Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/ie9Sm6CJGqfk-TvYXewraFyDVtw.roa
File: ie9Sm6CJGqfk-TvYXewraFyDVtw.roa (raw, json)
Hash identifier: 1zaxLnBi/sTneaBiU79SQ5Oi0R9hHzJ4vbHT9Tr60mI=
Subject key identifier: 89:EF:52:9B:A0:89:1A:A7:E4:F9:3B:D8:5D:EC:2B:68:5C:83:56:DC
Certificate issuer: /CN=a28eb69cfb22325cf750ff563150dbd04491bebb
Certificate serial: 019F8061
Authority key identifier: A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/ie9Sm6CJGqfk-TvYXewraFyDVtw.roa
Signing time: Sat 01 Jan 2022 04:56:32 +0000
ROA not before: Sat 01 Jan 2022 04:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211071
IP address blocks: 91.213.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27230305 (0x19f8061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a28eb69cfb22325cf750ff563150dbd04491bebb
Validity
Not Before: Jan 1 04:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89ef529ba0891aa7e4f93bd85dec2b685c8356dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:d6:38:05:e9:8f:9b:f9:75:ff:4e:fe:de:
6c:fe:b4:41:82:fb:58:6c:b9:91:84:ed:e9:c3:71:
d3:18:65:a9:11:ef:d6:2b:53:0d:de:83:9d:ef:7f:
04:98:da:83:ea:97:52:a4:ea:67:de:77:83:3c:ba:
ed:2e:d3:cf:3d:8a:73:57:19:72:e8:01:d7:78:db:
1b:33:8b:98:15:b3:f2:7a:d7:ce:43:87:f4:06:c9:
fb:c3:e2:04:94:16:a9:9e:08:48:19:81:4d:98:c1:
5f:cd:ad:f5:e8:40:ee:58:53:09:06:dd:1b:1f:77:
3d:33:97:da:1c:ea:f3:23:ea:e6:12:67:c2:1a:0a:
d4:3c:1e:1b:51:51:5f:09:a3:47:2a:ab:3f:c4:5d:
eb:5b:e5:28:76:f7:c6:e0:d5:0a:b7:25:30:0c:dc:
f9:24:91:8d:f7:78:55:a4:83:89:20:61:6f:bf:02:
55:f9:b4:49:af:05:b4:ee:b4:75:a1:51:38:f5:58:
6e:0c:47:b0:8b:ed:07:2f:4e:48:1c:b3:c8:6f:97:
74:5c:cd:e2:08:d0:18:16:7d:43:fa:02:10:57:c4:
76:3e:18:87:80:7c:26:38:4b:84:c3:4e:22:97:12:
e7:22:ff:84:ed:9b:a5:78:8c:4a:6d:a4:a6:7e:5f:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:52:9B:A0:89:1A:A7:E4:F9:3B:D8:5D:EC:2B:68:5C:83:56:DC
X509v3 Authority Key Identifier:
keyid:A2:8E:B6:9C:FB:22:32:5C:F7:50:FF:56:31:50:DB:D0:44:91:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oo62nPsiMlz3UP9WMVDb0ESRvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/ie9Sm6CJGqfk-TvYXewraFyDVtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/43c733-7519-42fd-ac5b-4e2da13594b8/1/oo62nPsiMlz3UP9WMVDb0ESRvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.202.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fc:d4:2f:fd:47:94:04:67:3f:fa:6d:7b:a8:22:e6:4e:84:
d7:8e:7f:2c:63:0f:30:82:74:0a:91:a5:67:45:b3:37:1d:8c:
37:cd:04:23:77:50:2e:fc:fd:1f:bf:00:8c:67:19:18:71:ae:
68:7c:7f:76:a8:fa:dd:d0:fd:a5:4b:73:11:da:53:0b:0e:54:
1b:9c:48:ef:83:3d:f0:c9:67:0b:90:37:4a:e5:94:77:ac:ac:
9f:b2:9d:69:77:03:8e:4e:56:f4:7f:32:ac:c1:a7:28:e6:fd:
cc:90:33:66:11:02:bb:0e:9a:2d:e1:1e:37:a7:83:27:06:eb:
90:d2:11:07:80:19:3e:c0:f0:4f:98:6a:a9:1f:2a:74:d7:0a:
57:1d:ec:f7:16:f7:25:cd:8e:00:88:f9:22:08:65:04:bc:f7:
1d:7a:be:ed:9d:29:81:54:ba:07:a7:d9:b5:9d:e0:b2:7e:26:
da:23:db:7a:13:99:ce:f0:77:b1:20:fb:5d:0b:a9:dc:d2:f6:
17:18:a6:d5:35:77:c4:22:fe:a1:b0:83:93:00:84:49:4f:14:
d0:93:23:ca:db:9a:79:14:1f:a9:9f:3d:65:f3:08:73:a5:8e:
3f:e6:31:61:61:6d:42:52:8e:a9:9d:47:b5:fd:17:53:c4:35:
93:af:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:15 2024 by rpki-client on console-fra.rpki-client.org