Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/nGqeaTbs4D0sxia9hieS9lBr6j8.roa
File: nGqeaTbs4D0sxia9hieS9lBr6j8.roa (raw, json)
Hash identifier: Wqy1UHuTzdJyf31Gn8SOe0AiEqJQ2u9zvGE2NvzjdHk=
Subject key identifier: 9C:6A:9E:69:36:EC:E0:3D:2C:C6:26:BD:86:27:92:F6:50:6B:EA:3F
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 01856F2FE5F11E2EE461285CE3989A36D963
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/nGqeaTbs4D0sxia9hieS9lBr6j8.roa
Signing time: Sun 01 Jan 2023 21:14:48 +0000
ROA not before: Sun 01 Jan 2023 21:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52148
IP address blocks: 91.209.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e5:f1:1e:2e:e4:61:28:5c:e3:98:9a:36:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Jan 1 21:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6a9e6936ece03d2cc626bd862792f6506bea3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:12:4e:e3:71:11:d8:06:63:bf:cd:a0:cd:
57:78:25:5d:7c:23:c2:12:62:2e:06:84:c8:56:a7:
15:1d:fd:79:fc:e4:70:a4:e6:d5:cd:15:98:2f:f9:
34:14:87:a9:06:22:fa:38:44:40:02:9c:ab:58:d3:
23:8a:49:44:0c:fd:5d:5a:a5:27:0f:ae:dc:d2:b2:
e6:1f:f7:30:6c:8c:cb:bc:71:7d:b3:7c:7a:0b:6d:
e9:ed:50:0e:50:a1:9a:d5:6d:cd:46:21:bf:36:d9:
66:f4:8c:90:5f:16:b9:45:18:da:24:82:28:e1:40:
fd:5e:05:04:c3:5c:c3:45:ec:e5:6e:81:93:3b:5a:
77:b3:58:9e:13:8f:49:7c:3a:1b:47:36:f1:82:67:
02:e5:4a:07:d6:b6:61:b6:54:d1:dc:09:65:f3:50:
16:d7:f3:60:d6:6d:da:95:a5:e4:28:0f:8c:aa:ec:
c4:be:dc:cc:f3:a4:df:fd:f7:8b:8b:35:60:5a:83:
e3:0f:06:10:29:a5:d3:50:c4:8d:4d:e0:4a:a6:d5:
97:d9:c4:c5:c5:8a:21:01:65:32:4f:2a:ec:ee:d4:
a9:49:cc:68:6d:42:aa:c0:a8:2a:5e:03:40:56:db:
9f:48:73:d0:a3:c4:6d:5f:44:16:c7:52:8e:7c:29:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:9E:69:36:EC:E0:3D:2C:C6:26:BD:86:27:92:F6:50:6B:EA:3F
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/nGqeaTbs4D0sxia9hieS9lBr6j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:05:2f:3d:ef:35:1c:61:b2:43:26:1c:1a:4d:46:6c:8d:ff:
64:47:d9:78:36:b2:9e:0d:33:50:c6:eb:94:57:51:4f:a8:33:
dc:7b:c3:7e:e1:45:fd:46:6a:07:d5:02:52:f8:61:ce:1e:54:
3c:2f:02:7c:11:73:49:e5:7b:23:a6:c3:e2:69:90:71:45:c2:
4e:d7:41:f4:24:5b:03:ae:2f:d5:9f:43:91:dd:5f:3f:e1:08:
e4:b8:0f:b7:34:a3:fd:88:d5:de:c5:cc:b6:47:f9:ea:69:40:
b2:ef:c2:c9:ac:5e:42:34:92:e5:51:67:32:72:8f:d5:9e:2e:
00:f8:26:86:38:d0:86:14:f3:e8:0f:23:be:23:62:18:21:43:
c6:08:54:7b:eb:55:2c:dc:8a:95:46:1b:cb:0b:e6:00:a4:b5:
fa:6c:e0:b8:34:8e:91:f8:5f:fa:98:5b:61:55:19:3b:6b:dd:
f1:e5:c3:62:5e:df:73:9a:95:a5:ae:f2:02:34:3c:82:77:60:
88:64:45:f0:79:cc:06:10:b7:55:59:05:a6:88:47:92:5f:5d:
75:71:ec:96:58:80:19:ce:63:92:c6:79:d7:b4:7d:b3:cd:c0:
83:d9:26:b3:05:4c:cd:9a:a0:ce:9f:02:77:3c:50:89:9d:94:
51:e1:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:05 2025 by rpki-client