Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/mc35h8v2WnTysQxBjVhqi7-wRlc.roa
File: mc35h8v2WnTysQxBjVhqi7-wRlc.roa (raw, json)
Hash identifier: JWItpm5jPYBZlHTKzdiJM91ctr/l7vgpPWcm6Bk4OyE=
Subject key identifier: 99:CD:F9:87:CB:F6:5A:74:F2:B1:0C:41:8D:58:6A:8B:BF:B0:46:57
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 050F83
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/mc35h8v2WnTysQxBjVhqi7-wRlc.roa
Signing time: Tue 26 Apr 2022 14:57:33 +0000
ROA not before: Tue 26 Apr 2022 14:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31424
IP address blocks: 91.202.120.0/22 maxlen: 22
2001:67c:2e38::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331651 (0x50f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Apr 26 14:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99cdf987cbf65a74f2b10c418d586a8bbfb04657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:f9:e2:40:ae:f8:7d:77:a2:4e:c6:a2:80:
37:40:03:77:c8:a3:c0:4d:c6:5d:41:1f:1b:d7:9d:
a7:ad:23:ef:59:83:d3:5e:56:a2:4d:30:28:58:ff:
e2:ab:63:67:af:d7:d2:79:76:1a:05:4a:17:45:8f:
49:5c:da:9f:23:6e:93:1e:52:53:61:5b:43:84:64:
4b:62:c1:31:85:73:8c:2d:b9:7b:2c:bd:60:cb:ad:
ee:27:31:fb:d8:26:29:a8:76:07:b1:04:ba:73:27:
6a:1e:43:bd:e4:7b:90:aa:1c:f3:42:f2:b4:b6:a6:
1d:2e:fc:c0:4f:da:24:ba:c5:a6:1a:4e:89:0d:c2:
eb:9c:3f:32:3b:cd:0a:f2:59:cb:03:ed:6e:10:85:
46:3d:d1:00:bb:eb:e7:09:57:2a:1b:63:46:b3:5d:
e4:44:d0:30:74:43:f0:b7:8e:b2:b2:18:90:24:7c:
b2:84:62:ca:d0:de:96:68:2c:99:41:a8:b7:c8:78:
bc:f9:b3:97:96:1c:ec:5b:ef:03:86:0b:ee:7a:5a:
d2:d2:1d:36:be:cc:49:94:8b:1b:5b:75:94:94:d6:
0a:87:7c:75:76:7b:cb:86:00:6d:35:47:86:c6:48:
66:5c:3e:06:7c:fc:98:8b:37:94:f3:ca:f4:92:75:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:F9:87:CB:F6:5A:74:F2:B1:0C:41:8D:58:6A:8B:BF:B0:46:57
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/mc35h8v2WnTysQxBjVhqi7-wRlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.120.0/22
IPv6:
2001:67c:2e38::/48
Signature Algorithm: sha256WithRSAEncryption
85:1d:ee:8e:bb:be:b3:4c:46:e8:fb:7c:c9:1c:1a:fa:d5:79:
af:57:06:a1:9a:36:76:55:91:15:ff:09:68:bb:f6:21:de:f5:
1d:b8:1a:3b:c7:09:2d:9e:78:64:6a:5c:da:97:71:6e:03:8c:
52:18:95:fc:d1:cf:a7:09:01:50:d5:0a:bf:03:ab:17:60:55:
9a:4e:31:b8:f6:83:e4:f3:52:13:70:ba:35:eb:cd:b5:a3:cc:
72:e8:4c:93:21:8c:64:32:50:51:90:ce:18:30:f8:07:72:e1:
ca:82:0d:4d:87:1b:43:8b:34:8b:67:02:2b:7c:37:64:c6:ad:
c8:c2:89:2d:f1:42:d6:0e:54:1d:7d:cf:bf:c8:a1:8e:8a:22:
c4:1d:70:f8:47:43:9a:d5:0d:fd:ef:35:4e:bd:e1:06:a1:3d:
d9:86:04:da:d2:38:d8:93:42:e0:0a:58:e8:8d:4e:ee:51:7c:
cf:14:0f:ca:a1:c7:3e:12:a2:54:ae:79:1a:d8:16:7d:ff:6e:
29:a5:92:75:fb:cf:d4:c7:27:71:b2:59:f7:34:fc:ef:92:75:
5f:fc:e0:fd:d6:d3:93:e9:41:fc:7a:22:ce:17:ce:77:ef:5c:
b1:6b:4e:a1:e6:e9:49:7a:9c:75:b1:31:1d:33:91:a9:21:b3:
0e:dc:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org