Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/iQWB-skgjuD5nB6FYq4__8HbPac.roa
File: iQWB-skgjuD5nB6FYq4__8HbPac.roa (raw, json)
Hash identifier: 5wR43+g1dvzpn0V6BxOS6i3KsmiZuK1IKK4wbi2MHco=
Subject key identifier: 89:05:81:FA:C9:20:8E:E0:F9:9C:1E:85:62:AE:3F:FF:C1:DB:3D:A7
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 010993ED
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/iQWB-skgjuD5nB6FYq4__8HbPac.roa
Signing time: Tue 01 Feb 2022 01:02:51 +0000
ROA not before: Tue 01 Feb 2022 01:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.207.0.0/24 maxlen: 24
91.207.1.0/24 maxlen: 24
91.206.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17404909 (0x10993ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Feb 1 01:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=890581fac9208ee0f99c1e8562ae3fffc1db3da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:6e:24:d3:a6:da:ae:88:1e:f3:9c:fd:53:
e4:98:3b:01:c3:f2:a0:da:c5:72:6a:61:91:e0:c6:
ec:6c:a5:03:e0:96:82:db:98:13:01:63:48:9f:6f:
29:44:82:27:c3:b3:fc:15:61:08:19:17:e5:e3:af:
7f:91:39:02:72:90:3c:dd:06:8a:90:2a:17:b3:35:
8c:b0:be:62:77:48:e5:a4:df:04:47:07:4c:13:b0:
db:bc:9b:c7:13:71:1a:a9:b3:84:99:ef:9f:78:ea:
e4:9c:ff:7b:b7:4f:84:22:53:26:57:57:ab:83:18:
c5:44:bd:e0:d2:49:ca:98:f2:e2:3f:6e:93:aa:71:
b4:c7:2a:6d:af:26:c8:70:65:d8:2c:0e:e8:b9:0b:
21:66:dd:0c:f9:9f:5f:35:7a:9e:bc:a6:5c:0f:57:
00:73:1d:5b:3e:2a:03:ed:d6:ba:1c:87:53:2d:b6:
e0:1d:47:a8:a3:06:d0:1e:17:1e:90:2a:a2:61:56:
fe:e7:96:65:36:66:87:42:88:2f:b6:39:6e:cf:c9:
1e:f6:d2:9f:1a:c1:81:80:6e:3a:f8:69:f2:ca:74:
8e:4a:28:70:dd:95:7d:d5:2a:53:91:43:a4:6d:32:
35:fa:09:8a:62:18:6e:30:28:77:81:95:cc:38:73:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:81:FA:C9:20:8E:E0:F9:9C:1E:85:62:AE:3F:FF:C1:DB:3D:A7
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/iQWB-skgjuD5nB6FYq4__8HbPac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.209.0/24
91.207.0.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:e5:2c:8a:70:4f:14:4c:b8:92:f0:ef:84:b7:57:f5:db:fc:
4c:22:47:42:ed:7e:11:03:57:17:54:62:83:62:c3:39:52:c3:
d5:a4:1d:fd:ec:48:bd:17:2c:18:ac:5d:1b:0d:4c:c4:cc:5c:
ab:87:d3:30:f0:de:37:5d:29:b3:a6:66:64:f8:06:41:e2:ef:
a2:4b:61:f0:6d:25:c6:bc:c5:f5:bc:c8:10:62:e9:1a:07:16:
0f:18:46:27:21:56:d4:f0:5f:2f:47:67:c1:b7:53:06:5a:be:
08:c5:5d:d9:0e:5a:c9:1e:16:4a:de:46:99:29:9b:1c:c3:af:
f8:ac:10:15:32:cd:bc:5c:3a:04:d9:75:54:8e:40:fc:a6:76:
dc:62:58:a8:c7:ed:4a:24:c0:14:3a:aa:5b:72:67:7c:2e:79:
bf:8a:c7:df:40:50:4a:e1:e0:0e:04:aa:5f:50:39:af:22:05:
3b:2b:9f:a6:74:ca:63:38:84:e4:17:dd:13:c6:59:41:24:29:
77:66:42:9c:c5:51:d9:72:ed:15:3f:7a:eb:59:c3:f8:60:7f:
7b:3f:7d:55:53:49:60:bd:5c:ac:14:a0:b8:82:f5:77:2c:c7:
b6:1a:bf:6b:46:2e:d3:4a:4c:f7:3a:88:15:72:79:88:1e:c5:
2d:da:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org