Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/ideIM9J3gkirs116LjkS80Vqe2M.roa
File: ideIM9J3gkirs116LjkS80Vqe2M.roa (raw, json)
Hash identifier: BC1xbrFc2Owfd4ErIjL6ulQNtHY49f5XDqMTL9sUgEc=
Subject key identifier: 89:D7:88:33:D2:77:82:48:AB:B3:5D:7A:2E:39:12:F3:45:6A:7B:63
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 05CAE507
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/ideIM9J3gkirs116LjkS80Vqe2M.roa
Signing time: Sat 01 Jan 2022 10:53:31 +0000
ROA not before: Sat 01 Jan 2022 10:53:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43576
IP address blocks: 91.197.145.0/24 maxlen: 24
91.197.144.0/24 maxlen: 24
91.197.144.0/22 maxlen: 22
91.197.147.0/24 maxlen: 24
91.197.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97182983 (0x5cae507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Jan 1 10:53:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89d78833d2778248abb35d7a2e3912f3456a7b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:f1:0f:d3:2f:3a:5c:e8:a5:86:da:c7:63:
f0:26:34:fb:8e:61:d1:a9:fb:4a:34:99:f6:2b:1b:
73:a8:aa:7a:41:14:66:12:31:b8:a9:46:47:a2:44:
a5:3b:a4:d3:9b:d4:e8:04:53:d7:c4:ff:44:89:cd:
79:73:ea:64:d5:6b:c3:29:c6:e2:f1:7d:3b:f5:ce:
f8:e8:76:5c:0f:e1:14:8d:15:ac:35:eb:37:22:1b:
de:af:34:52:6b:23:dc:67:32:ca:64:94:f1:b3:8c:
65:a2:2d:75:61:7b:7a:72:5d:2b:47:46:0c:a5:a9:
e9:91:0e:d4:79:94:e8:ab:65:7c:cb:fa:8c:1c:52:
15:2e:8a:a0:47:e6:f7:b2:de:51:4d:7c:a0:bc:6f:
9a:d1:51:77:51:20:fa:82:ff:94:f8:3f:f7:83:25:
86:23:9f:cf:1e:0d:54:36:90:cb:d0:12:25:fb:16:
14:b7:be:67:5e:ad:a6:d3:d7:40:0c:b3:26:7e:f3:
9a:be:c8:e2:1d:76:30:a5:04:78:4e:57:93:97:8d:
34:6d:14:75:b5:92:cb:75:c6:26:e1:e6:bd:0d:37:
1f:ae:82:8b:49:40:0d:85:5d:81:f6:cc:d6:c0:23:
cb:da:c1:6c:b2:9e:e5:a1:ff:7c:7a:d9:51:34:a8:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:88:33:D2:77:82:48:AB:B3:5D:7A:2E:39:12:F3:45:6A:7B:63
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/ideIM9J3gkirs116LjkS80Vqe2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.144.0/22
Signature Algorithm: sha256WithRSAEncryption
22:3c:e2:e4:81:54:15:ae:22:d3:e3:0c:0f:06:ba:93:2c:fa:
1f:c0:cf:2c:9e:ce:9e:62:82:d6:46:43:c2:13:44:bf:db:ce:
90:c9:65:9b:d9:4b:fb:38:5c:f0:d0:79:a7:0c:a4:68:27:f5:
b0:17:92:ab:32:ad:5e:ac:81:d2:18:e5:d4:07:1d:dd:4d:a4:
82:25:83:6a:3d:f1:75:3e:03:58:2b:e9:ba:27:35:59:fb:50:
93:0d:65:f8:f8:25:1a:9a:35:2d:c4:dc:c1:97:23:60:c1:3c:
ef:52:e0:f3:92:e0:8e:3c:f7:8a:f4:4e:0f:12:3a:24:c8:92:
a3:68:9a:9b:8c:a7:c2:a4:62:34:74:ec:a5:8d:74:00:fb:3f:
b9:77:33:02:76:34:ef:89:23:90:c1:75:6d:2b:63:2e:81:f7:
3d:e6:8a:78:d8:4f:10:1a:fb:52:d7:42:3b:07:39:67:24:02:
cf:3a:f8:9e:5b:f6:d2:c7:2e:35:06:48:1d:6f:e8:44:fb:db:
3e:04:70:5d:16:e9:46:74:38:da:55:03:a5:9a:40:84:69:6d:
5e:fc:2d:ec:47:02:58:48:bc:7a:f9:5f:6c:9d:ea:28:aa:43:
31:64:56:d5:45:91:f2:93:3f:01:4e:90:1d:c8:ae:6e:bc:9d:
b1:c1:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org