Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/1-iM-JgGDwZYzTshF_DHi_qn0gM.roa
File: 1-iM-JgGDwZYzTshF_DHi_qn0gM.roa (raw, json)
Hash identifier: gEpJZHbLMzbODUZMKe2EIc6qIF8x+2NsM4+6YpIppHU=
Subject key identifier: D7:E8:8C:F8:98:06:0F:06:58:CD:3B:21:17:F0:C7:8B:FA:A7:D2:03
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 1838F29C
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/1-iM-JgGDwZYzTshF_DHi_qn0gM.roa
Signing time: Sat 01 Jan 2022 00:58:05 +0000
ROA not before: Sat 01 Jan 2022 00:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12700
IP address blocks: 91.202.240.0/24 maxlen: 24
91.202.240.0/22 maxlen: 22
91.202.241.0/24 maxlen: 24
91.202.242.0/24 maxlen: 24
91.202.243.0/24 maxlen: 24
31.131.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406385308 (0x1838f29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Jan 1 00:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7e88cf898060f0658cd3b2117f0c78bfaa7d203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:85:ad:eb:84:89:e8:f5:82:50:76:28:3f:
b0:00:b0:29:56:a3:ee:68:db:25:28:6d:d3:17:2b:
f6:06:85:b2:d0:38:f9:81:d2:11:f8:83:45:34:ad:
fe:99:16:39:77:ac:d5:46:b7:03:5c:ec:d1:3a:77:
c3:07:ad:2c:22:90:2e:95:ee:60:a2:ce:96:da:a8:
08:e4:10:0d:b9:6b:97:86:bc:2c:7c:d1:d0:c5:22:
ce:90:91:02:9f:c9:50:d4:b0:35:1a:db:03:f4:a4:
48:3a:2a:b6:fb:e3:4b:30:f6:e8:c1:09:8e:bf:98:
24:04:fb:4a:e7:13:29:11:fc:02:25:d4:cd:7f:b6:
38:f5:ab:a3:c1:39:b1:c1:40:f6:3a:6a:ae:81:fb:
da:76:7b:66:c6:b5:cd:a4:80:cf:ab:68:54:95:36:
e6:c6:ec:79:a0:53:1b:34:74:31:81:4d:45:7a:8d:
75:15:f6:d6:cc:85:3a:5e:c6:4f:e0:31:11:51:c9:
50:f3:2a:83:5a:21:cf:ab:6d:fc:43:e1:01:4d:3d:
dd:ba:52:13:25:08:4a:ce:a4:97:6f:04:e7:12:2e:
b9:3c:4e:b2:e8:2e:a3:86:42:7d:2c:57:3d:6f:7c:
fb:1e:ee:00:aa:52:0a:01:84:f5:c8:be:ee:f1:f8:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:8C:F8:98:06:0F:06:58:CD:3B:21:17:F0:C7:8B:FA:A7:D2:03
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/1-iM-JgGDwZYzTshF_DHi_qn0gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.32.0/21
91.202.240.0/22
Signature Algorithm: sha256WithRSAEncryption
20:61:22:6c:58:e4:11:9e:c1:3b:46:83:e9:45:69:56:f1:1f:
5b:25:0c:55:82:ff:da:2d:01:84:df:31:17:d3:c4:b7:5a:61:
25:57:49:ef:fa:24:fa:08:eb:9f:a3:18:f7:a5:2b:5f:38:70:
1a:7c:56:9b:8b:d6:46:d5:98:93:75:c7:25:33:d7:dd:86:ae:
8f:23:65:a5:d5:0f:90:42:fe:17:1f:52:a7:5f:13:72:2d:f8:
7d:da:cd:89:d8:10:93:a8:52:6c:a2:7c:7b:34:0e:bb:23:fe:
2d:8b:4a:eb:43:f5:7f:79:91:5d:0e:20:00:6b:52:e8:80:b4:
5b:4d:7f:2a:fc:28:b3:51:cd:68:f0:99:4d:7a:ea:1a:11:f0:
50:32:a1:54:41:79:59:91:e7:7c:e4:8b:98:aa:b1:ea:9f:2e:
99:9f:8e:78:bc:83:fb:a5:26:d4:25:38:b7:12:9f:79:25:ce:
86:58:c5:86:c3:93:35:8e:4c:ff:5e:ad:bb:52:a1:89:11:a3:
dd:61:8b:62:49:23:c8:4c:0e:a2:d4:ad:56:69:7a:88:40:49:
3d:8f:f5:e6:9b:98:3f:fe:72:2e:dc:ad:ed:7d:58:25:6e:fd:
c8:0c:55:b7:8a:16:da:8d:6c:2a:ea:dd:8e:03:50:3e:45:04:
eb:a6:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:38 2024 by rpki-client on console-ams.rpki-client.org