Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/7eOeWquXq87lYif_vQ12ONOTa_Q.roa
File: 7eOeWquXq87lYif_vQ12ONOTa_Q.roa (raw, json)
Hash identifier: NOOt34m5oKgBBajRV4I7Crzmo7H6FOpydL+kgFMFMVI=
Subject key identifier: ED:E3:9E:5A:AB:97:AB:CE:E5:62:27:FF:BD:0D:76:38:D3:93:6B:F4
Certificate issuer: /CN=c88e938eb4ae59c218f4e6e801d735c1251b7e45
Certificate serial: 014D9C
Authority key identifier: C8:8E:93:8E:B4:AE:59:C2:18:F4:E6:E8:01:D7:35:C1:25:1B:7E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yI6TjrSuWcIY9OboAdc1wSUbfkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/7eOeWquXq87lYif_vQ12ONOTa_Q.roa
Signing time: Thu 06 Jan 2022 21:00:58 +0000
ROA not before: Thu 06 Jan 2022 21:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203004
IP address blocks: 91.199.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85404 (0x14d9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88e938eb4ae59c218f4e6e801d735c1251b7e45
Validity
Not Before: Jan 6 21:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ede39e5aab97abcee56227ffbd0d7638d3936bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:67:3e:41:d5:60:20:da:b0:95:89:19:48:
2b:98:39:60:de:56:84:9c:96:39:c8:d0:b1:cd:23:
c4:fc:24:f2:ea:79:b5:ed:09:dc:31:aa:d2:0b:63:
ad:38:7f:6f:3b:3f:89:8c:f4:8f:90:e6:ae:fa:3b:
9f:3c:77:60:aa:5e:d8:a2:6b:ac:16:53:e5:34:30:
07:52:19:94:11:6f:73:5f:a5:f6:2d:00:9c:c4:16:
e1:de:2e:57:de:90:ee:89:83:9f:ff:4e:c9:59:0e:
ae:ba:92:d1:69:5b:60:21:79:ba:7a:67:3b:28:1b:
81:36:d6:8d:a4:34:5d:b5:88:e7:0c:97:32:ba:20:
47:95:bc:81:80:68:14:a3:70:87:5a:e1:ec:6a:7a:
ab:fb:19:76:bb:66:55:9c:17:45:6c:65:e6:cf:81:
ac:8a:db:9c:f7:a8:ef:da:ff:65:91:51:3a:b5:25:
a0:7e:8f:af:11:99:05:a1:fe:74:06:58:ea:ab:a4:
0c:5a:34:21:11:72:f3:fe:99:7c:35:5d:f0:45:7f:
3c:25:60:f6:f2:a0:81:95:ca:4d:be:df:d5:86:70:
10:38:2e:08:6e:9f:e4:a5:b6:88:6c:56:3f:6f:ec:
41:8c:4d:90:4e:09:91:ca:1a:48:8f:7d:78:11:aa:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:9E:5A:AB:97:AB:CE:E5:62:27:FF:BD:0D:76:38:D3:93:6B:F4
X509v3 Authority Key Identifier:
keyid:C8:8E:93:8E:B4:AE:59:C2:18:F4:E6:E8:01:D7:35:C1:25:1B:7E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yI6TjrSuWcIY9OboAdc1wSUbfkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/7eOeWquXq87lYif_vQ12ONOTa_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/yI6TjrSuWcIY9OboAdc1wSUbfkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:92:d1:a3:18:ad:fa:f0:2d:48:ac:9a:9f:5a:e1:99:8b:51:
8f:61:01:5f:ae:c0:b7:7e:e9:b0:18:a3:88:c5:a4:87:f7:45:
52:71:08:0c:92:bd:44:a5:05:f3:36:46:39:24:ae:3d:3e:06:
6e:c7:2b:a7:2e:f2:8f:79:ae:8e:3b:d4:78:ab:59:6c:b0:34:
61:2b:c2:e2:6d:d9:d1:c1:64:fe:1a:83:38:2b:7b:70:64:41:
e7:ec:35:17:31:fd:fe:3d:5a:da:d2:1a:36:60:2b:f2:c2:cf:
8e:3c:02:83:d6:2f:c2:07:94:78:33:e7:c9:df:19:b3:67:47:
80:95:ef:9f:97:35:b4:4c:fe:5c:24:c5:b1:05:45:1c:b7:0e:
fe:51:8c:1e:80:fc:0b:ca:97:a5:04:e6:c5:02:20:49:57:94:
d5:a8:aa:92:9a:e7:f7:44:a5:22:34:aa:33:56:72:e6:7a:10:
17:ae:52:46:b7:ec:e1:f5:9d:3d:a4:2f:93:d9:16:59:08:8f:
e6:17:f2:a6:23:ed:8e:4c:39:23:d2:8f:19:f1:f9:89:a2:3f:
bd:9f:5f:58:b4:a9:7c:14:00:cb:86:c6:b9:a3:13:ff:58:56:
9a:ab:5a:25:d0:5e:05:4d:eb:3a:d7:f7:1a:ae:2b:c2:7c:e7:
96:6e:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-ams.rpki-client.org