Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/6SZc22X16x_IpMVa0eUtDaKVR7Y.roa
File: 6SZc22X16x_IpMVa0eUtDaKVR7Y.roa (raw, json)
Hash identifier: MBRiDNQLQ/XovG8FUfTiL2hdbc6uYd9gYP+IXcQsMGc=
Subject key identifier: E9:26:5C:DB:65:F5:EB:1F:C8:A4:C5:5A:D1:E5:2D:0D:A2:95:47:B6
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 0183EEF9BCCE3F1A655006037BEE143E14A9
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/6SZc22X16x_IpMVa0eUtDaKVR7Y.roa
Signing time: Wed 19 Oct 2022 06:41:27 +0000
ROA not before: Wed 19 Oct 2022 06:41:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13000
IP address blocks: 91.207.64.0/23 maxlen: 23
91.208.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:f9:bc:ce:3f:1a:65:50:06:03:7b:ee:14:3e:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Oct 19 06:41:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9265cdb65f5eb1fc8a4c55ad1e52d0da29547b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:a5:14:96:e0:48:5d:12:fd:37:ae:1f:6a:
da:64:76:48:e6:52:1d:7c:35:8d:2c:0f:ab:99:c7:
ef:21:7e:c9:bc:f4:87:b1:80:c5:fc:96:67:1d:95:
7b:ba:fa:7d:d1:0e:af:56:c5:5e:2c:1d:ad:f6:a7:
70:4c:40:4b:2d:eb:8a:5f:e7:9f:0f:a7:f0:08:2f:
b8:7c:27:20:c8:7a:d7:a2:a7:0f:c4:da:cd:c1:8d:
bb:00:23:7f:94:ea:51:c1:f4:74:57:04:6f:37:47:
7b:23:a2:95:33:4b:60:a1:07:bd:34:ad:4a:91:19:
2e:49:91:40:93:97:b2:49:97:3d:da:dd:af:5e:d2:
95:c1:16:d2:fa:ad:4e:7c:08:c2:3f:7b:e1:14:7e:
d3:0d:86:f6:9a:6f:76:2c:77:f1:c2:c2:27:26:ea:
2e:48:7e:6d:a4:bf:45:27:c3:88:9d:ad:c9:3f:c6:
ac:47:2d:d9:b7:49:2e:4d:4f:03:7e:c5:d8:ec:f9:
fd:25:1b:61:2c:f7:d3:b4:c7:ea:80:30:56:00:38:
75:de:6b:bd:24:57:b5:a6:f3:bb:92:e1:af:d9:c8:
35:f2:8f:bb:bc:1a:86:a0:11:0a:97:3e:df:3b:59:
0d:3e:54:e8:e0:bc:0b:2d:f2:27:7f:c9:49:a6:cf:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:26:5C:DB:65:F5:EB:1F:C8:A4:C5:5A:D1:E5:2D:0D:A2:95:47:B6
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/6SZc22X16x_IpMVa0eUtDaKVR7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.64.0/23
91.208.247.0/24
Signature Algorithm: sha256WithRSAEncryption
42:46:82:6a:ca:d2:e4:22:f2:b5:2f:fa:88:19:16:41:64:cf:
49:92:22:c4:d3:56:cd:7f:07:ee:16:98:e4:29:ad:d6:18:bd:
7f:da:2a:45:f6:a8:f7:46:5d:85:1a:c5:a8:38:90:fe:34:46:
b3:26:26:7f:65:9d:7e:63:4d:c1:55:d4:7b:30:98:cf:d8:85:
47:fa:0b:ec:e1:a9:3d:b1:bf:58:d7:14:2c:b3:4d:4c:dc:5c:
e5:e2:7c:4c:d1:92:be:9e:7c:51:b8:f9:59:dc:83:d9:43:1f:
5e:ca:db:b7:05:c9:63:20:48:f2:32:85:4e:4f:b7:3c:9a:fd:
33:0d:60:a6:b2:08:ac:6e:db:c8:87:15:5e:7b:7b:45:6f:24:
be:51:f1:75:34:f8:31:8c:84:4d:05:12:fe:13:9a:c0:28:13:
8f:79:37:5d:76:e0:53:82:ca:fc:8b:a4:b9:df:0e:2e:81:82:
b6:9c:f9:5b:7f:d6:f1:1a:e8:c5:48:01:e1:d6:70:c5:e9:e3:
83:ab:b8:b3:4a:f8:20:44:0a:5d:4a:c6:bf:3f:cb:cc:88:b2:
a8:14:e6:fd:65:33:d3:3b:c7:ef:1a:b2:b0:14:ae:40:10:80:
a3:ef:46:9d:ad:0b:c9:7b:9a:0d:44:21:e1:c5:e0:85:27:5a:
7b:66:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:15 2024 by rpki-client on console-ams.rpki-client.org