Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/PXdlLYulEgcSE11ZG1csccbgQdA.roa
File: PXdlLYulEgcSE11ZG1csccbgQdA.roa (raw, json)
Hash identifier: EyGOKM6190MUu+iX+JFVAY+BPKM0pyOoSDPppl1Rgig=
Subject key identifier: 3D:77:65:2D:8B:A5:12:07:12:13:5D:59:1B:57:2C:71:C6:E0:41:D0
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 015048B6
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/PXdlLYulEgcSE11ZG1csccbgQdA.roa
Signing time: Sat 01 Jan 2022 06:54:20 +0000
ROA not before: Sat 01 Jan 2022 06:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51573
IP address blocks: 91.217.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22038710 (0x15048b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Jan 1 06:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d77652d8ba5120712135d591b572c71c6e041d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:53:5d:22:a4:36:e1:56:31:69:30:8f:14:
a8:3a:7b:77:a3:d6:c4:5a:23:fd:65:40:98:c6:5a:
4a:a0:30:16:59:b4:bd:ec:2b:92:fd:1d:25:49:27:
59:7c:d5:f8:3d:0d:ba:c4:cd:15:22:7c:0d:b7:27:
fa:d0:6a:f7:b2:41:8f:e4:05:40:46:05:94:4e:78:
14:fc:df:9b:b4:e3:c6:87:73:f4:b8:d3:90:cf:87:
5a:0e:ff:82:a0:6f:7e:35:aa:4c:52:0e:54:bd:18:
d4:44:52:e1:b1:a1:20:be:8d:c4:99:11:2b:1f:7d:
2f:13:21:1a:83:fe:d5:f3:39:8f:1f:2f:83:7f:60:
f7:27:79:ab:21:86:3c:d1:7b:c3:3c:b7:92:90:f4:
71:f9:35:16:87:29:56:93:28:38:4c:f0:40:c2:45:
7b:cb:75:6d:e2:d3:3d:5a:1c:b9:68:48:b2:90:f1:
21:f7:1c:e3:5a:6e:17:b7:f3:b0:26:aa:ff:c3:cd:
2b:02:7e:73:d9:8e:76:4a:aa:d6:0a:53:7c:a3:97:
e7:dc:c7:69:42:de:a3:59:58:72:8f:47:81:cc:0a:
b3:c9:8c:75:be:b2:69:70:eb:75:dd:53:d9:db:5c:
08:a3:63:80:76:6e:de:c3:10:69:31:31:05:68:b6:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:65:2D:8B:A5:12:07:12:13:5D:59:1B:57:2C:71:C6:E0:41:D0
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/PXdlLYulEgcSE11ZG1csccbgQdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.255.0/24
Signature Algorithm: sha256WithRSAEncryption
36:99:2a:6e:21:fd:9c:d5:2d:3c:7f:35:09:59:5b:95:fd:c5:
36:82:4b:37:a9:23:94:e5:08:c7:ee:1d:b0:34:b2:68:36:35:
5b:d4:38:df:11:ef:b2:89:3c:69:9c:38:32:7b:3b:4a:c7:dd:
dd:29:c2:7b:20:08:3b:e7:00:9a:7e:e1:ce:d2:c3:87:5b:60:
07:be:af:2f:c7:7b:72:18:e3:58:97:6e:29:ba:57:7b:df:83:
cf:3e:d4:a4:5d:a9:8e:da:23:f7:92:12:aa:bf:69:33:d8:e2:
9e:9b:f6:85:ee:d7:af:76:38:c7:8f:50:13:e4:2b:32:e3:da:
43:19:33:7f:47:43:58:9d:9f:09:3e:0f:e1:ae:75:52:2e:d2:
ff:33:0e:a7:2e:78:86:fa:e7:49:e7:f7:a4:56:6b:f7:6f:55:
61:95:82:9c:1e:d6:6e:00:3b:35:13:8a:42:a3:f4:88:28:ed:
7d:14:81:3a:50:16:15:fc:a2:f5:1a:2c:83:c7:e0:a2:3c:35:
4e:e0:57:89:2a:ec:77:c0:2f:18:aa:7a:56:2d:61:d9:0d:5b:
ac:f0:c7:70:f0:46:ec:af:a1:29:eb:9e:02:39:65:32:cc:0a:
47:27:9a:ae:59:33:80:a9:99:7c:63:17:7c:2f:03:77:a1:e4:
58:8d:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net