Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/JhRnV-UfOS5QSEqF3ARhJjTjpVM.roa
File: JhRnV-UfOS5QSEqF3ARhJjTjpVM.roa (raw, json)
Hash identifier: ZOLY3EI7JnbBopvjULebZUcmRGHWr4gJqE/y39+Fork=
Subject key identifier: 26:14:67:57:E5:1F:39:2E:50:48:4A:85:DC:04:61:26:34:E3:A5:53
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 13249CC5
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/JhRnV-UfOS5QSEqF3ARhJjTjpVM.roa
Signing time: Sat 01 Jan 2022 00:54:24 +0000
ROA not before: Sat 01 Jan 2022 00:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47800
IP address blocks: 91.208.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321166533 (0x13249cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Jan 1 00:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26146757e51f392e50484a85dc04612634e3a553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:87:89:4f:d5:8c:9d:27:b9:10:cb:36:b6:
26:4d:e8:4d:6d:62:63:9d:f7:3e:03:1d:32:f9:35:
5f:c5:6e:8e:6c:fe:60:f4:06:12:12:63:d4:2f:bc:
71:92:2e:c0:76:cd:77:59:de:03:a5:22:7e:a9:e5:
65:32:86:0d:98:9d:c1:df:e8:fc:17:40:f7:41:58:
4e:d7:c8:3b:43:75:d7:24:17:7a:6b:39:da:f8:08:
71:48:b3:a9:05:fb:56:ce:03:a8:e7:01:84:98:e6:
a4:93:31:7d:e8:21:5c:02:c5:3d:ae:cd:6d:24:7d:
a7:90:56:8e:59:b8:ae:ff:9e:27:a5:8b:5f:d5:72:
1e:59:76:12:af:0f:65:51:27:f6:72:9a:1c:03:65:
78:9e:66:e2:42:01:9e:0e:40:35:86:33:e7:54:19:
63:cb:c0:8c:6a:4e:d2:8f:64:63:bb:2c:0d:65:f1:
52:50:b9:52:cd:6c:13:11:28:4f:6a:7b:f8:20:0e:
fc:fa:ed:64:23:5d:40:79:1c:8f:64:2c:e7:c0:36:
fb:07:f3:df:19:92:1a:1f:db:49:4d:7a:a6:60:72:
cb:3b:9c:fc:e5:9d:6a:c0:fd:5e:5e:f0:83:95:d5:
1d:c1:a4:bb:02:7f:66:33:a8:1b:f5:8d:17:bb:e6:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:67:57:E5:1F:39:2E:50:48:4A:85:DC:04:61:26:34:E3:A5:53
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/JhRnV-UfOS5QSEqF3ARhJjTjpVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.116.0/24
Signature Algorithm: sha256WithRSAEncryption
08:94:1c:70:9a:24:fc:f8:1d:5a:8c:aa:37:41:e6:28:97:e4:
ba:65:5d:aa:fd:13:cb:b8:2c:cd:03:cb:56:42:a5:39:56:84:
83:b1:40:48:65:d8:20:73:89:d1:26:9a:51:51:43:b4:f3:6f:
72:b3:df:07:c9:5a:41:66:15:89:21:ec:c6:57:cd:0a:62:f3:
9e:79:87:a0:9f:c6:c0:8b:cd:75:1d:f4:79:c0:bd:1f:ca:4c:
a6:36:a5:f6:34:5c:dc:c6:22:46:48:05:cc:9f:49:30:89:ca:
a4:35:d9:72:38:84:d9:56:34:fe:ff:bf:2d:02:9f:11:55:13:
f6:e9:3c:36:ae:95:88:ab:cc:4a:03:ec:71:29:ad:47:22:a0:
e4:a3:b8:10:e1:6e:e8:40:aa:5d:11:1b:19:df:99:43:11:c6:
62:a2:8d:e4:c3:b7:d1:f1:73:7c:40:3d:06:eb:b1:90:3d:06:
be:1f:f6:92:24:d3:2b:b7:6b:36:39:31:09:12:9f:89:b3:46:
08:0e:8f:24:7e:2b:b3:bb:58:82:be:c5:90:56:35:ef:41:21:
32:82:55:b2:6b:5a:70:27:de:be:19:3f:bf:d7:f4:9a:1b:8c:
f2:7d:91:3a:ce:e9:59:50:a1:a0:62:c6:09:15:5c:86:13:e5:
e1:44:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org