Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_whcD4Hl8hRZKtkuTQxiq9nVk6s.roa
File: _whcD4Hl8hRZKtkuTQxiq9nVk6s.roa (raw, json)
Hash identifier: 0axRSKoEwZ41DtBf1qzOTHkir0z41kMxLV4vnRrV+T8=
Subject key identifier: FF:08:5C:0F:81:E5:F2:14:59:2A:D9:2E:4D:0C:62:AB:D9:D5:93:AB
Certificate issuer: /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Certificate serial: 03CF3BC9
Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_whcD4Hl8hRZKtkuTQxiq9nVk6s.roa
Signing time: Sat 01 Jan 2022 15:55:35 +0000
ROA not before: Sat 01 Jan 2022 15:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31437
IP address blocks: 91.197.80.0/22 maxlen: 22
91.197.81.0/24 maxlen: 24
91.197.83.0/24 maxlen: 24
91.197.80.0/24 maxlen: 24
91.197.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63912905 (0x3cf3bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Validity
Not Before: Jan 1 15:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff085c0f81e5f214592ad92e4d0c62abd9d593ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:9f:46:92:5f:bb:44:7b:c2:4f:8a:16:19:
14:ba:66:3f:58:83:f2:8c:93:2d:91:ec:e0:be:82:
c6:e6:27:bf:ea:87:ea:ce:14:7a:d5:c2:82:3c:96:
d2:04:89:a2:90:48:2c:eb:15:ed:c6:eb:76:35:93:
3f:3b:ff:d5:20:b5:42:e5:7a:60:a0:58:c3:77:87:
b0:76:d3:e3:9b:e2:d3:c0:39:2e:e0:85:e2:8a:8c:
9f:df:9b:e0:23:fc:3e:e0:8a:3c:c3:7c:d6:70:3a:
69:71:7a:06:fc:a3:02:13:30:55:8d:30:30:57:54:
12:3e:d4:ff:28:30:6d:75:32:ea:a5:cc:be:43:4f:
22:33:cd:03:37:4d:1e:e8:7c:01:9f:cd:fc:8d:52:
4a:93:fc:3c:04:6a:2b:0e:8b:b6:27:58:16:ba:6c:
36:cd:9d:fd:8c:7a:0c:28:76:76:cc:7d:0a:2b:18:
6c:4d:39:11:30:db:74:a9:10:26:18:3d:e0:6a:c2:
12:44:a6:c1:87:43:7e:b5:f0:d4:52:67:4b:ac:a3:
65:68:c4:86:a4:d0:9f:b2:b2:07:d7:da:86:aa:59:
d9:d6:09:ed:27:11:9c:01:4f:01:9b:44:1a:56:21:
9f:25:d6:c3:46:f3:d6:dc:a7:50:39:c6:4e:b8:e7:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:5C:0F:81:E5:F2:14:59:2A:D9:2E:4D:0C:62:AB:D9:D5:93:AB
X509v3 Authority Key Identifier:
keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_whcD4Hl8hRZKtkuTQxiq9nVk6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.80.0/22
Signature Algorithm: sha256WithRSAEncryption
41:9b:1b:8f:a7:4a:3f:6f:d6:cd:fa:89:04:6b:cc:01:ae:c1:
99:ed:33:ee:16:4c:0d:3c:dc:da:93:f1:c7:9c:d9:a2:cf:26:
08:47:bf:8e:d6:89:b1:4f:15:41:dc:9f:59:41:b4:c0:00:80:
b7:9a:fd:f5:96:f6:00:6a:31:2a:8c:59:2b:97:73:93:b9:7c:
ab:85:3d:0b:f1:a2:6b:b6:9a:5e:4b:f4:ea:03:c5:c6:a6:14:
60:da:7d:0a:52:73:ea:b6:c1:d3:d5:2a:b5:6f:c7:47:c3:bd:
d6:5f:f1:e1:70:cd:8b:29:59:e1:f6:e1:0d:b7:e7:0c:78:70:
e0:79:5e:8d:e1:03:d3:19:77:c0:0d:04:c7:8e:e8:aa:a0:66:
64:1a:28:12:13:f0:cf:a0:3d:d9:d1:f6:ba:58:6b:18:83:59:
ea:89:ac:8a:c6:a5:78:49:37:89:0a:21:65:b6:5b:e7:35:fc:
4a:80:8b:e1:cf:53:5e:39:76:25:fd:f5:9a:f3:3e:e1:c1:cf:
b1:bb:f9:c4:be:81:00:8e:f1:c6:04:83:bb:6c:45:ba:63:a2:
9f:bb:23:42:4c:31:44:2a:8e:b2:98:12:ac:9c:a2:1b:36:a0:
ca:46:88:cd:72:da:12:9f:a4:a5:00:71:17:66:37:cd:e8:39:
b0:60:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org