91.102.236.0/24 maxlen: 24
91.102.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94513747 (0x5a22a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Jan 1 01:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13ac922867bcf62ee49c7aaa28805474ca4fb19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:9e:ae:71:d4:66:c3:72:7f:5f:ec:28:b5:
3e:ce:9a:95:75:3f:57:0b:bc:76:41:71:db:83:12:
26:ec:3f:be:b7:a5:bb:9d:62:ac:f8:86:8e:31:2e:
72:7d:4e:66:29:3c:c6:bf:6d:4f:84:db:2e:eb:bd:
c9:e0:c1:e9:33:54:aa:8e:c0:86:20:1b:32:57:3b:
7a:7e:8f:d2:22:98:c5:e0:2c:fa:c6:92:67:a3:c7:
58:88:0e:fa:ae:48:23:fa:45:fb:ff:5c:9e:e8:4b:
68:7d:38:6c:53:86:0e:19:b9:f7:81:47:06:47:23:
00:d9:0b:5f:8e:c5:89:da:cf:66:51:fc:73:24:72:
35:a1:cc:46:47:e1:36:6f:7c:d6:38:e1:91:1c:23:
d4:92:cf:87:d6:fb:62:06:69:f8:d8:6b:f2:cc:ed:
65:42:23:58:5d:01:f2:bb:0a:f3:e9:01:0d:76:1c:
31:b1:7e:da:5c:7a:a5:51:78:f2:5c:2b:92:55:0c:
12:dd:b2:72:bb:a2:e2:d2:23:5a:93:f9:48:5c:6f:
ed:12:d8:73:20:a9:b8:79:f8:21:4c:e3:cd:b3:be:
48:e7:cf:8c:38:73:35:5a:53:c8:cd:cb:9c:84:82:
30:e9:b8:e8:48:a5:ed:bb:00:e7:05:e5:c5:af:f6:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:92:28:67:BC:F6:2E:E4:9C:7A:AA:28:80:54:74:CA:4F:B1:9C
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/E6ySKGe89i7knHqqKIBUdMpPsZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.232.0/21
Signature Algorithm: sha256WithRSAEncryption
06:ed:a3:d2:9c:24:f1:6c:84:5a:1a:bc:79:d4:4e:57:64:e1:
fb:59:f7:43:9f:c4:7c:a2:78:40:26:93:eb:c5:0e:1d:74:e8:
ba:81:7e:d1:f2:71:56:59:7d:b3:9b:0e:f9:fc:d8:34:ed:83:
8b:18:c3:05:e4:67:0b:ef:ea:b2:3a:21:46:45:06:e2:4b:4b:
26:03:05:87:c2:6a:a3:26:84:fd:ac:c9:a3:b4:35:d2:7a:8d:
b3:89:85:59:87:30:b0:01:d4:0c:50:62:dc:ff:c6:69:5f:28:
e9:9e:29:e0:17:21:0e:fc:6a:36:e1:32:5a:26:d2:1a:02:9b:
ac:54:ea:95:28:2e:b2:4d:e8:b6:ca:70:55:c9:aa:55:eb:8f:
d0:1a:2b:e4:62:e5:cf:e8:65:79:75:2a:e9:00:70:87:47:eb:
03:a3:d9:97:17:9e:4a:a7:a4:bb:7e:12:34:2e:a2:6f:9a:a8:
0f:67:87:ee:5d:cc:94:90:68:37:59:f3:fa:d6:35:0a:61:2d:
2a:87:23:11:fa:83:ab:b0:03:a0:90:fa:8f:35:8e:49:51:e4:
01:39:43:86:6a:ee:e9:df:2a:08:3a:3e:b0:51:23:e4:55:76:
f9:d4:de:37:ab:2e:99:95:a5:76:9d:5b:a4:d3:40:0b:61:8a:
aa:55:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:37 2024 by rpki-client on console-fra.rpki-client.org