Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/prmBRHfUzokpKa0Z804DC2JPd9w.roa
File: prmBRHfUzokpKa0Z804DC2JPd9w.roa (raw, json)
Hash identifier: bhRqY/rO53HeRNBcEH0ZwFOYCSzlPTPs9au8xdY1kYM=
Subject key identifier: A6:B9:81:44:77:D4:CE:89:29:29:AD:19:F3:4E:03:0B:62:4F:77:DC
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 04E9A273
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/prmBRHfUzokpKa0Z804DC2JPd9w.roa
Signing time: Sat 01 Jan 2022 16:11:10 +0000
ROA not before: Sat 01 Jan 2022 16:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39077
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82420339 (0x4e9a273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jan 1 16:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6b9814477d4ce892929ad19f34e030b624f77dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:cc:12:c9:bb:64:81:7f:5b:9f:ea:c9:f2:
c7:05:02:d6:26:e9:7c:45:50:44:b8:92:78:8f:a8:
cd:c2:57:90:59:74:e1:33:39:29:13:b8:68:b2:8d:
69:95:6d:0d:cf:8e:90:7d:0f:1a:76:bd:1d:63:89:
46:cd:38:e7:91:20:bc:79:d5:d6:be:66:27:19:bb:
21:d3:46:03:d8:cb:a1:4c:3c:6b:83:26:7b:a9:de:
2c:6e:9f:93:72:45:28:5d:41:3f:f9:25:86:44:04:
ce:70:7a:3a:40:59:55:a5:0d:77:c0:ba:47:bf:28:
9d:7e:dc:f2:b4:49:fa:e1:cb:13:8c:92:a9:9b:67:
89:98:2f:d7:7c:12:cf:81:70:9a:f6:aa:64:35:7d:
16:b0:b3:37:bf:a7:a5:91:d1:cf:85:de:2e:a3:1b:
fe:03:e4:9c:c6:5c:ad:2f:6c:79:7d:91:f0:42:50:
4d:b9:1e:cd:f8:34:9d:4c:0f:d5:11:be:a9:54:b8:
04:e3:57:44:45:4b:c9:c0:14:5d:36:6e:d6:0f:65:
2f:22:54:e2:ff:47:30:ab:89:39:b6:87:3b:7c:e0:
2c:03:34:ff:b6:b9:39:37:72:00:4b:b7:06:e9:33:
73:35:92:ad:31:2f:a5:46:87:83:c4:68:a5:ab:da:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:81:44:77:D4:CE:89:29:29:AD:19:F3:4E:03:0B:62:4F:77:DC
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/prmBRHfUzokpKa0Z804DC2JPd9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e6:6e:5c:6c:fd:d9:b5:21:36:11:9a:a0:1c:91:91:b3:b1:
35:1c:e2:4d:c1:09:d7:a0:2a:07:c0:3b:3e:e9:de:9f:49:a6:
83:5c:78:cc:a3:da:c5:6d:58:5d:b1:f4:99:f7:59:23:37:77:
65:eb:94:01:7d:ea:dd:8f:9e:ec:42:34:f1:cd:41:a9:67:8c:
90:10:95:f8:7a:f9:d4:59:94:0a:2a:8e:58:82:0c:47:3e:3f:
55:93:28:6f:fc:56:63:68:b2:45:07:f4:62:d2:a9:95:8e:16:
05:50:6a:14:a2:c3:f3:14:74:cf:0b:98:5b:10:8e:2e:7d:30:
c4:68:00:07:40:24:d3:8e:a5:8c:8a:e9:91:0c:02:2f:1c:f6:
91:fe:f9:44:9f:85:79:4e:f8:32:ca:45:83:7d:d0:7f:71:94:
cc:31:9a:e2:58:da:b2:78:da:c9:8a:36:aa:10:c9:ba:6a:19:
2a:9f:9b:12:4e:fd:f1:9b:9f:e1:de:dc:03:4e:ce:28:e8:aa:
92:9d:17:e7:a9:1a:cd:a5:70:62:25:c8:bb:5b:54:9a:56:11:
2c:80:c9:33:67:d5:10:1e:20:8c:a0:d6:20:b0:e4:98:d9:4a:
61:9e:06:33:d5:fe:9f:35:04:d2:ab:f9:e0:4b:f7:b1:25:6e:
67:2b:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:47 2023 by rpki-client on console-ams.rpki-client.org