Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/K6VcbKH1NPBk-W2H8Q0PS2VPORo.roa
File: K6VcbKH1NPBk-W2H8Q0PS2VPORo.roa (raw, json)
Hash identifier: q58j4EeNgEedZhCBxcGuHiNPBR1d4O8LwGoS8sIgYL8=
Subject key identifier: 2B:A5:5C:6C:A1:F5:34:F0:64:F9:6D:87:F1:0D:0F:4B:65:4F:39:1A
Certificate issuer: /CN=cb6b9c413711df48d006b9e16b5a30efe39ffaae
Certificate serial: 071DD7A2
Authority key identifier: CB:6B:9C:41:37:11:DF:48:D0:06:B9:E1:6B:5A:30:EF:E3:9F:FA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2ucQTcR30jQBrnha1ow7-Of-q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/K6VcbKH1NPBk-W2H8Q0PS2VPORo.roa
Signing time: Sat 01 Jan 2022 01:51:00 +0000
ROA not before: Sat 01 Jan 2022 01:51:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.207.13.0/24 maxlen: 24
91.207.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119396258 (0x71dd7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6b9c413711df48d006b9e16b5a30efe39ffaae
Validity
Not Before: Jan 1 01:51:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ba55c6ca1f534f064f96d87f10d0f4b654f391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:41:73:ec:00:d1:e1:6a:9e:bd:04:f7:23:
1f:92:7a:54:d4:a3:25:a9:07:5c:f8:ba:78:de:76:
fa:f9:94:03:1e:4c:00:48:af:ca:1c:e0:38:64:c5:
d7:bb:80:55:ea:90:56:dd:0a:fd:92:38:b2:7b:b7:
35:23:c1:01:06:b9:1c:ed:33:1d:df:d0:60:53:8f:
1f:ca:27:71:10:e7:08:ed:16:a3:18:d3:45:28:ba:
97:b4:87:29:e4:0d:2b:3e:54:d2:c3:f1:79:f5:72:
6f:df:ac:8c:ca:8c:0d:cb:f9:66:db:4f:19:f7:60:
01:0c:da:41:5b:74:11:b4:14:fe:0b:79:18:8c:cd:
1d:31:90:ce:1c:42:5c:a8:f6:93:84:5e:22:a8:63:
12:3c:2f:9a:98:b8:76:69:4c:e4:6a:7a:93:bf:a7:
c8:26:79:74:57:e4:ca:3f:f8:13:f4:8b:62:b4:8d:
6e:01:be:6d:36:35:a3:66:9a:24:bd:c7:b4:4d:8b:
3d:aa:ac:2c:29:2d:83:e9:fe:3e:47:1e:84:22:c3:
1d:70:3c:5f:38:52:49:e2:b2:b9:82:a7:00:3c:61:
10:4c:90:09:63:eb:ef:e7:0f:a2:9f:e3:d9:e7:47:
e8:25:ed:9e:e7:a4:e3:40:d4:b8:b7:4b:48:00:18:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:5C:6C:A1:F5:34:F0:64:F9:6D:87:F1:0D:0F:4B:65:4F:39:1A
X509v3 Authority Key Identifier:
keyid:CB:6B:9C:41:37:11:DF:48:D0:06:B9:E1:6B:5A:30:EF:E3:9F:FA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2ucQTcR30jQBrnha1ow7-Of-q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/K6VcbKH1NPBk-W2H8Q0PS2VPORo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/y2ucQTcR30jQBrnha1ow7-Of-q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:67:ec:a2:57:50:4f:33:61:2c:92:48:f6:4d:e8:af:0f:5c:
3f:01:7a:3d:6c:8e:5b:68:28:81:19:2a:cb:d0:b5:5d:94:e6:
c6:8c:51:40:1f:8b:19:be:b2:60:66:16:6f:4b:63:04:ce:02:
4c:2b:ee:c1:68:13:0f:59:81:2e:de:36:68:1d:f2:02:78:73:
69:29:16:99:db:d1:ba:a5:1a:a5:ca:19:09:4e:aa:b7:ad:e9:
00:10:38:28:cc:ab:42:32:64:d2:ca:44:bb:40:ba:68:5c:61:
15:4d:19:9f:ea:49:5b:ed:f5:fb:3c:8d:d2:55:58:c0:36:14:
05:fe:f6:cb:2e:fc:f0:da:5f:bf:b5:6e:c6:72:86:11:f7:37:
5f:e1:2e:3b:08:2c:09:7e:0a:61:b7:60:72:9a:02:7d:dd:24:
a1:a4:9b:5d:7b:75:44:b8:5c:9c:f1:6b:74:4e:6e:02:b8:e3:
81:73:45:09:a6:62:58:e0:1d:93:19:cf:ca:28:4c:9d:b3:ac:
7f:e6:c6:00:2b:c6:10:58:80:c4:26:fe:bc:72:27:b3:a2:b0:
3e:43:dd:06:90:0d:71:65:4d:d4:a9:2d:2a:d2:c6:5b:d2:89:
96:4f:fb:7f:15:f8:e9:f3:03:ed:df:42:c4:cd:8d:b9:16:7b:
a5:85:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net