Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/h-28b8tBBNj1jOgW94ZfUMkrIxI.roa
File: h-28b8tBBNj1jOgW94ZfUMkrIxI.roa (raw, json)
Hash identifier: 9Ll6vhcTyqyTkeJGa5O3sLzQHWoSThm1/VlPJwKuDa4=
Subject key identifier: 87:ED:BC:6F:CB:41:04:D8:F5:8C:E8:16:F7:86:5F:50:C9:2B:23:12
Certificate issuer: /CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Certificate serial: 0F81
Authority key identifier: 4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/h-28b8tBBNj1jOgW94ZfUMkrIxI.roa
Signing time: Sun 08 May 2022 18:46:46 +0000
ROA not before: Sun 08 May 2022 18:46:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31725
IP address blocks: 91.201.240.0/23 maxlen: 23
91.201.240.0/22 maxlen: 22
91.201.242.0/23 maxlen: 23
188.190.64.0/19 maxlen: 19
109.95.32.0/22 maxlen: 22
109.95.32.0/21 maxlen: 21
195.62.15.0/24 maxlen: 24
195.62.14.0/23 maxlen: 23
195.62.14.0/24 maxlen: 24
2001:67c:176c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3969 (0xf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Validity
Not Before: May 8 18:46:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87edbc6fcb4104d8f58ce816f7865f50c92b2312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:68:65:58:30:e9:b0:8f:8f:eb:cf:3b:75:
c5:a3:35:ec:f4:df:40:50:5a:d3:ab:27:11:e8:3d:
e8:aa:cd:1f:e6:50:ef:e9:dc:c4:5b:13:78:2f:dd:
f6:14:88:08:3b:ca:d2:9e:90:e6:cc:05:6d:21:94:
bc:2a:18:5c:25:a8:61:b8:d3:f0:ef:1e:35:8d:01:
b7:ae:5c:88:ad:d6:61:ba:f2:f2:70:63:6f:fb:ad:
80:d3:a5:47:0f:95:96:88:72:54:a9:e5:fe:98:39:
47:7b:c8:34:3e:9c:9b:3d:f4:16:05:93:b1:e3:75:
1d:69:ed:fc:55:74:12:b5:8f:3b:db:cc:14:4c:15:
fe:28:44:53:29:2f:55:84:fe:92:cb:bf:a5:7c:6a:
94:e4:3b:30:6d:6e:6e:bf:bc:59:0d:1f:84:e7:08:
ef:73:b2:1c:b8:0c:da:f3:4a:c3:5e:4a:fc:5c:89:
70:37:54:5d:97:b4:da:89:08:27:c3:c1:7e:43:7c:
c7:0d:77:46:88:43:fc:f3:0c:b2:a2:35:30:29:ca:
44:e8:1c:4f:32:f4:de:80:9c:e8:a8:1c:d1:ee:f5:
32:58:1d:18:52:d8:d2:b2:11:fd:4f:41:60:85:36:
94:d7:07:16:c6:7b:f6:14:7f:04:27:57:7e:0e:ab:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:BC:6F:CB:41:04:D8:F5:8C:E8:16:F7:86:5F:50:C9:2B:23:12
X509v3 Authority Key Identifier:
keyid:4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/h-28b8tBBNj1jOgW94ZfUMkrIxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.240.0/22
109.95.32.0/21
188.190.64.0/19
195.62.14.0/23
IPv6:
2001:67c:176c::/48
Signature Algorithm: sha256WithRSAEncryption
6b:2d:ea:68:82:4f:76:20:6e:0b:31:74:84:ca:e3:58:b7:07:
5a:17:b4:83:e2:3a:17:bd:89:11:ec:e3:a5:ee:dc:f1:91:b0:
70:7b:17:f2:7c:be:dd:77:8c:5a:f6:87:ff:d0:f6:98:f4:c6:
a7:64:c8:4f:8e:a7:63:8a:6f:b9:ae:28:a2:c8:cd:ee:f2:14:
ef:56:a0:1b:60:fb:81:18:6b:eb:5b:18:7a:5f:b8:cf:77:1d:
de:cc:96:2b:cc:87:c5:42:6c:4b:db:35:08:af:4c:8f:d6:57:
33:48:6e:12:fa:59:3a:5a:1c:d2:4c:0c:86:80:7d:fa:5d:3d:
48:be:9b:bf:89:77:74:e9:d2:d2:ab:f0:33:8d:45:11:38:80:
ae:bc:18:c0:92:39:9b:7e:0f:90:9f:7a:31:4a:e2:82:61:2a:
3e:fe:7b:91:1a:09:3c:58:18:ae:1e:ac:d4:ba:40:dd:92:2e:
d7:37:1b:a8:c4:df:1b:5e:9e:32:b0:70:0b:ef:00:68:9a:56:
32:06:e0:14:84:d0:a0:43:b8:47:11:8a:2f:ef:94:d3:a7:65:
4f:9a:46:8f:65:cb:a2:a1:2d:77:0d:bc:68:57:51:c1:5d:97:
54:68:de:01:b8:8b:9c:29:56:06:ac:0a:cb:de:ec:ee:77:24:
41:51:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:50 2023 by rpki-client on console-fra.rpki-client.org