Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1T3dy3J1LPrbmS2Q_4yt2rqpNNA.roa
File: 1T3dy3J1LPrbmS2Q_4yt2rqpNNA.roa (raw, json)
Hash identifier: WIc5F8D80CvpSKkereuFO8ufiL4XRPorehQKvbPg7vw=
Subject key identifier: D5:3D:DD:CB:72:75:2C:FA:DB:99:2D:90:FF:8C:AD:DA:BA:A9:34:D0
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 0C36DC14
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1T3dy3J1LPrbmS2Q_4yt2rqpNNA.roa
Signing time: Sat 01 Jan 2022 10:58:33 +0000
ROA not before: Sat 01 Jan 2022 10:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197772
IP address blocks: 91.226.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204921876 (0xc36dc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jan 1 10:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d53dddcb72752cfadb992d90ff8caddabaa934d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:04:64:37:47:b2:59:8f:2d:04:fc:96:1c:af:
39:cd:d2:2d:58:38:c4:d3:0c:bb:7d:4b:e4:b6:da:
29:b0:63:69:f2:7e:04:ac:20:c7:91:3c:50:f4:5e:
aa:02:15:f6:5b:be:f7:d1:2c:b5:d3:58:84:a6:33:
5b:ff:8a:b8:ae:c3:cd:e0:05:8e:d4:11:bb:f0:55:
8b:17:8b:f5:78:e3:32:16:c0:76:b3:8f:43:32:44:
c9:c2:78:f3:31:e2:e7:cd:4c:17:c5:93:5c:0a:e7:
ad:5d:54:a4:d0:83:39:24:14:02:0d:ec:78:3c:f1:
1b:33:80:0b:e6:d1:ba:bd:41:9e:c6:3c:ce:20:fc:
62:ce:b9:e4:0b:70:bf:19:99:c9:2d:f5:b7:13:22:
4d:27:89:84:6c:f1:b9:d0:e1:f8:c3:f1:9a:56:d8:
cf:94:f2:8f:f8:c4:20:af:70:3a:a1:3c:9a:17:dc:
15:1d:fc:73:b8:ef:9b:0a:7c:a1:33:3d:49:1e:bb:
02:a6:5a:b2:7d:fa:1c:f6:9e:32:68:41:e6:5d:f7:
d9:3a:01:6f:23:2b:d2:8d:fa:52:75:c4:f9:13:8e:
ff:ff:b7:05:86:1d:89:1b:81:13:5d:e9:0d:52:f3:
12:0e:af:62:b7:ae:9a:60:e9:e7:6c:e9:29:c6:e9:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3D:DD:CB:72:75:2C:FA:DB:99:2D:90:FF:8C:AD:DA:BA:A9:34:D0
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1T3dy3J1LPrbmS2Q_4yt2rqpNNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.176.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7c:24:70:55:d2:d5:62:f5:d8:2e:36:8d:5a:f7:04:5b:e9:
1d:02:5c:38:41:c6:1a:e6:0f:73:31:db:60:fa:6f:de:11:77:
d1:6c:ab:58:90:c6:ae:c4:d3:7e:21:46:40:18:37:57:d6:0d:
7b:88:d5:12:f7:fc:b6:ea:63:6e:0a:ec:f6:5a:fe:65:06:ee:
f4:36:e4:9e:1a:8d:32:36:d6:9f:c6:4f:a3:fe:69:19:1b:48:
c0:c1:c6:3f:6a:34:7c:2a:f4:61:fd:68:c0:52:6c:ea:b2:35:
7c:81:d3:be:f4:be:b8:2b:ea:c6:d2:4b:7e:75:52:01:ed:5c:
26:18:ce:99:fc:e4:48:82:6b:4d:1a:66:ab:3f:18:c6:b0:1b:
51:7a:f4:b4:18:83:cb:b4:76:f6:1f:f3:5d:73:ad:2b:97:67:
95:f2:28:0b:60:77:63:e1:a8:0b:a6:b3:89:08:9c:5c:21:f3:
86:56:2c:f4:37:a5:54:e1:67:44:56:22:7c:9d:2e:7a:c9:42:
47:73:c6:ef:2b:1e:13:a5:cb:65:37:8b:3b:34:c4:66:a7:f0:
20:89:bf:26:70:28:fe:73:7d:1d:02:fd:c5:df:07:c5:d8:2c:
c3:17:43:f9:d2:cb:f5:99:f1:1f:5f:66:bb:ae:2f:75:8e:89:
b9:d9:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:05 2023 by rpki-client on console-fra.rpki-client.org