Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/_VViw0xvHORZQqx3TfHHFYs2q-Y.roa
File: _VViw0xvHORZQqx3TfHHFYs2q-Y.roa (raw, json)
Hash identifier: KD5Z3AzXLonWYrVx85I6XpAVvXl4AR8QBFavkdTFkew=
Subject key identifier: FD:55:62:C3:4C:6F:1C:E4:59:42:AC:77:4D:F1:C7:15:8B:36:AB:E6
Certificate issuer: /CN=496a77608f1f4472f6fc30273c5560e967caf273
Certificate serial: B27904
Authority key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/_VViw0xvHORZQqx3TfHHFYs2q-Y.roa
Signing time: Sat 01 Jan 2022 05:52:02 +0000
ROA not before: Sat 01 Jan 2022 05:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.246.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11696388 (0xb27904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496a77608f1f4472f6fc30273c5560e967caf273
Validity
Not Before: Jan 1 05:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd5562c34c6f1ce45942ac774df1c7158b36abe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:51:ed:03:e1:be:30:46:ea:5d:bc:c5:52:
fc:63:7a:f1:a0:d1:c3:21:e9:71:ab:4c:df:47:3a:
9a:b4:5f:35:cf:ab:c2:86:10:bd:0a:cb:7c:0d:72:
70:b3:d4:1e:68:96:3b:05:f2:88:98:9e:df:f2:4a:
eb:8f:67:74:ec:41:e0:1e:28:d1:bc:e6:bd:03:b4:
a8:c3:bd:27:3b:4d:db:fb:c1:f7:7d:c5:89:5a:dc:
e7:96:b9:0e:9e:ea:19:7a:1d:91:89:a8:b1:93:0c:
92:56:af:b6:73:fc:ed:b4:25:39:6f:7b:43:32:46:
d3:5a:48:1b:8a:85:ed:c0:b9:b0:dd:6d:d2:54:99:
11:d2:7c:f6:91:16:57:8f:4d:10:ab:76:6c:52:c7:
b0:8a:19:c3:0d:bd:15:13:e7:83:33:f6:3f:60:68:
a1:01:e9:da:99:ab:51:ea:8f:65:5f:5d:ec:88:9f:
6d:d4:47:3c:43:0e:23:21:63:ba:8e:68:50:ce:07:
fc:3d:fb:b4:ff:1c:5b:b0:06:ae:f1:2e:de:8f:27:
1c:ae:14:e9:de:c4:39:53:a8:d5:1a:ea:1c:47:bf:
dc:74:a5:60:cb:f4:98:88:e9:db:47:3f:77:49:b5:
c4:21:78:f4:4c:f2:6a:48:61:b3:90:68:89:fc:9d:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:62:C3:4C:6F:1C:E4:59:42:AC:77:4D:F1:C7:15:8B:36:AB:E6
X509v3 Authority Key Identifier:
keyid:49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/_VViw0xvHORZQqx3TfHHFYs2q-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.50.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8a:2c:85:8f:66:e2:ad:f7:aa:08:51:32:e7:f1:14:a2:8d:
e2:f5:8c:7b:a8:68:7f:6d:51:4f:99:34:12:4a:75:53:52:bd:
3e:e8:98:83:f1:38:ee:27:c0:e8:78:2b:45:4c:f4:e7:4a:52:
c7:f0:06:f0:bb:95:cb:cf:7a:4a:f5:66:d8:e4:a9:76:ac:4d:
42:cf:45:f6:f2:a7:50:20:d7:1c:6d:4b:57:fa:ef:ca:8e:36:
98:44:a1:84:c0:c0:9c:e5:d0:28:3e:bb:d6:e0:db:5c:7f:1a:
08:6c:42:8b:ef:cb:5e:71:fa:2b:f2:b6:c4:35:53:f3:95:fb:
6a:65:a0:eb:b2:0d:7b:2c:98:e1:10:3a:1e:1f:fe:25:5a:41:
e6:2f:46:d9:b1:f1:9e:bf:72:b2:77:02:cc:04:6f:79:f7:ee:
74:56:ba:b6:ab:b5:aa:89:70:07:7c:63:af:67:c2:2b:6f:89:
0d:85:e0:93:33:6b:4f:c1:76:13:e5:ed:b0:e1:fc:a5:3e:bc:
04:3e:c0:f1:3e:21:c1:1d:fd:3b:65:5b:63:3a:ea:54:dc:b4:
97:92:a6:4d:c0:97:1d:60:12:03:c3:d3:91:36:84:83:02:39:
4b:d2:6d:87:92:2b:66:47:00:5d:d7:6b:cf:40:d3:8b:20:a9:
4c:17:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org