Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/Nj2gqdl0SHva8jd-8MXTI2BySKg.roa
File: Nj2gqdl0SHva8jd-8MXTI2BySKg.roa (raw, json)
Hash identifier: hI6Wo7f3o7RA9rdsXXhgmmuSq0NCZ3P171uhRyDk6TM=
Subject key identifier: 36:3D:A0:A9:D9:74:48:7B:DA:F2:37:7E:F0:C5:D3:23:60:72:48:A8
Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial: 188D16F3
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/Nj2gqdl0SHva8jd-8MXTI2BySKg.roa
Signing time: Sat 01 Jan 2022 12:57:17 +0000
ROA not before: Sat 01 Jan 2022 12:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59990
IP address blocks: 91.246.76.0/24 maxlen: 24
91.246.78.0/24 maxlen: 24
91.246.77.0/24 maxlen: 24
91.246.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411899635 (0x188d16f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Validity
Not Before: Jan 1 12:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=363da0a9d974487bdaf2377ef0c5d323607248a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:aa:25:cd:87:13:bb:97:65:d4:7d:e6:4c:
36:1a:e5:a1:df:44:06:ff:e6:4e:d3:37:10:c1:8e:
f9:2a:b8:34:20:3f:f6:cd:33:7b:e2:9d:64:66:c0:
4d:03:82:2a:04:68:73:43:da:5d:7e:ea:a7:bd:c1:
91:c3:25:88:d5:48:33:12:51:e2:fe:11:47:b5:22:
3e:fc:e6:f1:ac:23:2e:9a:13:2f:ac:4b:7b:8f:30:
0e:69:49:fd:96:f8:17:1d:fa:70:3f:34:30:b4:c2:
c8:c2:b9:ad:14:2b:25:67:ab:47:ba:33:ef:ea:ea:
4c:03:a4:7e:f6:0d:39:ae:cd:ad:0b:10:b4:7b:e9:
a6:be:bb:41:56:86:c4:cd:63:96:37:de:b0:46:20:
8a:38:8c:90:70:c1:0a:f2:96:15:e6:13:e7:7b:3f:
44:e6:ef:b1:35:fa:be:a1:c1:52:f1:61:37:3e:68:
14:3a:15:06:89:68:a0:82:63:a5:28:e1:a0:59:dd:
30:79:bd:32:11:12:ec:6a:d3:a0:a6:44:a4:71:55:
ad:9b:25:9a:3d:56:4d:d1:c3:08:83:d4:3e:02:83:
e7:01:1c:5e:60:3b:15:1b:eb:70:e7:77:4b:37:d3:
1c:e4:22:6c:5d:fc:ad:8c:6e:b2:b4:11:3b:3d:42:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:A0:A9:D9:74:48:7B:DA:F2:37:7E:F0:C5:D3:23:60:72:48:A8
X509v3 Authority Key Identifier:
keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/Nj2gqdl0SHva8jd-8MXTI2BySKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.76.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a6:d8:41:f7:d3:05:fa:6c:4c:e7:e4:b6:cf:14:fb:06:dc:
a8:13:f3:5a:71:15:f3:06:33:e6:29:81:f4:7b:36:e3:e5:48:
29:7e:be:4d:7d:d6:cb:75:2a:b7:cc:a7:30:eb:ed:98:65:81:
fa:c0:af:e8:1d:de:0e:5a:c6:cb:b8:f2:ec:c2:07:72:1d:5a:
7a:4f:d1:c1:94:b8:34:9f:81:1a:c2:79:a0:74:65:68:86:74:
4a:6a:5d:b8:a8:df:73:8c:d1:0d:98:a9:80:4a:d6:de:dd:40:
25:11:b9:03:22:62:68:04:80:c7:13:90:4f:20:30:31:8f:dd:
5f:0b:a8:d1:ba:2b:9c:05:40:72:0a:8e:c9:52:55:71:a5:3f:
71:01:98:5f:2b:97:d4:23:b7:37:90:a5:91:b6:fa:20:d4:4e:
50:c1:84:3b:cc:d9:13:2a:0b:fd:5e:ab:8e:53:0e:82:f0:ce:
c9:7f:b9:30:d6:e1:65:93:00:82:70:3a:f6:77:90:7c:60:1f:
0c:1a:41:62:c3:39:fd:59:7d:9d:ed:02:e9:c5:81:c1:c6:bb:
86:4c:79:e8:a8:c5:4e:cc:38:9b:63:4c:04:08:06:fa:70:2b:
a0:2e:b0:d9:88:f8:22:f2:57:39:ea:5c:92:5c:50:a2:1e:d8:
54:04:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:49 2024 by rpki-client on console-ams.rpki-client.org