Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/pB8TqWe0a9i-ox1vtJOVHTEhRe0.roa
File: pB8TqWe0a9i-ox1vtJOVHTEhRe0.roa (raw, json)
Hash identifier: g2YC4jzf7VNhzDzVus+5U6bOh67IdptfHZxoo1Lt9/Y=
Subject key identifier: A4:1F:13:A9:67:B4:6B:D8:BE:A3:1D:6F:B4:93:95:1D:31:21:45:ED
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: F694C2
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/pB8TqWe0a9i-ox1vtJOVHTEhRe0.roa
Signing time: Sat 22 Jan 2022 15:14:42 +0000
ROA not before: Sat 22 Jan 2022 15:14:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.207.1.0/24 maxlen: 24
91.206.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16159938 (0xf694c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jan 22 15:14:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41f13a967b46bd8bea31d6fb493951d312145ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:ba:20:60:f0:47:7f:b9:ba:ef:64:d7:06:
ae:e6:ad:ac:5c:c2:6f:f2:16:ea:a1:be:a3:7c:bc:
43:d3:ce:42:25:c9:7e:4a:b5:8a:b6:2c:5f:53:66:
57:f1:65:6a:f3:a7:29:9f:4f:08:4f:c3:10:50:97:
d0:1e:96:55:a6:d1:11:11:a3:f4:2f:0e:50:20:49:
7e:65:d3:23:a5:88:37:31:86:80:ec:ea:35:fc:94:
ca:89:5d:75:1c:ee:37:94:f9:1f:60:13:54:2c:b7:
f9:58:d4:bc:4f:db:20:b9:77:75:94:29:23:c7:02:
f8:1e:3d:20:9f:a8:d8:34:88:62:34:c6:45:b1:d8:
0e:66:66:2c:c7:a1:b9:64:9d:fa:e8:94:63:25:ae:
a3:50:2b:df:27:77:63:63:7b:14:15:90:77:64:2e:
f8:f8:d2:08:5e:28:e4:58:6a:46:58:f8:fb:fe:34:
38:fd:ee:f6:99:00:43:94:91:82:63:33:18:1b:a3:
01:3d:f7:74:b9:16:c3:8a:3e:50:9d:0e:31:c8:77:
9c:d4:9a:61:3d:d5:d4:85:95:5d:8f:c7:a3:f4:e5:
8e:81:0c:4b:cb:94:b9:b8:db:24:e2:30:c2:57:87:
6d:b7:e8:d4:8d:cb:38:15:d0:50:dc:33:c1:6b:1f:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:13:A9:67:B4:6B:D8:BE:A3:1D:6F:B4:93:95:1D:31:21:45:ED
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/pB8TqWe0a9i-ox1vtJOVHTEhRe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.209.0/24
91.207.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4c:bc:4d:85:d1:63:ed:41:40:6c:78:8b:4c:22:1c:81:7c:
b6:db:c5:00:b4:9c:19:b1:3e:52:b7:42:6b:32:c2:ae:0a:96:
9b:45:8a:de:a7:c8:ea:e6:06:2d:1b:35:bc:8f:b3:12:d6:2a:
49:5f:ae:85:dd:7f:5e:1c:f3:0a:21:a5:a5:3b:da:5f:2c:6b:
33:9c:d3:1d:c6:a1:f0:38:ce:d0:0f:a4:c7:a6:70:62:75:8e:
17:d3:8a:4f:b9:1f:75:6b:26:50:10:12:bd:96:bd:5e:51:a2:
c2:81:48:3c:00:46:59:4e:fb:cb:92:ac:fc:29:45:45:0f:b2:
9f:93:ad:f5:7f:d2:3c:15:02:b6:0e:15:45:93:00:b0:73:99:
09:7b:ce:3d:b2:82:b7:f2:29:f7:9e:0d:29:81:3a:ff:cc:12:
e6:67:6f:6e:5b:aa:83:60:14:8a:28:3a:23:5a:09:5f:3c:f6:
ad:44:13:0b:aa:00:53:13:56:f9:1d:75:6e:31:f4:7f:1f:35:
fb:04:66:0b:6d:a2:57:1f:55:31:e3:a8:28:f7:54:1b:d6:cb:
13:77:07:c6:1c:59:79:d8:73:3b:ca:fc:6f:67:db:92:a6:8b:
2b:e7:8e:c7:32:3b:61:fa:5e:b9:d8:b5:d2:5a:e8:7b:bd:d6:
cc:e2:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org