Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lVfwqGskSEzKL8GVMG0_8zQ-9J0.roa
File: lVfwqGskSEzKL8GVMG0_8zQ-9J0.roa (raw, json)
Hash identifier: kp7DxPvN3LjT0MQweB6CeNt8+Ls9pfP4MUdsKA4t+y8=
Subject key identifier: 95:57:F0:A8:6B:24:48:4C:CA:2F:C1:95:30:6D:3F:F3:34:3E:F4:9D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 032F6522
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lVfwqGskSEzKL8GVMG0_8zQ-9J0.roa
Signing time: Sat 01 Jan 2022 16:04:27 +0000
ROA not before: Sat 01 Jan 2022 16:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201231
IP address blocks: 91.103.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53437730 (0x32f6522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9557f0a86b24484cca2fc195306d3ff3343ef49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:f8:c7:7f:68:32:ab:23:9d:b9:4a:9d:4a:
a6:36:9c:aa:cc:e0:64:1e:3b:12:f7:fe:7e:b9:02:
50:8a:96:7d:e1:f6:9f:ae:85:30:3b:46:00:f8:4c:
32:fd:2d:d5:c1:50:9e:6f:c4:9c:e6:78:12:71:8e:
f3:c7:22:50:79:c4:cd:54:63:a6:a8:10:04:63:fc:
bd:ae:ee:cf:2d:05:72:cf:34:ab:c2:fe:eb:a3:32:
1a:56:47:dd:96:e4:a5:0d:0a:40:82:56:23:48:44:
2e:0f:a3:7f:ed:cf:eb:91:35:15:2a:c6:99:47:96:
ec:1f:5e:32:0d:98:f6:5f:3d:b5:e7:75:3a:b7:eb:
5d:31:c0:5e:46:8c:95:2e:ed:5c:9f:36:ac:f8:c2:
a4:42:a7:65:09:c6:06:c4:5d:4c:3b:07:10:dc:53:
c9:cb:1d:44:a0:23:52:80:8b:7c:27:df:67:7e:f8:
c6:fc:bb:72:1a:8f:57:83:61:9d:77:72:62:83:d3:
56:55:3d:76:92:d1:97:42:f2:10:4e:91:e0:99:76:
69:12:1f:7c:e5:1e:dc:81:eb:da:5f:f6:24:3d:7e:
7c:5a:f2:9a:e7:56:07:83:4d:11:6c:71:df:c8:8b:
62:51:67:81:63:6a:37:6a:9f:11:03:b6:f0:46:83:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:F0:A8:6B:24:48:4C:CA:2F:C1:95:30:6D:3F:F3:34:3E:F4:9D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lVfwqGskSEzKL8GVMG0_8zQ-9J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.254.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a6:6d:6b:0b:6f:3a:b1:b4:9b:ad:0c:c8:e5:bb:48:f7:3c:
87:0c:0b:b1:ea:ff:d5:d5:6b:2b:d3:2e:18:7e:6b:a6:0e:e5:
22:41:26:b7:ad:75:39:6c:ce:77:ff:f7:67:5b:ab:9f:19:54:
84:7f:a9:72:da:89:b1:c0:ea:5f:d8:98:d6:f1:68:91:4c:ee:
1b:e9:c2:fc:b9:5b:a6:86:f5:70:b4:58:82:01:60:48:11:d2:
dd:aa:55:f6:b9:90:4e:25:4f:92:32:8a:66:2e:21:43:47:03:
0e:d7:cb:42:2a:88:7f:bf:85:22:a0:b2:b2:89:8f:cc:00:1f:
77:13:8f:7f:f1:c9:da:40:43:22:af:8c:00:06:9b:d8:31:30:
76:33:82:fa:9c:38:78:a0:35:d2:36:90:86:37:b9:0f:39:45:
eb:9f:cf:06:19:2d:ce:19:14:70:05:76:aa:79:6c:6e:f7:51:
24:73:f6:5e:b4:1d:7b:f0:fe:eb:17:bc:5b:f0:16:82:87:af:
31:ce:48:ea:26:d7:b3:95:1b:be:d1:a2:ec:02:57:f8:6d:76:
2b:2e:08:d2:6d:0b:f8:10:eb:64:0e:4f:df:0c:a9:1f:f7:ff:
fc:5b:e8:02:f9:b8:b1:1b:7d:e2:a0:8f:44:ec:83:9f:78:a4:
06:c2:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org