Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/N677bxyASfH7nh2MVcgCdjxx8yg.roa
File: N677bxyASfH7nh2MVcgCdjxx8yg.roa (raw, json)
Hash identifier: 45UEzjUq6E1EVg+eriIupNeManvbKchce4R1NK0fGd0=
Subject key identifier: 37:AE:FB:6F:1C:80:49:F1:FB:9E:1D:8C:55:C8:02:76:3C:71:F3:28
Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial: 04329D69
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/N677bxyASfH7nh2MVcgCdjxx8yg.roa
Signing time: Sat 01 Jan 2022 05:00:25 +0000
ROA not before: Sat 01 Jan 2022 05:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209975
IP address blocks: 91.239.147.0/24 maxlen: 24
2001:67c:1240::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70425961 (0x4329d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Validity
Not Before: Jan 1 05:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37aefb6f1c8049f1fb9e1d8c55c802763c71f328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:bd:cb:2e:5c:e7:8e:31:16:fb:81:84:6b:
93:02:35:d0:2c:f7:f3:ba:74:8d:e8:d5:83:1a:fd:
7a:41:76:68:8a:63:3b:73:a6:ea:7c:48:e2:52:af:
ed:29:b2:34:4c:5b:e5:0f:7f:c0:5b:ab:88:38:0a:
f0:73:56:c4:bb:9a:86:41:35:72:09:b5:a0:92:46:
fe:18:e0:d3:ec:34:60:e3:f3:62:d5:bc:35:50:57:
10:c4:83:b6:bc:06:f0:d6:53:9c:cf:dd:63:be:49:
d1:eb:cf:b8:d1:78:3b:c9:36:ed:29:3e:dd:22:b7:
bc:b7:94:29:e3:04:10:f1:31:e4:41:82:11:d9:71:
77:e8:63:01:37:c4:03:df:0a:d1:28:43:86:95:2f:
8d:a6:88:5a:64:aa:d4:84:5a:28:93:fd:1e:89:57:
77:71:7a:30:47:fa:c7:f9:52:69:7b:03:5a:92:3c:
2c:0b:bd:ff:44:1f:49:f0:12:74:cf:dc:81:d9:ea:
00:05:01:1f:41:9d:d7:95:06:fc:79:1b:83:c1:40:
eb:b6:9d:f5:71:ec:48:c8:e7:fb:36:57:66:9c:eb:
bd:d2:7d:77:64:e2:4c:e1:07:b2:44:92:91:58:c9:
9f:fa:5f:4a:ce:ba:3b:ef:45:00:97:15:d9:85:2b:
b9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AE:FB:6F:1C:80:49:F1:FB:9E:1D:8C:55:C8:02:76:3C:71:F3:28
X509v3 Authority Key Identifier:
keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/N677bxyASfH7nh2MVcgCdjxx8yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.147.0/24
IPv6:
2001:67c:1240::/48
Signature Algorithm: sha256WithRSAEncryption
94:fe:5f:ef:b7:81:81:fa:2d:a5:00:fd:82:8f:34:82:f6:21:
3a:22:80:b0:ee:72:24:f8:8a:24:d7:58:f1:e7:2a:28:52:f5:
72:50:79:49:b5:10:71:df:82:75:12:48:de:2f:25:dd:93:85:
f7:c6:6b:0f:83:c0:40:c0:db:95:d4:56:3f:9b:2e:25:b4:12:
b6:2b:79:3b:32:72:70:35:a9:d9:26:06:89:3e:86:1f:c3:6c:
e6:e5:86:01:a7:ab:9e:59:ca:a7:29:f4:1b:9e:84:c0:85:b8:
17:2b:b1:64:37:34:e6:17:57:10:6f:53:cc:65:1e:a2:15:dd:
dd:c2:5c:5a:ba:a1:2c:93:92:a5:61:57:99:2e:88:6f:70:f9:
1c:17:f3:7f:86:9c:ba:44:f3:79:e8:a1:6a:10:db:fc:77:39:
ac:27:8e:11:ef:80:c9:4e:50:ac:b3:ae:d2:63:8b:62:38:ce:
c8:bb:28:90:ca:2c:51:d8:db:6e:c8:64:95:3d:6b:ea:e5:8d:
2f:ef:78:5d:55:00:aa:6b:26:52:ba:f4:be:9f:f2:b1:a1:79:
5b:1c:75:94:ff:2b:22:87:8e:bc:3f:ee:c4:1f:81:cc:e6:61:
be:12:1e:32:8b:66:2a:4b:c7:4f:aa:5f:11:f1:2b:cd:5b:19:
b8:f7:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:37 2024 by rpki-client on console-ams.rpki-client.org