Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/Dvp46QfBGKLc6CbmZMrJOKVnm7o.roa
File: Dvp46QfBGKLc6CbmZMrJOKVnm7o.roa (raw, json)
Hash identifier: EeL/MUm077EA/azHA/KDAnBAK90mI/UHnNWBSuVTkb8=
Subject key identifier: 0E:FA:78:E9:07:C1:18:A2:DC:E8:26:E6:64:CA:C9:38:A5:67:9B:BA
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 018529E49A6BC9D05FD84455F26B46EE5B3E
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/Dvp46QfBGKLc6CbmZMrJOKVnm7o.roa
Signing time: Mon 19 Dec 2022 10:18:45 +0000
ROA not before: Mon 19 Dec 2022 10:18:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59747
IP address blocks: 91.207.230.0/24 maxlen: 24
91.207.231.0/24 maxlen: 24
2a02:38:1111::/48 maxlen: 48
2a02:39::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:e4:9a:6b:c9:d0:5f:d8:44:55:f2:6b:46:ee:5b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Dec 19 10:18:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0efa78e907c118a2dce826e664cac938a5679bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:4c:c6:00:4d:ab:5f:48:b0:06:20:4f:b5:
6e:8c:61:85:06:9d:77:47:47:6e:25:df:6a:e8:13:
41:cc:e1:43:24:89:84:ac:c3:bb:37:8e:e4:6c:45:
97:2b:d0:a7:66:93:13:95:d5:0a:24:5e:7f:b6:72:
f4:23:02:21:d5:aa:45:59:e6:80:f8:f7:be:cd:1d:
a5:fd:25:7b:29:af:82:c1:16:88:d4:62:65:21:d7:
d1:bd:81:a8:c7:3c:fa:4c:82:66:df:47:8b:82:e5:
d2:73:67:f9:00:63:b0:9c:78:1f:e1:fd:fd:a1:86:
78:34:52:ff:21:a1:0e:57:f3:32:e7:25:b7:40:76:
f1:85:1a:88:55:03:9b:86:ce:74:5b:96:78:3e:2c:
d8:af:5e:b3:1f:38:a0:b2:a2:54:e9:2c:9a:ee:0a:
6b:fd:0a:d4:99:62:67:9a:99:70:d5:f5:fa:4a:32:
1c:d4:4a:ce:44:b6:de:b5:7c:5e:cc:d2:65:63:c9:
1e:91:69:8f:55:73:c0:74:77:0b:c8:bd:54:1b:f7:
4b:f1:f6:1f:d1:91:3f:7c:3a:2c:22:d1:07:fd:26:
49:2e:8f:58:f9:cd:95:ca:c5:37:cb:55:ae:1a:a0:
93:bb:31:a8:ba:c3:fc:26:bf:19:95:37:07:9e:a0:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:78:E9:07:C1:18:A2:DC:E8:26:E6:64:CA:C9:38:A5:67:9B:BA
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/Dvp46QfBGKLc6CbmZMrJOKVnm7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.230.0/23
IPv6:
2a02:38:1111::/48
2a02:39::/32
Signature Algorithm: sha256WithRSAEncryption
24:88:45:87:9f:99:fc:21:74:f7:35:9a:45:69:f5:63:7f:ef:
17:1d:bb:d5:e8:6c:39:73:7a:3a:c4:a7:40:33:a6:3a:50:08:
89:a4:74:fb:8b:9d:9c:5c:a4:a7:a8:54:eb:d7:b9:28:ad:3a:
8c:c6:49:1b:84:95:b4:c2:eb:0a:af:64:d6:0c:6c:cb:4e:ad:
5a:d1:0a:14:fa:bf:4d:20:ba:47:cc:f7:75:b3:9c:6d:d4:06:
c3:e6:cd:6c:44:da:1c:c6:4b:5c:85:d0:e9:46:d1:df:eb:96:
aa:7f:46:fc:1b:3f:f6:a1:05:3e:55:63:06:db:93:c2:44:a3:
bb:29:c2:46:30:79:33:4f:d2:1e:c7:2f:bb:70:10:b0:1e:5a:
62:45:d4:96:8d:d4:82:2b:77:c0:8e:52:93:f9:60:55:d6:41:
ba:9f:51:d9:f7:e0:0e:c4:2d:23:5d:97:fd:7d:47:38:fc:00:
25:49:7d:6e:6a:2c:bc:33:3a:9a:0e:76:00:14:63:27:95:63:
32:e1:7e:eb:1f:68:df:2e:f2:ec:f4:00:10:d4:37:93:bf:e0:
2a:52:67:66:8f:36:8c:f3:c8:af:6d:47:11:e3:a1:19:ae:de:
b6:72:42:f3:af:2b:80:9f:26:7c:12:67:fe:f3:f3:00:e8:9d:
3b:3a:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:06 2024 by rpki-client on console-ams.rpki-client.org