Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/I1SFXEZMTkcxGnpjo-Y_sMUd5K8.roa
File: I1SFXEZMTkcxGnpjo-Y_sMUd5K8.roa (raw, json)
Hash identifier: aZVEguv9ZJlAhAB9mj6XsgpndG9XgasLUMIqjsjs4DQ=
Subject key identifier: 23:54:85:5C:46:4C:4E:47:31:1A:7A:63:A3:E6:3F:B0:C5:1D:E4:AF
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 0183CC86DA58365297E5CB60D59437840002
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/I1SFXEZMTkcxGnpjo-Y_sMUd5K8.roa
Signing time: Wed 12 Oct 2022 14:08:53 +0000
ROA not before: Wed 12 Oct 2022 14:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41247
IP address blocks: 91.222.184.0/24 maxlen: 24
91.222.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:86:da:58:36:52:97:e5:cb:60:d5:94:37:84:00:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Oct 12 14:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2354855c464c4e47311a7a63a3e63fb0c51de4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:89:7b:b2:34:e9:ce:63:b0:41:6a:29:92:
bf:0a:92:57:1e:36:d9:54:a0:5f:44:57:4d:a2:63:
43:59:7b:41:94:d2:5a:72:60:83:d6:aa:40:b9:bd:
4f:82:75:35:81:24:80:5d:9a:15:c9:db:b0:42:44:
04:e7:e2:92:27:4a:6a:97:b4:f6:cc:33:68:0d:ea:
54:da:31:2d:e7:5d:0e:16:4b:fa:c5:c9:ce:0f:0b:
e2:d5:25:6d:7d:d1:cd:2a:2c:2f:6f:95:3c:c4:54:
d6:f4:4d:83:15:d9:4a:8f:82:95:f6:cc:bf:06:cb:
42:cc:9c:58:1b:84:3a:5f:2f:38:41:82:20:ef:cc:
0a:33:d1:8b:9f:2d:22:57:16:b0:bd:c8:c8:44:44:
27:72:e2:7c:2f:87:a5:b4:db:7b:68:89:a6:a6:ca:
90:80:df:f8:05:cf:b6:6b:4d:f2:f2:0c:44:72:3e:
9a:73:f5:87:e9:2d:a3:22:0a:c7:e7:5f:ce:3e:1f:
17:e0:a3:2f:69:a7:92:12:65:fd:7b:b6:ab:81:75:
ae:5e:c8:2f:47:d3:10:91:e0:4f:70:cc:9a:52:99:
f2:f7:cf:e9:ef:8f:57:1c:2e:07:c6:b5:11:24:64:
a9:32:79:c1:bd:7f:84:d9:13:5f:7d:fd:b5:3e:3c:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:85:5C:46:4C:4E:47:31:1A:7A:63:A3:E6:3F:B0:C5:1D:E4:AF
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/I1SFXEZMTkcxGnpjo-Y_sMUd5K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.184.0/24
91.222.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:79:18:cd:95:76:11:c6:09:55:69:14:d3:e6:96:60:a3:e9:
1c:ae:7c:7a:33:85:5b:ee:5f:58:4b:e6:8a:53:c0:a8:dc:35:
25:f1:05:64:5e:22:91:f5:be:30:25:74:7a:9e:61:2f:c7:02:
09:da:0e:97:39:56:ab:c1:4f:f4:13:7b:bc:b3:ab:5e:83:82:
96:f5:4c:a7:08:4d:3d:7a:b7:7b:52:43:56:60:0a:00:c4:e8:
8c:bb:79:5d:63:38:29:38:71:14:ce:3b:cd:b0:6b:5e:a4:53:
72:c4:3c:23:50:7b:fc:2d:a0:93:64:8b:31:51:cf:66:f8:74:
f7:d1:75:ab:90:cf:1e:8d:17:28:a1:7e:c5:71:bd:12:71:a3:
45:2c:5f:45:e8:1a:21:6a:ae:a3:d0:87:36:70:88:27:96:4b:
ae:ee:88:ba:73:3c:f3:32:b1:16:14:c4:29:03:8c:ec:70:05:
25:c0:6c:42:63:d1:2d:6d:bd:14:f1:d6:c2:ee:e2:26:05:71:
de:7d:31:2e:2d:1b:11:98:da:f1:5a:67:d1:d3:26:33:93:e2:
6e:77:61:71:c3:70:62:d7:68:1a:96:5e:4e:b3:8c:8a:af:cb:
90:69:36:64:f6:9f:31:44:7f:0d:90:60:43:d2:2f:ff:e6:dc:
60:ad:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org