Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/pq7M_f3ny01LZevnJKrB-2Kc7_4.roa
File: pq7M_f3ny01LZevnJKrB-2Kc7_4.roa (raw, json)
Hash identifier: hKxuYWSCNuU+I8WjiGex5Jgo2oTRERkt0WeO8epUT34=
Subject key identifier: A6:AE:CC:FD:FD:E7:CB:4D:4B:65:EB:E7:24:AA:C1:FB:62:9C:EF:FE
Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial: 01CF12
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/pq7M_f3ny01LZevnJKrB-2Kc7_4.roa
Signing time: Thu 06 Jan 2022 20:05:48 +0000
ROA not before: Thu 06 Jan 2022 20:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 91.209.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118546 (0x1cf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Validity
Not Before: Jan 6 20:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6aeccfdfde7cb4d4b65ebe724aac1fb629ceffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:62:42:0d:6b:2c:98:e0:62:d1:04:27:02:
f3:7b:84:b1:dd:45:e2:fd:8a:ae:b9:0f:65:be:75:
41:26:6f:13:66:f0:4a:11:a0:e3:6b:32:16:ac:46:
d3:bc:1a:7c:55:9f:82:bf:7f:12:96:21:58:67:21:
53:fa:e0:ff:a0:6a:08:c8:57:50:ee:53:76:49:ae:
f4:a7:07:ca:35:f9:3d:4c:92:7b:10:14:fd:79:a7:
86:b3:ba:26:a2:b2:39:0f:37:e0:b2:7c:36:0e:c1:
20:d3:2b:ae:c9:54:1a:23:b4:d5:eb:fe:d0:48:b6:
9a:e1:76:64:df:c3:5f:fa:0e:d0:22:e4:7c:f6:d7:
88:9a:5c:3c:88:73:a9:59:64:6b:95:06:63:3f:93:
a1:e6:d2:a3:6e:57:43:12:12:5f:a6:a2:03:eb:66:
dc:e9:ae:5e:40:47:f9:8a:62:11:f5:01:7f:dd:07:
f2:66:2b:ca:83:7b:e3:55:60:1f:8f:d4:82:d6:ab:
bb:4e:f8:51:01:f0:30:0c:7b:1e:d5:07:76:4b:46:
8f:d4:d0:89:1a:7a:4b:76:2b:00:68:80:97:59:2c:
d9:22:91:d8:a8:d8:d4:23:a6:e7:2c:4c:ae:2d:8f:
f3:bc:3e:7f:4c:db:f5:45:51:06:27:ab:d1:cd:e2:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:CC:FD:FD:E7:CB:4D:4B:65:EB:E7:24:AA:C1:FB:62:9C:EF:FE
X509v3 Authority Key Identifier:
keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/pq7M_f3ny01LZevnJKrB-2Kc7_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.87.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:42:ac:ba:02:76:56:cf:d5:f8:18:8e:b0:e1:82:ed:e7:5c:
08:52:4d:f4:61:93:9a:72:00:0d:ed:95:e3:43:14:ba:df:08:
bc:32:35:e2:ee:2d:5a:56:c5:e2:8e:3d:aa:31:f7:33:3b:37:
53:52:38:6e:05:0b:39:d3:ad:04:f0:74:e9:a0:00:ea:ec:77:
c4:f1:5d:9f:64:1c:1c:4b:c4:66:6c:c1:b8:ff:96:15:ef:a6:
8d:b3:56:c5:06:a5:8e:8c:4d:0b:bf:1c:a1:86:fd:21:10:83:
00:f8:42:7d:2c:06:44:70:66:4b:88:04:3c:e0:11:7e:28:2e:
db:2d:cb:13:8a:45:00:1a:e5:42:95:1a:80:9b:84:ea:77:8f:
42:ec:40:74:7b:8c:6f:ee:19:cc:26:fe:0d:fb:8e:c7:06:e1:
e1:67:bd:ea:3a:50:83:fe:b7:7e:58:42:c2:c7:f5:63:13:21:
30:2f:9b:4b:20:36:50:96:79:f0:22:71:75:0d:2a:e4:ad:6d:
6b:c1:f2:52:1a:8e:25:ee:b3:fc:43:8b:46:a4:a6:0b:60:e7:
df:e9:eb:49:dd:42:0f:93:3e:fe:31:a3:29:33:12:fd:93:89:
cf:87:b5:15:45:cc:1c:46:dc:99:9c:93:f5:5c:eb:40:dc:96:
e2:90:74:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org