Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/rVIQKP0D9-JZRv_PAfsRk2WvlCs.roa
File: rVIQKP0D9-JZRv_PAfsRk2WvlCs.roa (raw, json)
Hash identifier: hFJ0q5o/c4tpaw/+ebwkTQi0be65W/ZLlQwfplechM0=
Subject key identifier: AD:52:10:28:FD:03:F7:E2:59:46:FF:CF:01:FB:11:93:65:AF:94:2B
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 0F339419
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/rVIQKP0D9-JZRv_PAfsRk2WvlCs.roa
Signing time: Sat 01 Jan 2022 01:52:37 +0000
ROA not before: Sat 01 Jan 2022 01:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42586
IP address blocks: 91.225.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255038489 (0xf339419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jan 1 01:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad521028fd03f7e25946ffcf01fb119365af942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:3b:55:13:38:b9:5f:8b:8e:73:d0:71:d6:
9c:51:66:85:e1:d0:1b:60:50:f0:b9:b2:76:24:61:
c3:90:48:06:88:e4:fd:19:02:90:40:23:68:db:06:
36:93:7e:62:db:f8:b5:72:4d:98:9f:a2:fc:8b:16:
08:02:ec:37:50:0f:3b:42:3f:db:7e:1a:3b:d8:85:
51:b2:9e:7e:65:b1:6f:65:30:39:f8:e5:56:bc:5e:
a0:89:a8:9c:6b:e0:30:81:17:06:a0:b9:e7:91:c9:
4f:11:e0:45:0b:8e:5a:80:f6:f0:63:35:f7:d8:26:
9b:bc:38:04:9a:81:52:ee:9a:8e:d0:14:8b:4f:ac:
c5:6d:de:95:ae:1b:60:4a:71:51:73:aa:92:96:8a:
7b:da:f6:b3:ee:7f:fa:5f:76:84:f8:a3:49:0c:a0:
9b:b7:2c:04:2d:90:de:88:be:74:bc:a1:7e:ff:26:
a7:3b:3a:cc:85:89:37:cc:e8:bb:d0:59:42:a1:c3:
f6:3c:cb:56:8f:b5:67:b4:ef:34:a5:a9:f8:05:39:
c7:70:e3:34:cf:b7:27:37:81:9d:53:96:38:9a:5f:
5e:ad:ce:51:91:cb:63:43:c4:a6:e7:76:ba:06:b0:
bf:62:fd:18:b9:4a:df:67:56:63:ed:3e:c3:c6:a9:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:10:28:FD:03:F7:E2:59:46:FF:CF:01:FB:11:93:65:AF:94:2B
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/rVIQKP0D9-JZRv_PAfsRk2WvlCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.52.0/24
Signature Algorithm: sha256WithRSAEncryption
76:58:5c:f6:8c:84:b9:a5:30:7c:4b:d7:50:7f:18:c5:91:89:
14:32:5f:fb:48:50:6a:a5:81:35:37:0f:18:9e:74:f8:02:73:
8a:cc:95:dd:d1:70:b5:63:a0:b5:23:52:63:88:6b:b2:70:ba:
c7:87:21:67:b3:99:31:ef:40:e7:20:f3:84:f7:73:a8:55:3e:
b0:1c:f0:5b:ba:f9:75:00:5d:53:21:09:f7:6e:71:d8:04:d8:
b6:12:ba:c8:3e:db:7e:79:50:c7:0a:b5:26:7b:1c:9a:e1:f5:
a0:90:0d:b7:11:d4:aa:22:b8:be:82:b2:bf:ab:b8:11:41:44:
0d:2c:af:51:f8:e0:03:c7:70:b7:14:91:5a:50:dc:ff:c5:83:
1a:2d:35:d3:91:94:21:15:16:df:7a:9f:df:d5:32:1e:de:5a:
3b:f6:7e:4b:7b:63:38:52:c9:16:37:5d:cc:8e:82:34:c2:d4:
80:74:f7:a1:be:fd:c3:08:41:2f:c5:9d:42:79:38:c1:e9:18:
0b:4a:02:93:9f:25:c9:77:07:e6:1e:0c:57:98:8c:21:3e:3f:
a6:08:c1:17:92:a8:96:84:1c:ae:1a:40:48:da:d2:18:49:d7:
2c:6e:ef:ae:12:84:fd:23:e5:0c:8e:c7:f9:b4:a0:b6:7b:c7:
7f:44:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org