Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ni6hkpS9Pn8iTMcyk2kN2eOSa-U.roa
File: ni6hkpS9Pn8iTMcyk2kN2eOSa-U.roa (raw, json)
Hash identifier: hSE2xbMgZVSVyD6WfkVWKl8ReDb8uf13W8HVzRBbeCk=
Subject key identifier: 9E:2E:A1:92:94:BD:3E:7F:22:4C:C7:32:93:69:0D:D9:E3:92:6B:E5
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 0840ED99
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ni6hkpS9Pn8iTMcyk2kN2eOSa-U.roa
Signing time: Sat 01 Jan 2022 11:00:27 +0000
ROA not before: Sat 01 Jan 2022 11:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208627
IP address blocks: 45.91.126.0/24 maxlen: 24
2a0e:f42::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138472857 (0x840ed99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Jan 1 11:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e2ea19294bd3e7f224cc73293690dd9e3926be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:5f:2d:5a:be:68:88:ad:78:cd:f1:94:1e:
a5:f0:e7:25:33:e8:6c:fe:5a:a4:03:83:b3:96:53:
4e:3a:9c:ed:04:06:6b:a9:57:bd:6a:23:fb:d8:40:
36:63:f3:a5:b6:63:dd:b1:5b:e0:71:d7:4f:43:d0:
da:37:2d:83:3d:2b:d3:22:01:4b:e1:6f:7b:bf:36:
35:ae:87:73:1d:25:61:be:4c:ac:22:bc:e9:f3:68:
b3:83:56:04:ae:d0:80:1a:24:cd:ba:6e:7b:49:8f:
28:64:76:fd:de:29:d6:2d:4b:81:8c:09:04:80:08:
86:43:9e:16:ab:c1:05:1a:0c:7d:e6:2d:cc:74:ff:
64:67:27:ca:4a:31:22:e8:2c:07:b7:2b:ad:6c:50:
f1:5f:6b:8e:24:cc:b3:c6:6a:89:29:40:10:4a:77:
68:91:37:8c:a0:f2:c8:4d:18:a4:41:6a:46:74:7a:
d4:d6:dc:df:bf:4f:fe:e5:e8:72:42:86:3c:de:2a:
3e:30:42:46:8c:a9:38:d4:4b:e0:52:65:e8:41:96:
cb:6b:8c:f1:ec:9d:b5:c9:38:b4:37:f6:f7:4a:d5:
57:28:68:bc:c9:48:26:34:c7:51:3c:2a:20:00:1a:
2b:7f:06:f8:39:eb:ad:5c:05:26:2f:c4:a1:8c:5b:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:A1:92:94:BD:3E:7F:22:4C:C7:32:93:69:0D:D9:E3:92:6B:E5
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/ni6hkpS9Pn8iTMcyk2kN2eOSa-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.126.0/24
IPv6:
2a0e:f42::/32
Signature Algorithm: sha256WithRSAEncryption
3e:b2:57:20:31:7a:44:45:70:ce:ed:5e:51:bd:dd:15:a9:e8:
d4:d3:3a:29:a1:66:8e:bf:fc:03:37:10:a2:8f:5f:5f:ac:84:
aa:da:fc:33:02:3a:63:14:dc:0c:ef:5d:5d:c9:a2:78:64:90:
c9:f1:60:dd:5f:f2:04:7d:3b:58:d6:71:da:c8:dc:89:56:de:
b2:c4:ac:75:e4:c9:46:fe:c8:be:86:31:87:8f:1e:52:6a:44:
46:59:74:72:ee:76:fa:71:0e:ef:bc:1f:e5:00:fb:e4:06:d3:
d7:65:47:51:86:99:99:d4:5f:ac:0e:5d:7f:7f:f7:84:e2:02:
18:a6:58:69:ba:7c:00:8f:4c:a7:4a:de:3e:c9:2f:db:36:50:
66:19:94:89:d0:32:f0:92:ca:90:6f:5f:6c:95:14:25:02:ba:
c7:01:b4:4c:eb:52:7f:6d:c4:a6:24:d8:98:30:a9:33:f4:a2:
63:0e:ac:ae:f0:a4:c1:73:bb:6b:15:3e:a5:a9:7a:4d:83:cb:
f1:8b:3f:4c:99:d2:6b:9d:ba:32:9c:2c:03:28:07:09:45:10:
99:c4:c9:0b:63:fb:9c:c1:93:23:84:47:cb:b4:fc:36:5f:72:
f1:fa:91:68:4d:d8:88:2b:53:09:74:63:cb:42:fd:52:64:5a:
32:4e:be:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org