Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/obTk0m07vtlcLPmX4D08WCWRBt8.roa
File: obTk0m07vtlcLPmX4D08WCWRBt8.roa (raw, json)
Hash identifier: W73LiozkVb5mc3WTujw1xjirkZdSNSQjFVmXbH9Rox0=
Subject key identifier: A1:B4:E4:D2:6D:3B:BE:D9:5C:2C:F9:97:E0:3D:3C:58:25:91:06:DF
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 01830D929BAC86253A9ADA4E370F7D09DE3D
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/obTk0m07vtlcLPmX4D08WCWRBt8.roa
Signing time: Mon 05 Sep 2022 12:14:15 +0000
ROA not before: Mon 05 Sep 2022 12:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199939
IP address blocks: 91.220.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:92:9b:ac:86:25:3a:9a:da:4e:37:0f:7d:09:de:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Sep 5 12:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1b4e4d26d3bbed95c2cf997e03d3c58259106df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:77:61:6f:16:48:26:56:0c:8b:30:32:13:
dc:f4:fb:67:15:74:58:b2:c3:dd:be:69:8b:6d:45:
98:81:5d:b4:91:5f:c8:1a:42:c1:aa:45:81:bf:24:
08:34:52:58:d4:60:96:88:78:2b:87:e4:3b:89:01:
23:4b:16:87:e4:58:a2:d8:f7:16:69:4b:52:92:40:
83:ca:e6:c0:ca:f3:22:c1:a8:29:5a:7a:96:b3:91:
2d:ba:ec:fc:58:e3:e8:04:55:c0:5f:b8:7a:b2:26:
96:45:bd:41:33:36:84:84:47:57:d1:6d:6c:ad:01:
15:a5:ba:e4:8a:0c:8f:ec:8c:db:fc:d8:2b:ef:73:
4b:81:04:9d:35:b3:91:f5:12:cc:1c:f3:fc:2c:4b:
32:35:63:d7:65:a1:bc:dc:88:8d:79:ba:f8:28:4e:
97:d3:63:e2:b4:56:02:ad:39:19:1b:20:91:48:6c:
c3:6b:0a:8a:1f:40:23:a3:69:03:e9:97:dd:c1:43:
58:a1:e7:8a:28:e1:b0:4b:29:33:06:11:f7:27:7f:
de:d9:eb:dd:dd:8e:1a:46:a8:a2:62:1e:44:80:2f:
be:f9:ae:51:71:04:4a:7e:98:af:df:34:8c:b1:18:
9a:ac:06:63:fa:70:c1:be:81:0d:93:6d:6b:88:be:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:E4:D2:6D:3B:BE:D9:5C:2C:F9:97:E0:3D:3C:58:25:91:06:DF
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/obTk0m07vtlcLPmX4D08WCWRBt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.30.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6d:5c:a6:42:10:8c:91:7d:45:7f:17:07:c6:02:09:89:d6:
6a:4b:be:be:a0:bd:1d:14:3a:51:db:82:cb:12:f6:9d:63:d0:
35:6b:de:55:00:d5:17:df:4d:e6:32:d1:86:a1:12:54:de:ec:
4d:ea:e0:4b:89:70:79:8b:03:c4:47:4a:2e:f6:b5:86:bc:7c:
27:00:a5:74:22:f2:c6:d5:63:9f:ea:1c:ef:ae:a9:95:03:a1:
de:f3:28:a7:a8:23:00:6e:b7:50:2c:ba:07:16:c2:e3:30:f8:
af:ed:50:86:b4:b6:da:12:81:66:ef:33:5f:2d:09:be:19:b1:
64:62:62:9b:3d:f0:69:35:4c:6d:06:fd:56:af:69:3a:c8:5d:
21:08:e0:ff:e4:d6:7a:9b:2d:ac:b2:94:af:3d:a4:b4:77:96:
35:6b:ea:30:c2:e6:5f:05:dd:0e:ff:95:16:de:40:27:63:a5:
06:34:32:e4:fb:82:3a:26:9c:60:96:4c:b9:c6:7a:ae:28:fe:
b6:52:ff:e3:62:38:0a:66:ac:ef:ed:8e:16:35:fb:7d:5a:a1:
48:ac:6b:d2:2e:68:f8:01:e7:f4:6d:50:2a:bd:39:3b:eb:a4:
52:a0:1a:3e:2d:63:72:4f:89:8c:29:87:e4:b9:52:d1:89:46:
91:fe:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:22 2024 by rpki-client on console-fra.rpki-client.org