Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/U4_3tiF3x1D78HGPBNRHvI6aP1s.roa
File: U4_3tiF3x1D78HGPBNRHvI6aP1s.roa (raw, json)
Hash identifier: 3/DdVHKQfIhcI1P0I2eea0etHFXSREuUUe8qgXeLRYI=
Subject key identifier: 53:8F:F7:B6:21:77:C7:50:FB:F0:71:8F:04:D4:47:BC:8E:9A:3F:5B
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01847BED0ED5D8AB32FF88C87FFC2DC154F7
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/U4_3tiF3x1D78HGPBNRHvI6aP1s.roa
Signing time: Tue 15 Nov 2022 15:34:04 +0000
ROA not before: Tue 15 Nov 2022 15:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 91.239.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:ed:0e:d5:d8:ab:32:ff:88:c8:7f:fc:2d:c1:54:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 15 15:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=538ff7b62177c750fbf0718f04d447bc8e9a3f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:8f:17:1d:52:ac:4e:4a:3e:36:e4:15:6d:
9c:92:63:6d:61:0b:3d:36:f7:7f:93:2f:57:2c:c9:
46:2b:5e:aa:06:ef:44:be:84:db:87:95:a1:bf:d2:
b4:0c:33:62:db:c4:d9:3d:33:6e:47:8f:d1:ac:76:
f5:bc:e2:1a:dd:52:1a:29:31:47:45:75:14:e2:41:
a0:d7:1e:48:c6:cc:b9:36:3b:05:de:43:49:c3:01:
c2:14:8c:43:e7:b3:11:6b:9d:a6:3d:7f:1b:97:2e:
c3:10:ef:82:93:1c:af:84:f6:7d:f1:42:3b:e1:66:
ec:66:dc:d8:4f:36:30:dc:7f:d9:34:75:bf:ec:cd:
fb:e0:7b:42:7a:6a:43:09:2c:06:5c:1c:16:a7:71:
f2:f9:00:3a:67:74:35:59:09:44:ef:d8:50:2d:9f:
b9:f0:2f:40:56:36:ad:0f:97:0c:92:bb:39:6f:bc:
f7:69:a8:88:33:d1:b5:0d:71:e2:da:52:34:35:68:
09:a9:e6:30:57:e5:65:eb:9e:88:9c:c2:6c:d3:07:
3c:38:b5:ea:ae:9e:9a:b3:a7:71:8c:70:d7:94:74:
71:83:70:a0:b1:a1:da:f8:8f:09:b4:52:5f:29:d2:
a5:87:0e:5f:a6:34:18:8d:77:d8:92:e3:10:ec:69:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:F7:B6:21:77:C7:50:FB:F0:71:8F:04:D4:47:BC:8E:9A:3F:5B
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/U4_3tiF3x1D78HGPBNRHvI6aP1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:01:5e:4b:1f:38:9c:83:aa:cf:bd:80:a3:67:65:d9:ad:38:
40:29:18:9b:d5:67:11:48:57:3d:a7:05:a2:b1:38:d4:2f:aa:
10:e8:ca:84:2d:0a:c3:98:ac:c3:d7:9e:1e:55:79:7a:d8:c3:
f5:78:59:87:c5:25:29:9c:13:21:51:92:6c:77:d9:49:9a:db:
58:47:e9:43:8d:bb:f8:3c:26:5b:45:07:68:5e:68:0e:fb:af:
fd:f2:e8:60:a9:a6:28:52:d9:47:5e:e4:32:83:ee:95:ba:9c:
7d:f7:8b:5a:b4:d2:2b:0e:02:c8:50:76:5a:ac:b1:31:48:ed:
62:b4:0a:b6:0f:47:1c:9d:c4:3f:b2:50:62:f1:69:1a:ce:5c:
5c:c6:b9:2b:81:de:a5:0b:0d:0a:44:24:88:30:6d:ea:90:6a:
0f:65:e1:96:5a:58:c3:87:8b:1c:86:fb:3b:53:db:5a:f5:bf:
55:91:86:ce:c0:69:b0:e9:b4:2d:de:3b:7e:a8:c9:0f:8a:1f:
7f:6a:be:93:29:96:4a:87:71:91:5e:bf:a4:2e:28:c1:62:ff:
da:fe:9a:97:75:06:e8:a0:ea:28:6e:1a:8f:30:6e:09:f2:7a:
78:17:97:df:8c:15:ed:03:72:5c:d1:86:ac:24:f8:06:4f:c7:
d4:bf:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org