Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/2yAEbL7JhxIECffKajoxFByQe8c.roa
File: 2yAEbL7JhxIECffKajoxFByQe8c.roa (raw, json)
Hash identifier: N1dnPeMO3p1pkHnAih9X7qwORfSlKO+UasZe0JTAyzc=
Subject key identifier: DB:20:04:6C:BE:C9:87:12:04:09:F7:CA:6A:3A:31:14:1C:90:7B:C7
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 07A0AEF7
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/2yAEbL7JhxIECffKajoxFByQe8c.roa
Signing time: Sat 01 Jan 2022 09:03:06 +0000
ROA not before: Sat 01 Jan 2022 09:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 91.238.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127971063 (0x7a0aef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 1 09:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db20046cbec987120409f7ca6a3a31141c907bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:36:18:98:48:f1:88:71:82:ba:03:80:7a:
cd:1e:67:13:67:6d:5c:c2:7d:c7:3a:e8:37:94:53:
cb:d8:94:3c:1f:1b:31:ee:83:c7:91:53:f5:5e:6b:
9b:97:1d:aa:f3:e9:33:c6:3f:77:f3:17:85:fc:ff:
09:48:75:bc:10:a6:af:ba:54:4c:11:4a:e8:55:35:
ba:df:78:ca:87:85:d0:08:7d:10:df:fb:35:a7:95:
50:13:cc:16:5d:95:89:df:76:31:3d:77:85:6e:b9:
66:19:08:7c:63:ae:98:d9:65:e4:a9:0b:65:67:8f:
d0:37:a5:5f:31:31:34:7e:bc:ce:d0:31:95:5d:88:
00:97:63:ca:4c:3a:95:a8:3d:52:d6:ac:b9:1e:10:
fb:b7:fb:05:10:61:d6:7f:ca:23:f2:51:69:64:39:
2b:ef:8b:fa:c2:06:83:f8:3f:bf:90:ec:a4:6c:d9:
d4:89:92:5b:cb:4d:e4:7b:d5:dc:e4:1f:f6:71:04:
29:66:f4:b9:27:84:06:4c:4b:19:66:79:76:a4:6d:
cc:8b:13:ef:56:6b:9e:40:3a:26:40:c5:db:85:4b:
33:90:82:69:b5:de:ac:91:72:63:95:81:30:23:f0:
4f:1e:bb:fe:80:f7:af:c5:5a:b9:52:b5:ad:2b:68:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:04:6C:BE:C9:87:12:04:09:F7:CA:6A:3A:31:14:1C:90:7B:C7
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/2yAEbL7JhxIECffKajoxFByQe8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:67:ca:89:55:d6:aa:1c:2f:da:8c:bb:1d:b9:92:41:6b:2d:
5f:e8:2a:80:f5:f3:82:d8:b5:b5:b2:ab:7f:c2:2b:91:b6:eb:
2f:ff:b6:be:78:4a:0d:2e:bc:82:dc:7d:8b:89:e5:df:5d:58:
03:6a:4a:a4:34:25:5e:51:59:8e:f6:82:50:0a:1a:33:97:d3:
d0:e8:ea:c1:17:96:45:ca:c4:a3:04:e8:fc:c5:1b:79:6a:02:
57:ac:7f:6d:fe:cd:79:b4:9c:67:bf:5e:b0:77:9b:88:c6:b2:
05:77:41:cc:c5:b7:52:71:b0:78:21:0e:0a:55:49:11:20:7d:
de:b0:3f:d1:6f:b1:6d:0a:22:f8:43:51:71:51:c9:e7:da:4c:
61:40:f6:10:82:7e:d9:53:49:46:57:a7:39:af:ae:b1:15:cb:
53:7b:8b:60:67:56:1d:45:f1:d7:37:62:a3:9c:61:d2:39:7e:
2b:e3:2a:9a:d5:8b:f4:95:f2:be:bc:e7:d5:af:be:34:4a:29:
19:ac:4a:94:62:dd:76:d6:3b:cd:4b:f1:08:fb:80:c0:6c:50:
72:7d:bd:2b:be:43:44:45:ca:1a:04:97:43:cc:a6:3c:20:f5:
60:47:a6:90:33:67:30:df:b4:dd:fe:d4:a3:26:15:dd:49:ae:
9e:60:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:31 2024 by rpki-client on console-ams.rpki-client.org