Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/1rjioTLLlHOUBev1ixrTdJfEAJ8.roa
File: 1rjioTLLlHOUBev1ixrTdJfEAJ8.roa (raw, json)
Hash identifier: KrYuGWSjRTqZhk2H40XTrw1iEn0XTilmYnPt0UN9wrY=
Subject key identifier: D6:B8:E2:A1:32:CB:94:73:94:05:EB:F5:8B:1A:D3:74:97:C4:00:9F
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 5018
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/1rjioTLLlHOUBev1ixrTdJfEAJ8.roa
Signing time: Fri 29 Apr 2022 12:47:58 +0000
ROA not before: Fri 29 Apr 2022 12:47:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43418
IP address blocks: 91.197.49.0/24 maxlen: 24
91.197.50.0/24 maxlen: 24
91.197.51.0/24 maxlen: 24
91.197.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20504 (0x5018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Apr 29 12:47:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6b8e2a132cb94739405ebf58b1ad37497c4009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:3c:71:94:79:c2:ec:f6:1e:14:e2:e2:89:
10:ff:42:a3:8f:16:a6:2b:e4:63:b5:58:22:7b:dc:
fe:1c:d4:e4:bd:2c:08:90:18:89:e6:0f:fd:4e:f4:
1d:a2:9a:8a:45:6e:e3:3d:9b:14:8e:f2:85:19:ad:
9a:e4:dd:22:62:00:f3:60:3c:61:46:48:35:19:25:
f0:80:42:c5:f4:95:72:9a:bd:01:cb:bd:94:7f:7c:
bf:33:fc:72:94:6f:a6:3e:e5:d0:74:2a:84:0c:6a:
6d:6c:01:02:ba:03:2c:63:b6:66:bd:29:de:be:ce:
4d:e0:b0:96:05:d6:72:fa:1a:77:fc:70:97:00:ab:
7b:73:4c:30:f7:1a:0f:98:09:5f:d9:cd:a3:6a:de:
30:0e:a4:47:9e:41:2d:39:3f:00:b4:c5:e6:e3:8e:
08:6f:43:c9:e6:38:58:e8:af:12:93:1d:93:d7:a3:
e3:b4:d6:de:c2:ca:84:6d:b4:ad:ed:4e:bf:b7:80:
50:c9:44:91:a3:78:34:5d:6a:3d:d4:4c:67:2c:b7:
56:c5:b9:ae:9d:ce:ca:af:f9:66:c4:81:7c:da:45:
7b:60:90:fa:84:00:37:7f:97:7c:24:7a:9a:80:cb:
f6:00:40:bd:fb:76:d0:49:43:95:b2:21:c4:de:2c:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:E2:A1:32:CB:94:73:94:05:EB:F5:8B:1A:D3:74:97:C4:00:9F
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/1rjioTLLlHOUBev1ixrTdJfEAJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.48.0/22
Signature Algorithm: sha256WithRSAEncryption
80:29:21:89:e2:77:f1:b5:75:19:68:d3:f1:40:c5:e7:0d:30:
65:30:ed:b5:c4:a7:de:c1:68:de:29:f9:dd:86:ad:7c:03:c7:
16:ae:ad:76:3b:a1:d3:77:2f:62:06:3e:1a:1f:cc:ae:8d:a7:
41:43:ec:34:b4:00:26:ce:82:21:4f:ff:93:25:56:ec:c5:ad:
21:7e:cb:5e:a8:b9:7f:b9:8e:43:f8:60:7b:f2:da:2b:54:5f:
ad:b1:08:f2:92:39:5d:8f:14:86:70:51:12:e3:f2:44:3b:f5:
9e:90:ab:32:46:d5:93:28:8c:97:94:b1:84:84:5d:23:67:8c:
6e:1a:e7:6b:95:cf:c5:2f:17:84:55:76:74:ed:92:54:08:22:
fb:31:58:58:03:d8:6d:b9:15:c1:1d:47:fe:d3:41:b3:fc:e0:
d5:45:55:21:f5:b7:83:08:e8:bc:a0:e1:14:f2:1d:80:a9:b0:
b6:9c:9c:65:3e:f3:24:da:24:41:80:55:e5:09:86:0f:27:32:
f8:ad:61:0d:78:f3:6a:aa:e9:56:ae:65:bb:d8:14:50:e3:c0:
26:4a:de:85:31:70:37:ad:0c:7e:c8:20:8e:cb:8f:ca:b1:9b:
d6:fb:97:f3:4e:c9:ab:91:bc:41:64:97:03:c1:9a:78:84:34:
c5:26:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:56 2023 by rpki-client on console-fra.rpki-client.org