Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/HmDrqSiHrqzxrU5DIDWZO6wcw0M.roa
File: HmDrqSiHrqzxrU5DIDWZO6wcw0M.roa (raw, json)
Hash identifier: urCKtWfKqTK2M3J7CLpn9SrAufCl32xIvs4nc/MYkeY=
Subject key identifier: 1E:60:EB:A9:28:87:AE:AC:F1:AD:4E:43:20:35:99:3B:AC:1C:C3:43
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 0F52E461
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/HmDrqSiHrqzxrU5DIDWZO6wcw0M.roa
Signing time: Wed 06 Apr 2022 11:18:30 +0000
ROA not before: Wed 06 Apr 2022 11:18:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50213
IP address blocks: 91.213.203.0/24 maxlen: 24
2001:67c:398::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257090657 (0xf52e461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Apr 6 11:18:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e60eba92887aeacf1ad4e432035993bac1cc343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:6a:62:b8:05:f9:07:c6:15:f5:cc:e9:c4:
26:1a:2b:a7:a5:e0:b7:79:23:22:54:7c:bc:d6:f8:
6b:25:76:7a:c7:69:36:f0:86:9f:76:4b:45:ec:ce:
61:16:d2:e2:ef:a5:c4:ce:34:00:8c:d4:62:88:0b:
8d:65:23:56:0c:f9:e8:fb:b2:a5:15:0c:8d:77:f5:
f6:c8:b7:3b:d1:d8:be:a9:7c:dc:dd:48:fc:8a:fa:
14:8b:4b:13:10:2a:22:d6:b3:c2:34:39:01:7f:e2:
08:2c:b0:47:b8:e0:8c:22:75:cb:55:28:40:95:3f:
e2:61:43:11:ff:b5:e3:67:8d:34:ea:e5:44:05:84:
5b:92:5b:5a:4a:c5:90:9c:02:81:a0:12:dc:9b:c6:
07:84:7c:7f:fc:02:60:2b:9f:62:6c:52:9a:ac:86:
d8:3f:56:b4:29:ee:e7:5f:f6:72:94:40:53:76:24:
63:f0:a0:1e:6e:bc:0f:96:05:c2:5f:36:c4:f5:e8:
30:de:21:82:75:9e:59:c2:d1:f5:d3:28:97:bf:bb:
b5:6d:e4:49:b2:25:1f:9b:66:40:e4:d3:7c:92:44:
5a:3b:79:cc:ee:b8:a2:02:2b:98:cf:e8:f5:8b:86:
3a:86:a3:b7:bc:1c:59:49:4a:17:a7:d4:38:80:c4:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:EB:A9:28:87:AE:AC:F1:AD:4E:43:20:35:99:3B:AC:1C:C3:43
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/HmDrqSiHrqzxrU5DIDWZO6wcw0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.203.0/24
IPv6:
2001:67c:398::/48
Signature Algorithm: sha256WithRSAEncryption
35:3d:1d:7c:9d:9a:34:79:ea:0f:e6:54:ac:1f:d8:b1:85:e5:
9b:d6:b3:a9:42:93:45:85:61:56:c8:25:69:d2:1d:83:d7:0b:
ac:2a:80:7f:6c:c0:8f:10:e7:2e:7c:fd:b1:6a:d8:13:9b:12:
aa:8f:ce:aa:ab:da:cc:fd:3a:6f:00:59:0d:9e:a5:27:b7:ef:
66:df:d9:ce:70:81:bb:30:4b:c6:ff:98:53:22:b5:b3:30:69:
eb:fc:23:43:26:27:7b:67:b5:91:f6:44:13:fe:00:87:54:3a:
2e:23:28:da:1e:62:c1:d3:63:79:d2:44:6b:e6:98:2d:8b:e7:
d1:12:d7:c1:91:a8:bd:ac:17:35:7e:a3:98:de:52:30:34:b5:
ce:05:15:af:22:dd:1a:b9:53:cd:70:2e:8c:7e:53:c5:20:37:
76:65:7e:3c:37:15:31:b9:7c:bf:9f:19:0c:0e:1b:49:58:3b:
24:9d:5e:e3:dc:99:0e:65:92:79:e1:59:04:b7:7e:35:93:30:
c4:4d:07:63:01:e5:a6:4d:8a:02:d7:f2:bf:ba:d4:1e:cd:96:
df:d6:95:d5:00:05:fe:fa:e7:68:93:6f:b0:47:48:75:51:a4:
38:9e:26:5b:d7:53:e0:7f:14:33:f2:30:c3:08:96:8d:43:0a:
08:06:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org