Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/H-BawODNdYXHxYuqChmj7buoiN8.roa
File: H-BawODNdYXHxYuqChmj7buoiN8.roa (raw, json)
Hash identifier: nR4ifkRcLIpuoPI3e/832usoWcFpP1F+xQnMfpwukBU=
Subject key identifier: 1F:E0:5A:C0:E0:CD:75:85:C7:C5:8B:AA:0A:19:A3:ED:BB:A8:88:DF
Certificate issuer: /CN=496a77608f1f4472f6fc30273c5560e967caf273
Certificate serial: B3DF70
Authority key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/H-BawODNdYXHxYuqChmj7buoiN8.roa
Signing time: Sat 01 Jan 2022 05:52:02 +0000
ROA not before: Sat 01 Jan 2022 05:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.246.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11788144 (0xb3df70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496a77608f1f4472f6fc30273c5560e967caf273
Validity
Not Before: Jan 1 05:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fe05ac0e0cd7585c7c58baa0a19a3edbba888df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:0e:5a:ef:ec:3b:78:a1:66:b8:75:e8:76:
e6:d1:23:9b:db:3f:f6:a3:91:50:a4:ff:51:a2:a8:
06:e9:6d:92:90:b0:29:9f:7c:c8:92:e7:7b:99:da:
e6:1d:50:b9:64:6f:d4:6c:8f:ff:80:e7:b6:1e:7d:
4e:17:26:f7:61:a1:10:70:73:de:c8:3d:51:72:f8:
e8:4a:4d:45:51:05:7e:e8:0b:c6:6d:53:4d:d9:a7:
2f:80:13:23:28:7d:d5:d2:51:96:4d:9f:a1:f9:26:
ab:da:68:6d:c8:a0:45:7c:b1:25:b3:4b:30:1c:fa:
79:89:8c:d0:3c:10:fd:e0:99:07:7d:30:24:78:c7:
c9:c4:54:4d:43:3d:48:91:18:90:c3:d2:b7:8d:e9:
1a:5c:e5:43:87:f3:02:b7:73:cc:81:62:3b:1e:96:
29:88:fa:93:e5:b0:2a:6d:e0:7e:6e:cd:f9:fc:20:
2a:33:fb:0b:1f:b1:49:82:22:62:90:79:12:4c:a7:
a5:8f:e8:a1:5d:78:e3:18:f4:fc:8a:e2:9a:d8:ce:
74:37:bb:99:12:d0:57:6e:a7:38:6d:77:5e:a8:b5:
87:6e:35:ec:12:8d:37:dd:2a:6d:3b:4c:e1:25:c7:
3d:95:50:61:76:50:0f:bb:ce:d3:f3:f2:1c:f9:e7:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E0:5A:C0:E0:CD:75:85:C7:C5:8B:AA:0A:19:A3:ED:BB:A8:88:DF
X509v3 Authority Key Identifier:
keyid:49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/H-BawODNdYXHxYuqChmj7buoiN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:85:13:0a:3f:a8:6f:88:2c:3c:f0:d3:d5:ae:23:e0:f6:6b:
c5:4c:7b:ee:34:22:e8:8d:aa:64:3e:0e:31:6d:7b:19:96:6e:
31:2c:7a:47:d0:6b:cf:59:9e:d1:00:83:74:5c:07:35:a6:94:
33:a5:9f:64:5a:16:a8:dc:81:4c:eb:28:d8:0d:eb:6b:64:35:
06:e3:44:1a:2d:cd:33:b8:46:54:a6:0e:55:93:5d:5f:e4:1b:
96:58:59:e6:61:d6:44:ac:2e:5b:87:fe:e2:0f:82:31:49:e4:
6e:74:00:39:df:c6:60:23:25:33:9b:cf:9b:b2:ea:ce:d5:52:
36:4e:40:ca:9d:f2:80:92:93:ba:68:96:38:19:70:ea:a3:9d:
2b:ee:b9:c3:5a:0e:e1:7b:32:91:8b:4a:19:bc:a6:0e:e8:78:
84:7a:c5:6b:90:b7:f3:f8:70:da:0e:1a:68:7f:0b:cf:48:c8:
b1:3b:83:82:48:8f:fc:b6:8d:bb:dd:15:83:ab:46:49:32:a8:
83:4d:e2:4a:b7:e9:1b:aa:39:b3:86:9a:a4:d3:f7:db:5a:5b:
77:07:ab:8a:58:4c:f0:8d:c3:9e:44:02:d5:8b:c3:f9:fe:65:
0e:23:c2:de:03:d5:a9:99:06:ae:e5:74:61:a0:67:85:c4:e4:
70:1f:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-ams.rpki-client.org