Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/9j4OCIzmNbIjXCQGTX5H-wzBm6g.roa
File: 9j4OCIzmNbIjXCQGTX5H-wzBm6g.roa (raw, json)
Hash identifier: fbqKc+Yy2fxUwPn1XdQFWeGJLvnMIagstgVoPbooxIw=
Subject key identifier: F6:3E:0E:08:8C:E6:35:B2:23:5C:24:06:4D:7E:47:FB:0C:C1:9B:A8
Certificate issuer: /CN=496a77608f1f4472f6fc30273c5560e967caf273
Certificate serial: B50ACC
Authority key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/9j4OCIzmNbIjXCQGTX5H-wzBm6g.roa
Signing time: Sat 01 Jan 2022 05:52:03 +0000
ROA not before: Sat 01 Jan 2022 05:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 91.246.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11864780 (0xb50acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496a77608f1f4472f6fc30273c5560e967caf273
Validity
Not Before: Jan 1 05:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f63e0e088ce635b2235c24064d7e47fb0cc19ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:1d:66:86:f6:89:31:d9:c2:56:a3:aa:ac:
68:3b:b3:ef:88:4a:32:f8:79:02:0d:a4:71:28:df:
a0:6f:07:a1:44:ee:ac:0e:25:e2:5b:49:59:bb:c4:
5c:3b:68:0c:73:b3:23:96:f0:99:ca:58:c5:2b:21:
d6:13:2b:aa:3a:14:3d:97:b4:a7:dd:75:21:36:ae:
e0:5d:3b:9d:37:4f:90:82:2d:a2:c2:00:7c:cb:5d:
33:6d:f4:35:c1:17:89:82:77:80:f2:4c:3f:4e:28:
92:5a:21:52:f8:31:a5:28:ba:8e:ac:4d:d0:50:1e:
1d:30:9e:91:2e:01:d7:67:a3:f0:f3:60:ab:36:ad:
d0:45:99:f5:41:1a:74:d5:00:64:af:d2:5c:07:1a:
4f:1a:09:76:60:0e:4e:10:60:4b:e6:6e:4a:58:9a:
e9:a7:ef:41:a1:ad:68:71:1e:c1:0d:93:ec:fb:2a:
f4:8e:e8:b3:bf:91:0a:0b:d0:f8:49:62:51:6d:9e:
15:31:c9:c7:ba:0c:a4:9c:ab:94:ad:bd:c1:99:d5:
96:10:09:a5:4e:28:60:6d:5b:2b:bc:5e:44:76:c3:
3d:2b:5a:00:a8:dc:f9:ac:e7:02:c9:b9:76:8d:da:
20:6d:eb:ed:23:eb:02:0b:e7:b0:aa:38:4e:e1:98:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:0E:08:8C:E6:35:B2:23:5C:24:06:4D:7E:47:FB:0C:C1:9B:A8
X509v3 Authority Key Identifier:
keyid:49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/9j4OCIzmNbIjXCQGTX5H-wzBm6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.50.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:4c:a2:24:6d:f1:98:af:3c:c9:d2:73:e1:27:ca:f1:20:51:
a3:93:ec:73:a2:cb:15:c5:16:4a:db:1e:9e:eb:b3:3f:40:91:
f0:aa:f8:58:3a:e9:44:b2:97:7c:f6:d8:4b:fd:a8:6a:c3:4a:
f0:e9:74:f6:49:59:d0:55:ee:2f:9b:2f:49:15:dd:81:ce:78:
42:ed:7d:1e:71:1c:2c:02:aa:2f:d7:e7:e0:28:eb:87:40:40:
55:86:47:70:e0:d1:8d:38:a1:6e:dc:f3:76:19:3c:3a:70:d9:
14:84:e5:34:04:bf:ec:67:f8:47:25:f5:e1:f4:82:11:99:d5:
27:cf:c5:60:6c:38:2a:80:86:40:c2:03:e1:91:56:e7:25:2f:
7f:b8:61:a3:2b:e6:87:97:07:49:1b:cd:8a:e7:8e:79:bd:73:
40:ae:3d:f4:68:41:9f:50:83:79:ba:06:38:4b:c7:31:d7:c0:
78:29:0e:14:30:ba:eb:f2:a9:3b:37:e2:02:18:9a:b6:4b:fe:
ac:8a:6c:a2:a5:76:65:57:1c:ab:91:4a:30:97:44:5c:c5:f8:
3e:58:35:90:d0:ed:cf:78:d5:92:b2:9c:9a:60:7c:4d:95:d7:
29:93:ec:38:0a:2a:ee:d0:28:23:5b:8e:1e:5b:38:26:ec:d4:
41:f2:39:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-ams.rpki-client.org