Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/bDSIG6Ht9mGcP_q9H7EPl0zkfAU.roa
File: bDSIG6Ht9mGcP_q9H7EPl0zkfAU.roa (raw, json)
Hash identifier: ZkWVgdoSFjK6rw8u7E95zaZvtYz8rB3pweiSncId5qQ=
Subject key identifier: 6C:34:88:1B:A1:ED:F6:61:9C:3F:FA:BD:1F:B1:0F:97:4C:E4:7C:05
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 014342
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/bDSIG6Ht9mGcP_q9H7EPl0zkfAU.roa
Signing time: Wed 22 Jun 2022 04:56:44 +0000
ROA not before: Wed 22 Jun 2022 04:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47792
IP address blocks: 91.206.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82754 (0x14342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Jun 22 04:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c34881ba1edf6619c3ffabd1fb10f974ce47c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:2f:79:5a:06:52:21:be:07:85:d9:48:8d:
8c:02:25:c4:18:03:32:12:76:9c:be:6c:2f:f1:00:
d5:7c:04:c1:12:b5:64:cc:02:1b:67:5c:b4:9a:27:
37:08:88:a1:54:82:d4:63:00:fd:bf:29:86:62:00:
44:08:41:b8:85:18:fe:ec:7e:1d:b3:ca:81:3f:3f:
bf:ff:a3:77:d8:9e:e0:e9:90:04:bc:78:fe:02:11:
f8:88:74:33:b7:0f:e5:fd:ae:a9:98:de:22:ad:da:
36:94:b2:76:58:ea:67:ef:c2:93:fa:c7:ba:3e:a3:
95:46:a0:45:10:7c:9f:da:00:3f:c3:92:f0:26:75:
3e:1f:ca:42:f5:55:8c:2e:4f:34:03:95:eb:e9:23:
b9:f8:a5:af:dc:ff:63:39:8f:f4:69:4e:8c:c1:69:
12:ef:de:13:98:8c:16:ac:95:4f:a2:0d:92:1c:46:
22:13:9e:40:95:f7:59:59:b7:d3:ae:47:07:98:85:
2a:3f:56:87:1c:99:95:36:6e:4d:ea:ac:90:56:61:
4f:aa:fd:63:69:14:52:66:8e:09:b9:c1:fe:bc:6b:
2a:d5:9e:7b:5b:bd:6f:73:27:b5:ef:4e:89:e0:79:
84:96:82:f8:10:eb:1e:f2:85:be:41:4f:16:8b:ab:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:88:1B:A1:ED:F6:61:9C:3F:FA:BD:1F:B1:0F:97:4C:E4:7C:05
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/bDSIG6Ht9mGcP_q9H7EPl0zkfAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.206.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:86:42:c0:e4:d1:97:54:75:a0:b2:7b:be:f6:37:a6:6b:51:
29:b3:5a:7a:0c:e4:fe:3a:45:6a:61:9a:9e:83:25:f0:fe:65:
9a:76:8e:9c:f8:6f:18:6c:11:16:ae:e4:0b:08:fb:92:f4:54:
31:6d:a4:01:6f:bd:e2:1c:ac:1f:f4:d0:73:b3:a6:2d:6a:ee:
18:ab:a4:c5:fd:c2:dc:d4:62:e9:af:89:82:bc:e7:62:10:53:
81:24:87:35:01:23:1f:df:97:b0:22:6f:66:49:6c:83:f0:25:
5b:8f:81:2c:12:79:fc:a7:b7:67:23:76:9a:97:67:7f:87:e3:
0a:ba:d8:4c:b2:13:72:be:c3:ad:b3:af:a1:20:35:03:7d:b7:
f3:85:03:fe:43:90:b2:af:ab:9a:0c:6c:60:84:bd:37:c4:86:
a8:c8:bb:dd:2c:a2:4a:55:68:7d:70:44:c8:dd:8f:8f:73:c7:
a2:1f:ba:62:85:84:95:0c:4b:03:a8:bf:cb:cc:d2:a0:05:d3:
8c:77:1d:8d:9b:cb:f7:ed:67:e2:46:89:75:9b:71:37:7b:69:
01:31:8f:cb:e4:10:57:b8:a3:ec:b1:03:b0:7c:bd:29:97:80:
78:33:75:89:a4:ac:c9:d5:67:d4:8a:37:cd:24:b0:1e:87:d3:
49:96:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:17 2024 by rpki-client on console-fra.rpki-client.org