Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/u2i7bGIDW0ZOdAjyZLQiwStXjFw.roa
File: u2i7bGIDW0ZOdAjyZLQiwStXjFw.roa (raw, json)
Hash identifier: +VkDhUVv7il0AhZk1aq2LnVyrabddvu7kc5rgiz/JGY=
Subject key identifier: BB:68:BB:6C:62:03:5B:46:4E:74:08:F2:64:B4:22:C1:2B:57:8C:5C
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0BEDE30D
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/u2i7bGIDW0ZOdAjyZLQiwStXjFw.roa
Signing time: Tue 07 Jun 2022 01:58:22 +0000
ROA not before: Tue 07 Jun 2022 01:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211557
IP address blocks: 91.151.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200139533 (0xbede30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jun 7 01:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb68bb6c62035b464e7408f264b422c12b578c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:f4:19:20:6d:8f:48:e1:1b:9a:d1:c2:a7:
17:2a:e6:42:20:17:db:34:22:42:d6:00:63:4b:28:
44:16:2f:e7:3f:f4:f6:12:2b:ac:4b:eb:a7:32:9f:
c6:b1:12:64:0d:53:50:25:8f:ab:4d:f9:86:db:ed:
2a:e0:fa:84:ff:20:38:d8:cf:db:96:30:b0:92:52:
54:ea:11:8e:88:18:50:58:f2:b5:89:c5:15:e6:4e:
57:94:82:fb:d1:c9:a2:5d:aa:51:e7:4d:78:08:59:
41:a6:f2:c5:99:3a:dd:f3:1f:9e:71:48:bd:08:a5:
f9:84:4b:3c:2c:41:a8:2e:41:b2:8c:64:bc:bf:c7:
cb:e3:42:11:fb:ae:ea:20:46:1c:0c:7b:52:20:9f:
24:d5:62:d2:66:27:8c:4e:68:25:15:f9:e4:5a:52:
d1:27:87:5a:a2:99:cf:d1:8a:3a:bd:c7:ae:82:ad:
01:fd:3c:c9:96:7f:5b:cd:eb:16:e5:14:96:58:c4:
cb:6e:0b:fa:60:e2:9e:13:a1:7e:67:46:a8:58:97:
b5:c2:0d:79:af:c1:bc:20:8d:a1:4e:91:9d:e0:bd:
b9:22:43:3c:ae:fc:6b:f1:19:65:93:8e:d8:09:05:
1d:e5:f1:52:24:23:81:9b:31:1b:ae:35:d6:64:00:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:BB:6C:62:03:5B:46:4E:74:08:F2:64:B4:22:C1:2B:57:8C:5C
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/u2i7bGIDW0ZOdAjyZLQiwStXjFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3a:bc:8a:ed:98:de:f0:09:2c:f2:9e:68:c7:6e:62:aa:4b:
84:0e:41:c1:c6:65:a5:81:d4:e6:b7:7a:69:18:aa:bb:59:c7:
39:7b:d8:d1:6c:9f:78:46:da:91:7c:d9:52:e6:c2:1e:8e:8b:
59:4f:bb:25:12:63:3d:fc:f2:70:9c:e2:63:a4:9e:5b:5a:4e:
e2:a6:4f:f5:ce:57:39:c2:c8:12:eb:00:db:ce:f6:fb:18:08:
94:ef:74:58:b2:1f:8f:f0:f3:bf:d3:d2:e8:2d:ef:83:77:29:
ba:a9:f0:a1:cd:50:5f:0a:ad:2a:0d:8d:32:6c:f1:96:19:fc:
5f:d7:10:7c:b5:1b:27:2e:f7:82:a0:af:af:13:0d:a4:12:5d:
55:67:bc:d4:d1:65:70:d9:bf:1c:fb:b1:d7:a6:d2:3d:84:8d:
32:e6:d0:93:ca:a0:c6:e7:e5:79:3d:e0:99:a6:d4:3e:5e:e5:
e0:87:e4:43:4c:a9:8e:fe:f4:bd:4d:67:11:82:90:02:93:20:
47:0a:fe:a9:db:9e:32:1b:5d:04:94:65:4e:b8:97:ee:62:97:
a6:a1:f5:61:30:5a:fd:ad:ae:29:e7:fe:bb:8a:29:02:76:10:
b0:69:7e:9e:e7:d7:5c:91:b0:26:16:7d:a7:28:1f:5b:b0:f5:
d6:45:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-fra.rpki-client.org