Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/9TfpNkuaqelKWloWMHcbgYsb9T8.roa
File: 9TfpNkuaqelKWloWMHcbgYsb9T8.roa (raw, json)
Hash identifier: /ZxhpmZ/y/TxfCcI7ifbM+B2FKyWfNyT6LazZ1zxWSA=
Subject key identifier: F5:37:E9:36:4B:9A:A9:E9:4A:5A:5A:16:30:77:1B:81:8B:1B:F5:3F
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 12AAD88E
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/9TfpNkuaqelKWloWMHcbgYsb9T8.roa
Signing time: Sat 01 Jan 2022 13:06:39 +0000
ROA not before: Sat 01 Jan 2022 13:06:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50984
IP address blocks: 91.216.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313186446 (0x12aad88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Jan 1 13:06:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f537e9364b9aa9e94a5a5a1630771b818b1bf53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:0a:c0:5c:82:af:31:1a:d1:e4:17:7a:62:
a4:6d:e0:cc:44:3a:d0:f0:1c:2b:d2:d6:9c:e6:3d:
9e:05:e4:5d:c8:fa:69:18:92:0a:0a:86:1e:3a:27:
75:f7:e2:2a:89:59:89:25:7a:b2:3a:04:65:65:35:
e7:ab:d6:f8:39:32:99:f5:8a:ec:d4:9c:39:af:0d:
f9:37:5c:8e:9d:7a:ed:f2:6e:70:89:47:a4:fa:93:
5e:70:51:fd:ce:31:e8:1c:33:2f:81:7e:d8:11:52:
23:fb:64:16:73:a9:51:18:fe:42:38:a0:f9:11:87:
8b:53:86:fe:e0:3c:f2:33:f0:5d:90:87:52:80:b0:
4d:9d:3b:10:46:5c:a1:dd:69:db:d4:66:70:bb:1f:
be:b5:aa:f6:a7:b5:30:56:6f:80:3d:49:84:f0:8c:
cb:7c:49:63:95:a8:2f:64:f3:11:5b:07:06:40:b6:
08:fb:18:95:70:90:1a:cb:7e:bf:f3:21:17:fd:57:
4a:40:e3:b5:b0:87:ed:39:11:a6:44:fb:1c:52:43:
58:4d:6c:9d:37:ed:a9:8c:ca:0b:52:d6:b1:f3:e4:
af:b4:fc:bb:47:6b:99:55:a6:77:12:06:0d:64:86:
2b:9e:9a:bd:65:aa:5d:dc:ab:01:d2:f2:bf:70:04:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:E9:36:4B:9A:A9:E9:4A:5A:5A:16:30:77:1B:81:8B:1B:F5:3F
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/9TfpNkuaqelKWloWMHcbgYsb9T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.75.0/24
Signature Algorithm: sha256WithRSAEncryption
69:88:35:7c:fb:84:3a:7d:84:f6:d9:cf:28:45:55:b6:50:e0:
1e:e6:b9:11:f0:70:17:12:d3:18:f3:29:49:bf:bd:00:2e:81:
d6:5d:31:09:47:51:8a:21:c0:32:5f:8e:2b:0d:e0:e9:16:2e:
71:26:9b:6f:d5:86:cd:c8:85:19:84:4c:26:c1:99:5f:ca:ec:
52:fa:45:fc:ef:c1:9c:8e:fe:1c:d9:b4:a3:99:b6:8a:21:88:
7c:b6:1f:6c:8a:39:de:db:86:09:ee:6f:1b:94:5e:06:cd:e9:
5f:fd:4a:df:f2:9f:3d:d5:c0:66:e5:39:c0:f5:03:15:97:6e:
af:b7:fa:14:0c:a6:57:89:e0:77:ce:99:1b:e5:6d:3e:97:90:
81:bf:88:20:00:dd:d6:a3:b9:8e:9d:22:0d:7d:5e:70:2e:27:
f2:c9:87:20:b6:11:5e:ad:ba:9e:a5:fb:45:99:04:dd:a1:cc:
71:ca:0a:07:b9:b3:e5:1e:2b:71:a4:d8:c6:c8:b5:a3:71:5b:
20:ea:f4:4b:8b:24:18:20:0b:c6:89:0d:2d:99:49:0a:be:05:
e9:02:43:01:ba:cf:c0:14:55:2d:91:9b:57:88:fc:5d:97:9a:
49:92:fc:81:e9:9c:dd:e5:0c:f6:0d:1b:6f:c2:45:ec:6f:6e:
61:f6:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:21 2024 by rpki-client on console-ams.rpki-client.org