Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RvAddgVoxrhiQ8HbHP7MMeE1pQk.roa
File: RvAddgVoxrhiQ8HbHP7MMeE1pQk.roa (raw, json)
Hash identifier: jtCEX2a5j8a5/FqnwEkI5YNiALhkpBh5SwyHv1xSdDo=
Subject key identifier: 46:F0:1D:76:05:68:C6:B8:62:43:C1:DB:1C:FE:CC:31:E1:35:A5:09
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01820104D615647136813E92734F09989486
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RvAddgVoxrhiQ8HbHP7MMeE1pQk.roa
Signing time: Fri 15 Jul 2022 08:41:10 +0000
ROA not before: Fri 15 Jul 2022 08:41:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35238
IP address blocks: 86.63.224.0/19 maxlen: 19
91.91.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:04:d6:15:64:71:36:81:3e:92:73:4f:09:98:94:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:41:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46f01d760568c6b86243c1db1cfecc31e135a509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:28:fa:cd:f5:11:5a:41:e3:98:e5:15:14:
e0:e2:04:9d:49:55:65:f4:f8:66:d9:9c:e9:6a:f3:
5a:85:3f:5a:1e:ad:ef:a0:e0:f3:db:a8:d6:7d:08:
25:73:43:dc:94:8f:19:ff:ba:30:fd:88:80:ef:75:
49:da:cc:b6:69:91:b4:95:27:40:8f:e0:aa:e1:82:
0a:ca:78:4d:fa:8e:00:c1:96:a1:1e:6d:62:b4:64:
81:fd:82:52:1e:c0:1d:da:94:39:10:61:82:0c:50:
19:79:03:a9:4b:82:a6:68:ed:9c:e2:5c:98:74:de:
e4:81:e3:b2:50:cf:2e:27:87:c6:fa:76:dc:14:77:
2f:ef:a5:f0:63:68:52:61:fe:3d:6b:d4:3f:09:bd:
81:49:2b:d0:00:1b:4b:0c:21:ca:52:b7:cd:79:80:
96:34:a5:69:63:09:77:d9:67:5c:43:36:86:37:71:
04:f9:05:37:ec:d7:ce:17:a9:ca:5b:ac:dc:b9:44:
76:11:c0:60:3d:40:a3:a6:9c:d8:44:00:79:ed:d5:
21:74:49:0f:eb:09:eb:f5:b6:b9:d1:d7:9d:17:d7:
9d:e6:f2:b2:09:94:2c:b5:13:03:b3:95:bb:a9:02:
9c:cf:ea:61:0a:ac:aa:62:91:7e:5b:69:d6:a1:c1:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:1D:76:05:68:C6:B8:62:43:C1:DB:1C:FE:CC:31:E1:35:A5:09
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RvAddgVoxrhiQ8HbHP7MMeE1pQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.63.224.0/19
91.91.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:97:ff:b2:8f:0c:67:24:79:ae:01:24:c5:87:27:3e:fc:91:
47:7b:f6:bc:2f:1c:2c:de:e2:18:cd:d9:7a:c1:2e:28:33:31:
c9:89:59:32:70:4f:ea:15:5f:f1:c8:45:f1:4e:ca:96:04:6c:
b7:cc:f0:72:e4:01:c8:a4:86:b6:10:30:13:54:b4:32:f1:52:
f8:cc:13:56:b0:dd:a2:8d:db:b4:7c:22:78:59:4d:e9:ea:59:
f6:27:8e:6b:f5:8c:5c:a1:2c:2b:74:14:c2:26:0e:48:9a:ae:
a8:7f:bf:3c:4c:56:fb:d2:6d:94:2e:ba:7b:64:48:c6:f8:17:
9c:07:4f:6a:77:d8:c4:10:c2:7e:be:aa:dc:8e:6a:18:3a:4e:
35:4f:fb:fb:74:10:64:5d:fa:d0:65:44:85:32:56:80:f0:e8:
b2:93:37:4a:85:a9:1a:65:62:b1:17:cf:1a:b1:03:13:de:74:
da:2c:bc:4e:88:ef:d3:a3:e1:eb:68:94:59:83:3d:77:46:5c:
1e:a3:02:f1:4c:19:18:27:97:11:ae:cb:d8:07:61:ee:b2:ed:
b9:38:ed:76:51:76:c8:17:b1:e2:ad:bc:5b:1c:4f:17:3d:12:
ee:e3:11:0e:07:37:e4:27:17:f5:b4:5a:30:c5:70:e6:f8:e3:
e6:bc:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org