Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/h9tr1VenS9R70XrF0CVuK6EssRo.roa
File: h9tr1VenS9R70XrF0CVuK6EssRo.roa (raw, json)
Hash identifier: tN1wZo5vUxzAofL+JBKIErY/5wtqBlZemxIOVXlPtVg=
Subject key identifier: 87:DB:6B:D5:57:A7:4B:D4:7B:D1:7A:C5:D0:25:6E:2B:A1:2C:B1:1A
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 03023A
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/h9tr1VenS9R70XrF0CVuK6EssRo.roa
Signing time: Wed 05 Jan 2022 06:45:02 +0000
ROA not before: Wed 05 Jan 2022 06:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198606
IP address blocks: 91.237.96.0/24 maxlen: 24
2001:67c:28c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197178 (0x3023a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Jan 5 06:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87db6bd557a74bd47bd17ac5d0256e2ba12cb11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:c6:96:bd:1a:11:25:5b:9b:21:42:0e:46:
e7:d8:a5:87:c7:6d:cd:28:ae:56:b7:50:db:2c:10:
c2:b5:ca:0e:15:d7:bd:4a:e7:b3:6e:e4:62:64:ae:
b1:2b:ee:93:9a:a8:4f:05:3e:7d:98:fc:5c:e8:cf:
70:09:67:a3:f1:62:83:78:45:8b:83:e7:1c:05:24:
1b:d8:0a:65:e6:cc:27:05:ef:ec:ee:3a:ac:c4:4d:
80:f2:cb:1d:69:4f:91:28:1f:2a:fc:fc:ca:37:43:
f6:9c:94:ee:a8:e9:d8:90:23:e4:6a:38:c6:b6:7e:
b7:99:8d:af:23:3b:d7:59:a8:56:99:f3:d0:0d:77:
70:10:88:6e:57:af:da:87:22:4a:48:61:d5:7d:89:
0b:ce:d7:f4:5b:8a:5c:4e:09:2a:0b:4a:f8:5f:58:
7e:db:01:a0:78:e7:2d:28:9e:a4:71:7d:a2:91:40:
ba:f5:90:be:ac:ec:7e:31:a5:ba:af:42:d0:1e:c4:
eb:e0:e4:d5:b1:c0:93:0a:1a:6d:7f:d4:d5:54:0b:
ac:9c:18:91:08:b9:83:78:47:a8:1e:ad:9b:52:9e:
a3:66:81:a1:0d:55:f8:c8:20:52:a1:a9:ec:06:33:
b3:5a:9b:38:5b:48:de:ff:c6:08:a8:74:54:95:cb:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DB:6B:D5:57:A7:4B:D4:7B:D1:7A:C5:D0:25:6E:2B:A1:2C:B1:1A
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/h9tr1VenS9R70XrF0CVuK6EssRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.96.0/24
IPv6:
2001:67c:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:8e:66:71:99:92:a0:41:69:a9:61:bf:14:de:3f:64:3f:cc:
f6:67:b4:04:6b:e7:17:a3:43:8f:67:74:17:93:2d:23:09:3a:
bb:dd:d6:42:73:e1:86:3f:e5:2e:56:e5:d0:40:90:c2:12:c8:
65:d3:c4:10:e9:dc:2a:e0:26:0a:b7:36:db:a7:a7:06:57:0b:
7d:88:8d:7a:e1:aa:e2:73:ac:16:ef:79:7b:7f:bb:75:0b:10:
ac:8a:58:da:ca:4f:e2:76:6a:b5:3b:73:6c:62:ff:84:23:ee:
f9:b8:1e:55:86:16:6f:4b:3d:1b:f2:90:64:38:3f:c9:4c:78:
80:f3:37:bb:6c:72:fa:9d:b3:86:8b:3e:5e:e9:f0:38:52:30:
d2:b5:cd:e2:23:73:cd:c7:8f:63:23:23:4c:54:5b:21:c1:3b:
82:8b:c0:5f:ef:e7:fd:d7:b6:e7:29:12:43:f3:0c:a9:5f:c4:
d3:a3:07:17:d3:25:d6:e5:da:d6:dc:b9:1b:cc:f2:59:5a:50:
9c:b6:b8:59:92:4e:5f:31:b9:ab:4f:f3:a1:14:be:f2:d6:5e:
de:de:cb:d9:ad:a4:9e:eb:7c:fd:01:1e:4b:53:1e:2e:cd:79:
13:e1:18:ac:2f:e6:65:99:81:87:08:fe:d1:49:9a:55:7e:6d:
7a:e4:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:05 2024 by rpki-client on console-fra.rpki-client.org