Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/g3eR-G9BqfoUQVQe3z8x6QrTdsQ.roa
File: g3eR-G9BqfoUQVQe3z8x6QrTdsQ.roa (raw, json)
Hash identifier: PAbkTQoYNyycDIk9rC4y7mS/QGO44C/27QThjS8DSCU=
Subject key identifier: 83:77:91:F8:6F:41:A9:FA:14:41:54:1E:DF:3F:31:E9:0A:D3:76:C4
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 389E8DAF
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/g3eR-G9BqfoUQVQe3z8x6QrTdsQ.roa
Signing time: Sat 02 Jul 2022 14:28:25 +0000
ROA not before: Sat 02 Jul 2022 14:28:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207120
IP address blocks: 91.209.142.0/24 maxlen: 24
185.113.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949915055 (0x389e8daf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Jul 2 14:28:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=837791f86f41a9fa1441541edf3f31e90ad376c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:3b:d0:b2:2b:49:a6:20:35:78:8e:dc:42:
f0:77:d2:60:57:95:9b:55:8e:44:79:29:1c:64:71:
48:28:1f:4d:df:58:07:d7:75:20:ca:b2:1e:74:92:
d7:3e:c2:ef:f9:13:f5:9b:52:de:30:75:de:84:5c:
bd:8a:2c:29:83:c2:0f:7f:46:aa:13:42:49:26:a8:
7c:9d:b3:c2:11:a9:99:a3:2e:3c:3d:ab:23:84:65:
b3:31:46:b8:c4:76:fc:8a:5e:a5:41:a7:a7:cb:b4:
83:05:00:77:41:cb:18:56:82:2b:62:ac:39:b8:88:
47:1b:c0:6a:20:18:43:cf:0c:cf:6d:21:c8:37:26:
47:1a:a4:fc:dc:2a:91:21:74:48:76:35:22:af:26:
55:a8:ab:58:62:fb:bf:54:6b:d6:ad:76:7a:64:78:
5d:84:4d:76:b5:42:1f:c5:4c:f5:fe:cd:8c:c4:5c:
2b:bb:3a:e4:7e:72:5c:8b:93:81:f4:fa:fd:8d:a3:
dd:79:96:ce:b6:32:d3:ca:d8:80:22:54:b6:ed:74:
5b:52:db:6f:f3:23:26:c1:15:72:86:50:96:f6:7d:
75:2e:2d:b3:ae:b9:9c:46:88:57:23:c4:26:c9:75:
41:c2:9d:2d:c6:e9:20:6e:bd:d6:bc:b9:37:8d:41:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:91:F8:6F:41:A9:FA:14:41:54:1E:DF:3F:31:E9:0A:D3:76:C4
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/g3eR-G9BqfoUQVQe3z8x6QrTdsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.142.0/24
185.113.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:21:c6:ca:20:69:de:d8:97:84:1a:c8:75:5e:2e:5b:66:bb:
3f:bb:46:61:1b:d7:ab:a5:db:13:9a:a8:5c:af:f5:73:28:e7:
e7:cc:00:e4:52:be:76:25:d8:ef:06:7a:b7:e7:6a:96:99:46:
7e:41:c2:68:31:1b:ec:14:40:1d:58:de:af:a5:31:49:e6:1c:
4e:33:e2:5f:6e:bc:df:44:13:ab:d9:e5:f4:87:aa:f2:44:c3:
1e:22:81:55:e6:ed:cc:14:25:d7:e0:88:5e:68:60:51:7f:4a:
e0:96:3f:48:2a:89:9b:74:f8:42:6e:a8:db:63:c7:83:d8:1b:
91:5d:d7:5f:df:21:12:7a:4d:90:eb:e6:55:8a:bf:76:2d:32:
e4:75:17:f8:bd:de:c2:75:26:27:cd:d9:9b:46:56:4d:21:e1:
cc:12:60:b6:24:45:42:90:36:0c:0c:9b:3f:51:be:91:26:f3:
84:3f:1d:95:bc:a1:70:36:bc:28:cc:6b:a5:cd:3f:bb:d9:5e:
09:a9:f3:f4:50:86:18:0c:75:4e:d8:7f:5f:7a:2f:74:14:3e:
0d:55:bf:8c:bd:b1:f4:b4:f2:de:1b:77:74:54:21:a7:30:59:
67:c6:9d:d9:24:18:5e:1f:e9:1b:9a:be:32:26:3f:a4:96:2b:
c2:ca:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:23 2024 by rpki-client on console-fra.rpki-client.org