Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/b1k-6_IswSfBf_ESZzczw3zRr-I.roa
File: b1k-6_IswSfBf_ESZzczw3zRr-I.roa (raw, json)
Hash identifier: 4aXPZ5IZIMdqIgFo2lEOiLaAysSLfXfUeSvBl1JfeI4=
Subject key identifier: 6F:59:3E:EB:F2:2C:C1:27:C1:7F:F1:12:67:37:33:C3:7C:D1:AF:E2
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 03A65B7F
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/b1k-6_IswSfBf_ESZzczw3zRr-I.roa
Signing time: Sat 01 Jan 2022 16:11:30 +0000
ROA not before: Sat 01 Jan 2022 16:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42112
IP address blocks: 91.199.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61234047 (0x3a65b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Jan 1 16:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f593eebf22cc127c17ff112673733c37cd1afe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:6a:d0:53:e2:5c:02:76:82:9e:eb:c8:8d:
53:95:fd:a9:44:a5:49:bc:f4:14:91:8d:42:da:33:
ad:b0:bd:7e:8c:92:b0:eb:f4:07:e9:2a:c3:4e:9f:
47:81:a7:67:b0:72:ba:5a:3b:94:9a:09:05:29:1e:
6a:9f:8e:e8:8a:34:e5:be:bb:32:af:7f:a7:9a:79:
15:6f:ea:c8:6e:fc:91:87:21:22:b9:76:33:0d:d5:
c4:98:9f:3b:53:8d:2a:c8:ab:b0:aa:c9:db:13:79:
b4:78:c6:87:b1:cf:7c:47:1a:d2:6f:cf:fb:27:da:
00:3c:b4:67:75:5a:d7:f2:6a:41:ee:c8:b1:f2:ff:
82:3a:c4:c0:bb:eb:20:8b:c1:19:c5:93:4b:c1:3a:
b5:6e:81:fa:ae:af:0b:a1:0f:78:05:90:af:ed:45:
11:ad:08:af:a1:08:b2:96:30:08:ce:e7:67:bd:26:
3e:31:ac:c9:88:e1:25:ef:1d:7d:e3:91:12:17:55:
2f:58:a4:f8:36:6b:33:ae:12:1e:93:14:b7:a8:4c:
d6:15:c1:85:d0:4a:ee:86:bc:aa:c3:4c:63:a3:3c:
6d:69:50:18:40:d5:1f:84:95:73:49:8d:24:78:81:
69:e1:54:c3:51:fa:80:e6:89:61:0c:95:9c:c4:2d:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:3E:EB:F2:2C:C1:27:C1:7F:F1:12:67:37:33:C3:7C:D1:AF:E2
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/b1k-6_IswSfBf_ESZzczw3zRr-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.91.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d2:38:a9:0a:bc:57:dc:be:30:38:d2:6d:9e:49:1a:5f:f1:
af:ad:81:68:80:8f:bf:f0:c2:d7:6e:9d:9f:23:9b:03:3e:29:
df:98:12:e2:34:4b:88:4f:11:7d:43:aa:21:24:ec:63:33:10:
3d:81:84:ed:09:23:a3:2e:91:48:49:7f:3d:a6:f7:e6:4b:e5:
3a:4c:51:05:de:2e:89:c7:f4:e5:ee:30:56:41:83:94:fc:c1:
7f:b2:f6:e9:4e:98:7e:4d:1d:6d:68:fd:18:de:ee:9d:e8:bb:
0d:36:d3:36:4a:e3:3e:54:da:e0:0e:e2:d1:c4:69:66:df:fd:
07:e9:c1:a7:c5:d9:15:17:13:16:3f:fc:87:ec:8f:33:ae:76:
25:55:7a:3b:e8:6b:0c:e5:f6:89:52:44:e3:0f:7e:7c:0e:8c:
c8:99:fa:b9:64:82:a7:a3:7f:6d:9a:2a:51:49:bc:07:27:41:
87:88:fe:b2:70:07:46:8f:60:e3:f8:ce:f0:14:70:df:53:01:
cf:9c:ea:49:71:3f:ce:3c:ad:af:20:40:83:76:f0:e0:19:ab:
16:89:ce:eb:bc:f3:8c:4f:7c:63:c8:16:40:99:a9:94:69:84:
d1:cd:7b:bd:5a:1f:74:88:91:cc:fb:25:2c:8c:b8:33:2b:ae:
58:f5:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:33 2024 by rpki-client on console-ams.rpki-client.org