Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/tvVLMZaZPW6-9JmSL5gPAa68yis.roa
File: tvVLMZaZPW6-9JmSL5gPAa68yis.roa (raw, json)
Hash identifier: UjFndN9kNoY9IeAUYfC1hGP7g2u2YLi7bVdDEVUJVrY=
Subject key identifier: B6:F5:4B:31:96:99:3D:6E:BE:F4:99:92:2F:98:0F:01:AE:BC:CA:2B
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 03AA8766
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/tvVLMZaZPW6-9JmSL5gPAa68yis.roa
Signing time: Sat 01 Jan 2022 00:54:52 +0000
ROA not before: Sat 01 Jan 2022 00:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48342
IP address blocks: 91.209.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61507430 (0x3aa8766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Jan 1 00:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6f54b3196993d6ebef499922f980f01aebcca2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:30:91:a7:dc:ce:6b:76:c0:15:7d:7f:fc:
53:a3:7a:67:67:02:ba:c3:83:27:68:28:fa:29:b4:
15:32:20:ec:94:c4:ae:f7:5f:b6:3c:51:d8:b8:f8:
75:5a:9f:4f:05:3b:89:c8:3b:be:5a:83:8a:a1:78:
63:c6:a7:51:6c:75:0e:3e:bc:4c:9e:2f:bf:3f:72:
87:97:bf:4b:dd:e8:81:75:2c:bc:0a:ac:e4:ff:88:
6e:30:a6:26:4c:4a:83:d1:9d:73:17:06:17:81:02:
ea:86:ba:a7:e6:a3:c6:76:40:36:62:7c:8f:51:ad:
f5:ad:09:23:8d:02:05:1c:62:d2:44:77:ad:5e:43:
82:6b:ed:d3:c2:de:4a:4c:06:0c:41:ab:92:8e:fc:
75:cf:0b:bf:70:88:be:d5:9b:0a:2b:7a:f6:b5:01:
0e:d5:59:64:20:3d:9a:07:3f:e7:1e:97:eb:65:01:
53:35:80:3c:04:12:43:b9:f0:2e:57:f1:d1:2c:e5:
d5:d2:58:e3:f8:22:fc:9c:0f:30:0c:85:1a:4d:e1:
5a:58:e7:49:61:df:4e:41:63:e9:b5:a5:14:6e:b0:
05:59:2a:39:52:b2:cc:64:9d:b0:56:04:94:38:ae:
af:1c:66:f3:f0:4c:9b:75:21:ac:92:84:af:0c:10:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F5:4B:31:96:99:3D:6E:BE:F4:99:92:2F:98:0F:01:AE:BC:CA:2B
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/tvVLMZaZPW6-9JmSL5gPAa68yis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.106.0/24
Signature Algorithm: sha256WithRSAEncryption
02:66:0f:d9:45:ec:e3:21:a0:b2:ee:19:8e:cd:fe:5c:dd:9a:
c0:1b:9b:4b:10:b5:31:27:eb:14:01:78:5e:08:d1:d8:a6:8c:
c8:64:34:fe:9b:c6:25:8f:4d:c4:95:ac:9f:ad:c0:c3:96:86:
18:b1:e7:3d:de:98:5d:fd:87:db:74:66:c8:3e:7c:eb:7e:41:
2f:83:95:eb:8a:0c:1c:d8:5b:f7:6b:ba:ce:a3:60:44:0e:8a:
2d:3f:64:b8:58:4c:0f:e8:33:8a:bb:d7:af:ac:e8:f7:1b:6f:
81:00:c8:1b:4e:2e:01:f1:23:d3:d9:21:a2:0b:3d:7c:d4:67:
85:6a:74:e2:ac:45:f0:51:69:b0:98:d9:ad:b7:cf:63:72:a9:
3a:ce:97:1d:d4:e4:0c:0b:6a:02:7f:1a:23:2b:9f:42:51:ad:
2a:c0:d6:2c:85:1e:44:9d:13:48:ae:94:33:69:85:21:57:aa:
a0:40:09:97:d7:2e:d4:6c:07:a9:25:9a:0d:e2:a6:f0:b7:d7:
ce:ce:f6:d1:33:c7:39:8c:86:a7:f5:58:37:59:97:f4:ab:c1:
2e:27:ad:b1:57:75:a3:7a:3a:be:b0:78:03:04:d5:b5:45:80:
6e:43:b9:51:f9:10:fa:54:1f:27:a7:af:0c:97:c0:ae:bd:31:
50:68:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:07 2023 by rpki-client on console.sobornost.net