Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/Cf6HYmN0iQGP9KCjsMMfSmrVtU0.roa
File: Cf6HYmN0iQGP9KCjsMMfSmrVtU0.roa (raw, json)
Hash identifier: xDpgpVRBw8BKAixNNKZkY/khKVqeCqufxjgb2mPaMP0=
Subject key identifier: 09:FE:87:62:63:74:89:01:8F:F4:A0:A3:B0:C3:1F:4A:6A:D5:B5:4D
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 014C8DD5
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/Cf6HYmN0iQGP9KCjsMMfSmrVtU0.roa
Signing time: Sat 01 Jan 2022 14:55:59 +0000
ROA not before: Sat 01 Jan 2022 14:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39187
IP address blocks: 91.208.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21794261 (0x14c8dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Jan 1 14:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09fe8762637489018ff4a0a3b0c31f4a6ad5b54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:a5:73:e9:d0:9d:cb:19:81:be:7e:7f:ab:
12:6e:c3:43:ba:82:d5:0c:5e:aa:af:4b:5e:e9:9c:
23:d2:76:e5:35:1e:b4:0f:85:ac:b2:87:1b:81:68:
48:6d:cd:ff:53:7a:e1:41:cc:20:f3:c8:a2:0c:43:
d0:19:fe:9b:f3:7f:64:60:69:90:3b:45:b6:1f:a3:
05:55:e3:2e:c4:d9:a3:46:73:8a:4e:8e:50:41:48:
9e:88:99:8d:a1:44:bf:56:07:63:b0:47:de:fd:b4:
af:ff:a7:9d:cc:65:fe:b2:69:c1:17:55:8b:f5:3b:
9f:c2:35:f2:2f:d3:ff:73:ed:ed:17:cb:28:2b:00:
87:80:25:d5:60:d2:c4:58:58:fc:81:37:2a:5d:5f:
1d:d9:b2:22:05:d6:6c:d4:bb:57:18:fa:bc:9e:69:
ba:2e:17:12:23:fe:90:5b:c4:1b:06:b5:7d:ae:1d:
52:f7:e9:1a:9e:1a:2b:64:5f:fe:b9:0e:74:5c:be:
22:d8:67:f0:5e:51:b3:67:48:00:a3:ed:db:85:41:
3e:16:87:f1:74:ae:4e:78:a3:b8:50:21:76:a6:fc:
4a:0e:6f:1b:35:9d:44:ab:84:ef:7e:2c:9f:b3:5f:
02:3b:dc:af:59:cb:9e:c1:b9:61:a6:ac:c8:05:92:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:87:62:63:74:89:01:8F:F4:A0:A3:B0:C3:1F:4A:6A:D5:B5:4D
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/Cf6HYmN0iQGP9KCjsMMfSmrVtU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.27.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f2:e8:bc:70:32:27:f1:d6:22:5c:d4:20:71:ec:1e:4a:e2:
bc:c9:46:28:31:a7:70:3a:8d:20:bd:88:ab:e9:b1:2a:b2:9f:
79:08:4e:b9:92:ec:ce:f7:6e:f1:88:f4:46:6e:93:0f:74:b5:
e2:aa:14:c8:20:b0:f4:0d:23:96:6f:b9:aa:89:70:95:31:27:
26:0c:20:a8:25:7f:a8:10:a7:98:80:a0:13:e5:5c:f4:65:a9:
d4:5e:21:dc:d6:25:13:74:10:d3:9d:4b:1f:37:1b:8b:e5:d1:
a3:5d:b5:15:89:50:6d:8c:54:d1:5f:43:7e:b3:ee:e8:3f:46:
42:5e:e5:31:19:51:6d:d9:a1:c3:63:dd:88:cd:d2:4d:3e:e7:
0c:30:20:73:e4:29:2a:56:35:5c:fd:21:bb:29:42:60:6b:98:
07:10:77:54:56:27:2d:b1:b0:5c:64:6b:ce:b0:87:e7:df:9c:
a8:78:bf:91:6f:38:e8:e7:26:59:27:e6:3a:fa:32:2a:51:06:
b2:0d:08:8b:bc:8e:cd:45:69:54:9e:da:1e:d2:8d:41:70:fb:
32:2d:96:e2:dd:47:92:be:ee:ec:30:a5:a0:8d:0d:72:5e:4e:
47:83:d7:c7:d8:0e:62:32:b9:e9:f4:2c:ad:59:1b:62:22:7c:
19:da:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net