Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/cXcA8w3nKxVh_Be4p2UpcIyWMvE.roa
File: cXcA8w3nKxVh_Be4p2UpcIyWMvE.roa (raw, json)
Hash identifier: oHLNj/xz67UEZoG6Th058hua3cQHCNqU5vPtoBCUWnc=
Subject key identifier: 71:77:00:F3:0D:E7:2B:15:61:FC:17:B8:A7:65:29:70:8C:96:32:F1
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018516B0F9BB95A35FB1C413BF9629C82B7F
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/cXcA8w3nKxVh_Be4p2UpcIyWMvE.roa
Signing time: Thu 15 Dec 2022 16:49:34 +0000
ROA not before: Thu 15 Dec 2022 16:49:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51540
IP address blocks: 91.151.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:b0:f9:bb:95:a3:5f:b1:c4:13:bf:96:29:c8:2b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Dec 15 16:49:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=717700f30de72b1561fc17b8a76529708c9632f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:28:24:d5:a5:d7:dc:52:e8:b9:1a:f7:52:
96:11:57:35:27:85:9b:22:57:c7:14:cb:51:9d:3f:
e2:51:24:46:24:74:79:19:4b:a6:6b:c4:5e:cf:c7:
01:64:bd:8e:da:2e:bb:d2:ab:41:fe:32:48:52:f4:
4f:cf:f1:f1:1f:df:5c:a8:6f:31:b4:0c:4b:dc:0c:
eb:c3:e9:46:e1:24:c6:a9:76:37:57:fe:f9:6f:10:
a8:d2:ff:3c:06:06:31:e7:34:9e:e9:42:c8:ea:82:
52:bb:18:b9:4d:f6:f4:f8:ab:8e:55:b2:6c:42:11:
05:0b:60:09:75:e7:72:33:d4:c2:7a:59:8a:56:cc:
f9:52:26:a0:49:6c:12:ec:9b:00:8a:ba:1a:23:e7:
c2:8f:6c:97:f5:2e:4b:68:c5:6d:df:65:1a:72:8d:
53:6f:69:6c:73:6c:f9:d6:ce:eb:72:fa:1c:ce:1c:
78:04:36:17:dc:a8:82:02:1c:8c:e4:45:86:7f:05:
1c:65:1a:6c:98:ae:4d:8c:88:10:ea:44:d6:e4:76:
08:0d:e7:6c:92:df:89:78:6a:aa:e5:a2:59:83:0e:
2e:d7:ea:03:15:a9:42:53:56:a4:5c:a2:88:4b:7e:
ba:d3:1a:a8:c7:93:cb:9b:6b:01:6b:1c:63:35:2c:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:00:F3:0D:E7:2B:15:61:FC:17:B8:A7:65:29:70:8C:96:32:F1
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/cXcA8w3nKxVh_Be4p2UpcIyWMvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:77:90:66:f8:99:61:a7:2a:62:5c:ac:1c:01:80:b0:77:c0:
0f:89:d7:33:dc:d4:be:56:98:20:32:9b:15:f7:36:2e:00:58:
f6:fe:ab:1e:73:3d:02:21:dd:07:4b:bc:e2:86:7d:d5:17:f9:
94:c8:b9:5b:7e:46:53:f7:e1:5b:07:b2:63:41:9a:6b:8b:a3:
54:6e:55:d2:b2:d5:bc:ad:e9:e9:ff:49:66:73:e8:10:c5:7d:
95:bb:5c:58:8c:75:ea:b6:3a:c4:53:71:88:b6:b1:93:54:e0:
9b:c2:8c:61:5f:96:3a:91:b7:dc:8f:13:6f:07:59:a2:1a:54:
50:e3:b1:f7:d9:69:d2:84:d4:79:60:56:81:db:2a:92:3c:28:
d8:57:dc:b1:83:d0:8a:3a:a9:15:40:3e:f9:e1:ee:83:86:f4:
77:d2:b7:21:f7:53:00:f6:14:35:33:1a:11:af:4a:1b:68:32:
ac:bd:18:af:52:8a:12:c1:d2:05:59:d4:29:2e:b2:4d:d5:c4:
2e:1e:89:b6:fa:41:a3:b9:81:23:96:28:37:f3:f3:c1:22:ba:
8b:fc:64:98:54:5b:28:40:ee:4a:09:47:aa:d6:2f:28:71:d3:
d4:fe:23:0d:61:78:94:0d:4f:f8:af:a6:a3:72:5e:a6:29:02:
69:2b:88:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:04 2024 by rpki-client on console-fra.rpki-client.org