Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/7n7LLcTbDVla1A8dgnpb3nrV5JQ.roa
File: 7n7LLcTbDVla1A8dgnpb3nrV5JQ.roa (raw, json)
Hash identifier: Lcut6/XIj0Lh00NSOFWRlZQVVXpCeOuQeIYPqg7LBnM=
Subject key identifier: EE:7E:CB:2D:C4:DB:0D:59:5A:D4:0F:1D:82:7A:5B:DE:7A:D5:E4:94
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0BEF1050
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/7n7LLcTbDVla1A8dgnpb3nrV5JQ.roa
Signing time: Tue 07 Jun 2022 01:58:23 +0000
ROA not before: Tue 07 Jun 2022 01:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211560
IP address blocks: 91.151.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200216656 (0xbef1050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jun 7 01:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee7ecb2dc4db0d595ad40f1d827a5bde7ad5e494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:5d:a0:d6:61:01:fe:a7:e7:fb:14:12:33:
24:5b:44:8b:c1:51:66:ca:df:91:79:c4:b3:cb:10:
09:6e:90:26:94:bb:e3:59:7a:64:c8:19:39:1e:e4:
e1:80:54:8d:28:16:6a:61:fc:06:c8:fe:2b:61:d0:
20:c5:8e:81:a9:e4:c2:94:a3:76:4f:27:c1:ce:17:
da:15:4b:a1:a7:81:1f:df:6b:7e:9a:22:63:e9:dd:
8f:f9:2f:01:b8:62:08:07:73:fd:e0:84:1e:5a:4b:
c9:55:5e:97:94:40:72:44:f1:67:ec:70:91:76:cf:
d6:b6:cb:55:e1:70:f9:9f:72:b5:26:a6:5f:a3:26:
87:a3:a0:0d:2b:f6:01:66:01:82:56:0d:d2:de:7a:
ee:7a:d6:f2:19:36:bf:2a:6e:88:95:2b:8a:73:f4:
de:83:41:90:85:95:3f:49:22:5e:c1:2d:26:ca:36:
79:80:56:76:1c:f1:c2:64:ca:92:ce:96:75:01:cc:
1d:b9:ed:3e:08:10:ba:d3:80:fc:c0:2c:ee:96:ad:
80:d5:ed:da:f0:53:66:c4:53:82:95:1e:87:3c:3a:
c7:7d:db:fd:bd:ff:bd:a6:41:aa:d4:cb:05:b4:c4:
69:7b:d5:b9:08:6d:9a:df:1b:f9:00:96:10:d0:3a:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7E:CB:2D:C4:DB:0D:59:5A:D4:0F:1D:82:7A:5B:DE:7A:D5:E4:94
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/7n7LLcTbDVla1A8dgnpb3nrV5JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.94.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2a:2b:a0:30:19:73:57:e4:2e:ad:46:53:b0:e1:8a:c6:94:
95:3e:f1:dd:48:06:59:61:c4:c4:91:75:12:07:34:f3:42:2f:
93:80:2f:07:16:9a:b6:4f:64:1e:3e:fb:c7:39:78:28:73:50:
76:90:00:7b:ef:7c:d5:4b:03:8b:41:e3:36:3c:27:fc:a8:d6:
52:26:ad:fc:c1:e3:af:b4:ca:05:65:80:06:c6:6d:56:9a:6a:
e9:d9:0b:08:fb:17:f8:01:0d:e7:0c:d7:5e:b1:62:ac:e4:5f:
2b:f3:45:e6:6c:b7:2d:04:ab:d3:33:8a:4b:a2:e9:6a:40:76:
5e:be:47:99:e9:93:fc:c8:6c:ae:a9:14:07:6b:f4:d6:ce:8b:
da:b5:47:24:a9:ef:6a:e9:94:43:29:8c:e6:12:eb:be:a2:0c:
40:3e:98:1c:3d:91:65:bf:55:76:50:b1:b1:f6:b0:66:55:96:
f1:84:ee:c5:73:a3:33:18:09:64:56:44:85:3d:10:a2:05:3c:
ce:1b:44:12:6f:3d:fb:ed:4b:b3:2f:ff:8b:90:b7:d0:53:14:
4d:c5:94:4c:2c:9b:ae:19:a7:29:62:bb:78:83:43:fe:37:99:
cc:09:0a:3a:87:91:69:f3:2b:5a:55:0f:21:67:85:45:db:0d:
a9:c8:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org