Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/RdavrBHs3gqAG_tqnCm6KCBA0nM.roa
File: RdavrBHs3gqAG_tqnCm6KCBA0nM.roa (raw, json)
Hash identifier: Fw+U7IoyB59zvMXO2JXPv/eAPWPoGBPIpZaK8yQ8/Cg=
Subject key identifier: 45:D6:AF:AC:11:EC:DE:0A:80:1B:FB:6A:9C:29:BA:28:20:40:D2:73
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 04E8CE08
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/RdavrBHs3gqAG_tqnCm6KCBA0nM.roa
Signing time: Sat 01 Jan 2022 16:11:10 +0000
ROA not before: Sat 01 Jan 2022 16:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82365960 (0x4e8ce08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jan 1 16:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45d6afac11ecde0a801bfb6a9c29ba282040d273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:bc:6b:57:8b:9b:d0:98:87:4a:6f:be:87:
94:f5:c6:3f:d7:20:4f:4b:8a:e4:57:82:c8:91:fc:
9c:5c:c5:f8:3f:10:c9:42:33:24:36:c2:49:0d:64:
2e:b0:e3:40:e6:22:c4:08:d8:ba:09:ee:1e:9d:fa:
bb:2c:6b:21:73:8a:89:94:15:06:32:95:73:fb:89:
f0:16:c5:73:6b:4b:4d:24:2b:87:dc:01:3a:47:bd:
9f:d5:c7:f2:32:fe:38:91:eb:48:95:44:31:70:67:
b4:dc:40:9c:3d:56:b6:70:62:55:0f:a4:67:9d:58:
9c:99:9d:67:24:a2:07:65:87:39:b7:b6:c6:ff:7c:
d8:55:2b:d0:82:a9:8b:55:0b:97:3a:99:ad:83:18:
39:19:9d:ed:13:61:25:8f:e7:7a:2a:b5:dc:2a:c7:
b7:a4:e2:21:0f:e9:3f:f5:93:56:b0:c3:57:eb:b5:
28:99:eb:cb:11:d3:51:2f:16:9d:c1:de:5f:c3:55:
0e:af:be:6d:bb:fe:c7:cf:c9:e9:f4:d6:9a:04:23:
b1:22:70:20:1b:3d:d5:a6:75:36:cb:d3:ef:10:1c:
37:b3:01:e0:51:c9:44:56:af:20:96:de:df:da:19:
61:4e:f5:a6:bc:72:8f:40:b4:5a:5e:21:f9:fc:55:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D6:AF:AC:11:EC:DE:0A:80:1B:FB:6A:9C:29:BA:28:20:40:D2:73
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/RdavrBHs3gqAG_tqnCm6KCBA0nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:da:e7:61:cc:5e:f8:33:7c:5b:37:77:04:72:29:de:d2:fc:
fd:43:9b:1a:b1:7e:0c:df:2b:0c:cb:28:07:91:ba:b2:c0:cf:
74:92:d2:00:ca:94:76:bd:9f:11:9d:8f:95:86:f2:dd:b1:a8:
61:aa:4b:64:7f:c5:91:79:4e:8e:91:1a:67:57:07:01:e9:e2:
17:d5:8f:04:76:a6:9f:8c:75:3f:51:d8:f5:b4:97:0e:cc:6f:
14:4a:34:36:ef:af:17:d2:a5:43:b3:7d:63:3e:97:f8:76:b1:
74:79:26:63:e7:10:13:2b:70:40:cb:07:66:ce:6c:a9:98:d9:
fb:db:68:01:55:4b:3c:4d:ec:af:fd:7c:ff:d4:07:c8:34:9f:
69:02:e0:43:c9:33:d0:a9:0f:f3:1a:cb:6a:54:4a:16:ee:37:
57:1d:b2:2b:b1:9c:a2:b9:c5:cd:a2:d2:39:81:52:c2:78:f4:
a0:cb:53:68:bd:72:5f:0b:9d:ad:94:31:d2:3d:d2:5b:a7:27:
d5:2f:a8:8a:9f:40:2c:f9:d6:f3:38:b7:8a:0c:6d:30:68:74:
87:2b:ce:71:37:3d:e4:fe:e2:e8:46:15:3b:33:e1:d5:c7:66:
b0:81:c2:61:cb:de:f4:17:3a:77:e2:77:3c:48:08:6c:c9:c5:
26:a9:8a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:52 2023 by rpki-client on console-fra.rpki-client.org