Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/1vZiipexckGGfBENTIKr0lKDMLQ.roa
File: 1vZiipexckGGfBENTIKr0lKDMLQ.roa (raw, json)
Hash identifier: /TAThh3AX+GzNgAgymEUm8SvG16veEaK4jHO+0G6rPk=
Subject key identifier: D6:F6:62:8A:97:B1:72:41:86:7C:11:0D:4C:82:AB:D2:52:83:30:B4
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 1003CD3C
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/1vZiipexckGGfBENTIKr0lKDMLQ.roa
Signing time: Sat 01 Jan 2022 15:56:11 +0000
ROA not before: Sat 01 Jan 2022 15:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47657
IP address blocks: 91.206.151.0/24 maxlen: 24
91.206.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268684604 (0x1003cd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Jan 1 15:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f6628a97b17241867c110d4c82abd2528330b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:46:f8:a4:28:43:f7:13:d4:21:c0:22:79:
a6:37:8e:c8:12:9d:2a:47:b2:fd:c4:a0:d8:dd:40:
55:91:1e:08:63:d6:46:49:37:b2:dc:92:44:c0:67:
fb:e0:42:f9:ec:06:40:a1:28:e0:11:19:ec:be:f4:
c6:54:9e:e1:cf:e2:ce:93:66:4d:19:51:62:16:32:
03:23:6b:68:ca:82:05:b0:1a:30:c5:24:8e:c1:84:
9d:13:33:9d:3b:a2:cc:a3:90:0f:c9:e9:f4:13:24:
3e:26:57:95:e8:be:e8:04:de:5e:ee:7f:9d:3c:58:
f6:d4:70:c5:4c:b0:b0:cd:5f:ad:55:50:cc:d9:81:
4f:60:af:4d:97:60:78:54:ac:be:bc:16:8b:22:1c:
f4:ea:27:4a:63:0c:02:5e:3e:bf:b0:27:d6:a8:19:
49:a5:dd:19:13:fe:4e:08:18:fa:bf:37:93:b9:69:
60:ec:1f:36:ff:de:58:4c:7c:26:1d:cf:e5:7d:15:
07:eb:18:d3:3a:83:2f:8b:5f:89:25:46:7a:1d:90:
e1:c5:ca:10:8c:d1:77:fc:05:bf:04:e0:c2:c1:79:
d6:c1:41:d2:80:b1:9e:ff:d6:42:ee:41:75:7b:c0:
83:79:c0:c4:8e:19:bb:24:73:16:da:d8:09:7a:32:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:62:8A:97:B1:72:41:86:7C:11:0D:4C:82:AB:D2:52:83:30:B4
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/1vZiipexckGGfBENTIKr0lKDMLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.150.0/23
Signature Algorithm: sha256WithRSAEncryption
27:b0:ca:51:7a:91:94:15:6b:7a:76:68:aa:79:2d:2f:8d:d9:
a7:84:08:dc:2e:f7:c6:55:9c:07:a1:17:67:ab:23:10:e8:7a:
11:fb:4b:c6:dc:d7:47:47:51:6d:cd:de:6e:8b:d4:b8:1d:a7:
21:6b:0c:fb:b7:1d:06:c7:27:96:00:a2:e4:fb:fa:c1:10:00:
f7:5f:56:e4:36:54:22:d1:81:1c:3e:23:b0:e2:e3:ed:50:56:
90:93:8e:cb:96:43:1b:26:ac:1a:f0:84:ec:7a:48:3d:07:f0:
86:5c:c5:d1:e8:b1:77:79:28:a6:36:89:f3:a4:b9:3f:a5:c5:
3e:f0:5d:6b:5e:31:11:f2:0c:96:e9:13:f1:0e:c6:d5:39:00:
e1:59:1d:5d:6e:1f:90:b7:ad:36:9c:9b:ad:80:b3:71:91:d2:
f9:e6:2c:58:ae:17:64:7d:5e:98:d7:c0:cf:d4:4a:98:ba:96:
78:3a:3e:a3:37:2e:c3:a7:85:1a:f0:77:15:8f:36:23:be:73:
77:09:1a:37:9a:79:87:53:9d:8c:51:c5:3c:5e:1b:3c:5f:32:
d5:82:87:42:f0:49:8a:c8:3a:a5:ba:5b:50:f8:0c:87:66:00:
de:a8:10:93:31:f9:f2:08:b9:37:24:9f:b4:01:4e:e1:8a:8d:
ae:a5:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:30 2023 by rpki-client on console-ams.rpki-client.org