Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/O1EnRf9dgS7VicMH3686k2V0j7c.roa
File: O1EnRf9dgS7VicMH3686k2V0j7c.roa (raw, json)
Hash identifier: U5OsbPN7vbadLYBYwj1Z+4CGw5tjjgIbE8x9IX72KNA=
Subject key identifier: 3B:51:27:45:FF:5D:81:2E:D5:89:C3:07:DF:AF:3A:93:65:74:8F:B7
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 3557F2C6
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/O1EnRf9dgS7VicMH3686k2V0j7c.roa
Signing time: Sat 01 Jan 2022 06:06:39 +0000
ROA not before: Sat 01 Jan 2022 06:06:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206926
IP address blocks: 91.126.90.0/23 maxlen: 24
91.126.103.0/24 maxlen: 24
91.126.102.0/24 maxlen: 24
91.126.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894956230 (0x3557f2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 1 06:06:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b512745ff5d812ed589c307dfaf3a9365748fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:e0:60:97:1e:b9:f3:6c:d3:20:7d:4a:ad:
39:a2:49:27:1e:9e:5d:18:0f:9f:85:83:9b:1e:55:
bb:3d:91:5f:17:5b:74:b1:a6:6a:32:99:d9:07:ac:
95:43:67:4c:8b:8d:18:ef:72:e3:b4:da:5a:53:f3:
51:4f:4a:9b:27:11:55:0f:8c:ec:f0:38:57:83:47:
6c:05:8d:01:6b:b2:76:e2:42:46:73:07:3a:ac:06:
1e:3f:2f:77:34:dd:88:42:b6:f3:6b:19:e5:c8:5f:
4a:e6:1a:e4:6d:f1:f6:02:83:51:5b:f5:cd:5a:5b:
73:22:36:9c:47:be:44:e5:1d:73:1e:dd:e4:ee:54:
e6:23:1a:cb:2c:c9:50:ab:cd:47:4e:9d:57:12:64:
2b:2e:56:88:de:02:85:65:20:d0:bf:df:37:08:17:
d5:ab:c9:cb:ea:24:04:f4:2e:40:cf:30:e5:19:9e:
6d:4d:62:0c:88:f2:d2:e0:76:15:56:24:82:e6:2b:
24:0b:1b:a2:cb:e8:1c:cc:bb:2b:f5:3a:c1:e5:60:
b3:97:9e:41:75:07:c6:a3:78:9e:aa:05:6f:00:84:
c2:e0:a0:a5:c4:56:c2:6b:03:6c:08:d4:cc:d2:71:
71:4a:e1:13:99:32:9b:2d:17:90:b7:4f:0f:92:64:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:27:45:FF:5D:81:2E:D5:89:C3:07:DF:AF:3A:93:65:74:8F:B7
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/O1EnRf9dgS7VicMH3686k2V0j7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.90.0/23
91.126.101.0-91.126.103.255
Signature Algorithm: sha256WithRSAEncryption
18:47:c9:11:ba:e4:f1:e1:d8:f8:be:53:51:1f:1e:af:dd:d0:
d2:88:13:08:24:c4:27:a7:09:8f:19:f7:71:b2:d2:86:39:3c:
a2:25:6c:e4:2d:74:49:c5:cf:1d:a0:3c:a8:7a:c8:bf:d0:c0:
fb:82:4a:1b:cc:25:25:13:0f:bf:3d:78:1a:c0:ea:02:b0:6f:
61:21:5a:9a:df:c6:ac:90:63:2f:df:89:47:4c:04:e8:53:35:
8a:f2:3a:26:6c:2c:e9:39:dc:cd:1b:b5:bf:ee:00:1d:75:ce:
ee:7c:01:1a:6d:8b:34:f9:7d:a7:7f:a4:e4:08:c3:89:f3:7b:
09:be:68:6c:7f:7d:52:48:1a:55:91:5a:b1:eb:1a:df:a7:a9:
5f:39:db:b5:ca:6b:44:c6:97:ed:ab:a2:68:ed:ef:67:4c:56:
a9:d7:e0:c3:fd:80:c5:b8:84:80:1f:48:8f:a0:9b:0a:ef:d1:
24:56:11:b6:d1:7e:ff:ba:09:87:26:43:2e:27:94:a1:56:f6:
d2:69:1a:2b:db:dc:2c:08:14:7e:18:36:9b:33:a0:35:32:65:
58:24:6b:a1:8e:9a:5b:5c:e7:c0:3f:32:31:85:8d:a3:c8:a6:
4e:e1:5e:01:9e:23:5c:92:eb:13:5f:48:a3:63:ee:31:8b:fe:
e3:6f:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:06 2023 by rpki-client on console-fra.rpki-client.org