Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/9eqI-jR1Zq2LueHWv7VaGy3FUGU.roa
File: 9eqI-jR1Zq2LueHWv7VaGy3FUGU.roa (raw, json)
Hash identifier: lGTgNCNXUJRKeL/ytB4Z7D47qDM5X9fLO1HDooi8lr8=
Subject key identifier: F5:EA:88:FA:34:75:66:AD:8B:B9:E1:D6:BF:B5:5A:1B:2D:C5:50:65
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0183EE2D06BD59C24A736E0F58DFD4578A7F
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/9eqI-jR1Zq2LueHWv7VaGy3FUGU.roa
Signing time: Wed 19 Oct 2022 02:57:51 +0000
ROA not before: Wed 19 Oct 2022 02:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203545
IP address blocks: 91.148.126.0/23 maxlen: 24
62.108.100.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:2d:06:bd:59:c2:4a:73:6e:0f:58:df:d4:57:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Oct 19 02:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ea88fa347566ad8bb9e1d6bfb55a1b2dc55065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:59:8a:cf:8b:8b:6a:01:e8:ed:8f:1d:d8:
12:b0:94:12:11:38:63:8d:ff:3d:b0:37:be:d0:c6:
15:a5:62:e8:ef:7d:1f:a9:6a:9c:15:96:32:5d:7d:
28:cf:51:ca:5d:48:69:ca:5c:73:75:dd:30:6b:d0:
11:5b:b3:ec:ff:a6:db:b0:ca:d8:38:4f:1b:13:cd:
d2:d2:08:1a:b1:ce:2c:c0:92:0b:53:ea:b8:10:6d:
6b:21:17:07:7a:ab:c4:07:9e:ba:4d:7e:45:88:04:
7d:af:c8:93:c3:d0:84:89:3b:70:c4:6c:0d:a2:15:
79:ea:4d:8f:37:00:a9:e1:9c:b7:7c:52:fd:2d:5a:
2b:35:fa:45:77:82:cb:24:2f:4c:12:8e:b6:c4:58:
df:b5:43:90:20:9c:78:f4:be:e9:49:5a:46:11:f2:
be:81:b2:4c:23:2f:5a:d5:5f:e5:df:7f:53:a1:b7:
61:0b:58:dc:99:e6:98:b5:5b:10:38:00:e8:ac:fb:
9b:54:db:2f:37:35:0b:31:3c:43:83:2b:7b:7c:63:
9d:33:ac:cb:77:fc:d7:e4:a5:3c:4d:b2:4d:da:8b:
c9:47:62:33:aa:25:de:3d:ff:cb:99:aa:9e:f3:31:
20:87:32:4d:bc:d0:24:16:d5:72:86:f0:6e:5d:a3:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:88:FA:34:75:66:AD:8B:B9:E1:D6:BF:B5:5A:1B:2D:C5:50:65
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/9eqI-jR1Zq2LueHWv7VaGy3FUGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.100.0/23
91.148.126.0/23
Signature Algorithm: sha256WithRSAEncryption
16:f5:e1:a8:c7:3f:4b:a5:10:5c:f7:88:54:ca:10:4f:99:2f:
bf:7d:cf:c4:a0:93:b3:e1:6b:5c:44:76:4e:51:6f:93:68:05:
b8:32:c7:6c:12:0a:aa:2a:3d:ae:c5:fe:29:b0:3b:c6:d0:4e:
21:a9:f0:d8:15:5a:d6:49:01:7d:83:c2:92:1c:33:84:a1:15:
20:c1:c2:30:ca:85:bd:a4:a5:22:d6:28:97:48:c7:c0:f0:2a:
7e:70:a4:20:36:e5:12:3c:5c:08:9d:09:ee:07:87:56:d9:c5:
bb:f9:a4:7c:6a:68:2f:41:66:5c:4b:36:79:b9:47:b2:eb:72:
63:44:ec:9f:9b:89:ed:66:6b:16:fb:3b:6e:d1:3e:e8:b7:00:
1c:8b:ea:77:fa:a5:46:2d:20:18:d4:77:76:50:3e:1a:3f:22:
43:cd:67:4c:35:e6:64:f2:a4:ea:57:d7:09:83:0b:30:df:64:
95:b1:e8:e0:1a:ef:4f:20:46:7a:0c:49:8a:02:ef:38:9f:9a:
95:94:55:ae:ee:fc:67:73:8b:62:30:b2:dd:60:da:6f:5e:9e:
3c:f4:fe:d3:1a:0b:aa:c2:21:8c:89:7e:71:b9:75:13:dc:38:
b1:ee:df:2e:fe:ad:bc:ec:61:36:a2:0a:28:61:08:7b:a3:ed:
9b:c6:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:24 2023 by rpki-client on console-ams.rpki-client.org