Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/_CIoovgz8xufhUxbRsPvDsfHnEA.roa
File: _CIoovgz8xufhUxbRsPvDsfHnEA.roa (raw, json)
Hash identifier: c0jznHqLhLJRx0MsG519PHAgwR0Vwq78aVR0O2khAI8=
Subject key identifier: FC:22:28:A2:F8:33:F3:1B:9F:85:4C:5B:46:C3:EF:0E:C7:C7:9C:40
Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial: 03B44C6D
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/_CIoovgz8xufhUxbRsPvDsfHnEA.roa
Signing time: Sat 01 Jan 2022 00:50:15 +0000
ROA not before: Sat 01 Jan 2022 00:50:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49266
IP address blocks: 91.207.216.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62147693 (0x3b44c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Validity
Not Before: Jan 1 00:50:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc2228a2f833f31b9f854c5b46c3ef0ec7c79c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:9d:ab:29:7f:98:e8:36:5f:62:fd:62:28:
c7:5a:84:4a:6a:93:15:66:02:d1:79:d5:c2:3a:58:
cc:24:d6:73:91:2d:c7:b0:8d:e1:5b:1c:e6:e2:12:
e3:9b:58:56:96:e9:7d:4d:42:17:dc:99:7c:18:9c:
59:49:ed:ca:8c:2b:c5:3b:c6:65:71:b7:84:9c:f5:
38:29:cb:f6:70:5e:5a:61:a5:8d:3c:9d:98:7e:08:
d0:ed:3b:1f:18:ed:a1:95:b0:9b:33:c0:f0:10:3b:
5b:ef:3f:bf:55:14:55:a4:aa:c6:75:33:82:fd:25:
8e:ca:22:08:70:69:cd:cb:76:3d:3a:31:ca:32:3b:
42:45:11:14:a5:db:9b:58:8e:90:6f:85:40:37:0e:
bb:9f:b6:2b:a3:64:ec:73:ee:55:a2:8d:a1:8c:ba:
1a:d6:a5:66:7a:d5:4a:20:50:e1:b5:98:d3:28:4b:
01:7d:19:bf:b3:33:1a:26:d9:3a:c2:b2:b6:61:a8:
b1:74:d7:6a:87:d6:66:3f:a1:06:23:a9:80:87:78:
de:a3:49:d0:78:13:40:23:9b:7f:dd:c4:89:5c:8f:
ee:a6:79:9f:ee:b6:48:cf:e1:56:b6:62:32:3e:71:
66:ee:17:03:f4:6f:1b:0b:6a:5b:51:b2:6e:e8:0f:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:28:A2:F8:33:F3:1B:9F:85:4C:5B:46:C3:EF:0E:C7:C7:9C:40
X509v3 Authority Key Identifier:
keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/_CIoovgz8xufhUxbRsPvDsfHnEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
68:4b:b7:77:c4:74:1c:c8:e7:10:e6:12:ec:44:1d:d2:24:04:
b1:f3:9c:95:01:3a:1d:af:42:ae:b0:e4:74:17:37:6a:83:b9:
42:9a:d9:f5:3f:b5:43:7d:44:00:dd:d6:ba:93:b5:e0:41:3d:
3d:86:0c:d7:d0:8f:b5:16:10:7b:8c:7a:78:89:c5:a8:8b:a8:
a7:9b:8b:fd:46:c8:2b:79:3f:ad:dd:85:78:54:68:ac:68:72:
84:fe:f0:d5:3c:79:77:20:db:07:e9:30:19:6e:4a:81:3c:b1:
7f:cd:26:0e:65:02:0f:43:d7:2c:2e:74:7e:7d:0f:94:eb:53:
24:7d:98:4d:6b:5e:29:d8:4c:7a:96:d5:87:21:39:0f:f1:b4:
f8:cb:50:a5:e0:47:b9:8c:7f:51:82:41:af:cc:25:da:ff:c7:
64:70:73:3f:36:62:4e:4c:16:23:2f:2c:ed:c9:57:da:5b:6e:
d5:a1:37:ed:62:71:5c:6f:a7:88:f3:bd:5d:ef:37:96:0a:f9:
6d:65:fd:4c:e1:96:ae:9e:a0:e5:9b:bd:25:89:19:fd:61:5a:
0a:7e:ea:50:a5:1b:6e:e6:03:50:2e:98:9c:d8:df:ba:df:21:
2d:53:cb:38:0f:64:1a:12:8c:ad:62:47:e5:75:e9:04:04:b9:
41:96:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:33 2024 by rpki-client on console-fra.rpki-client.org