Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b7Eqy6Y8FUVf92UjS4yQoaebGU4.roa
File: b7Eqy6Y8FUVf92UjS4yQoaebGU4.roa (raw, json)
Hash identifier: Qff1DsGkU54xZUqxS7ga2yYw1KakY6DpWVVRjxxzVcM=
Subject key identifier: 6F:B1:2A:CB:A6:3C:15:45:5F:F7:65:23:4B:8C:90:A1:A7:9B:19:4E
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01839980F4284106360BCCDF74D2D4D96432
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b7Eqy6Y8FUVf92UjS4yQoaebGU4.roa
Signing time: Sun 02 Oct 2022 16:21:48 +0000
ROA not before: Sun 02 Oct 2022 16:21:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 91.186.194.0/23 maxlen: 24
94.241.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:99:80:f4:28:41:06:36:0b:cc:df:74:d2:d4:d9:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 2 16:21:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fb12acba63c15455ff765234b8c90a1a79b194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:e9:50:c0:c6:b5:d0:4b:65:91:32:ef:4a:
63:30:66:20:25:41:b5:38:58:fe:15:b2:50:30:71:
b8:38:4b:ea:18:98:03:69:36:4d:6c:ee:04:33:7f:
94:70:6a:0a:09:7e:25:fb:17:bf:6f:9c:1c:08:d1:
d1:a6:b7:ac:b4:ac:41:04:92:ee:e0:85:3d:56:5f:
fa:26:6f:c3:34:88:f8:65:af:73:ed:82:33:64:4d:
c4:be:7c:28:95:d1:99:7d:da:5c:58:79:c4:a2:ab:
bb:2a:30:02:86:fa:f6:c2:30:71:7b:ef:6c:e4:ab:
fe:0a:c9:bb:d8:eb:48:c8:57:98:9e:3f:04:84:6f:
6c:db:95:22:49:7b:01:49:1f:d8:b4:2e:81:e3:03:
31:e9:b9:e5:35:e8:38:e3:04:88:16:71:8f:df:ec:
c8:41:17:67:be:59:82:cc:af:20:ff:02:5d:3f:b4:
9e:3c:db:cb:38:4d:63:8d:14:52:b9:94:16:4b:91:
9e:65:65:bc:4c:1f:37:83:b3:17:13:d7:e7:db:fa:
dc:cf:45:2e:88:45:43:e0:9b:12:d9:aa:8f:de:66:
5a:f6:6b:79:c9:6c:d0:92:47:06:ad:14:76:01:a3:
77:1e:34:0a:1f:12:1f:15:db:64:44:45:1c:10:8b:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B1:2A:CB:A6:3C:15:45:5F:F7:65:23:4B:8C:90:A1:A7:9B:19:4E
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b7Eqy6Y8FUVf92UjS4yQoaebGU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
94.241.166.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:8a:89:c6:fb:a6:25:70:19:5e:09:9b:46:81:68:b0:78:a1:
96:17:94:3a:a7:80:55:79:53:4a:03:24:fb:e1:f8:21:57:8b:
3f:2b:7f:69:af:e8:f9:0f:5a:ac:97:9a:54:dd:de:8e:34:0d:
3b:8a:5a:56:99:aa:3b:32:0a:f0:3d:f4:b2:51:fa:48:1f:97:
a0:4f:9a:6d:cb:70:6d:2c:e1:e3:55:e8:0f:56:2d:74:0f:b0:
96:1e:a6:06:3c:f8:d2:d0:48:f2:06:e7:90:ea:28:1b:f2:6a:
7f:31:bd:b9:68:59:99:71:68:a1:a2:32:c9:70:cc:d0:02:23:
c8:b6:d5:df:e9:82:f4:aa:2b:e6:6b:42:38:fc:03:e9:7e:a5:
dd:51:1d:cb:45:5d:a2:9f:f0:a5:08:60:5a:e0:ad:c4:af:69:
45:d2:9a:e5:9e:7e:28:7f:80:f2:f3:5b:49:9d:15:86:26:ce:
25:ab:24:76:a2:ab:a2:97:a1:36:e7:9b:f4:35:c5:c5:72:75:
da:64:65:0b:73:3e:37:fa:60:06:ae:25:d4:47:87:fe:4e:5b:
2b:29:7c:88:9c:a4:a2:f4:66:7f:62:24:41:e7:e7:72:84:dd:
04:68:e7:29:5c:2b:19:7e:72:ba:0e:35:97:c9:4c:5f:fb:84:
72:70:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org