Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/cRPvCcAfDt1wwEmFsa2cmzMoj_E.roa
File: cRPvCcAfDt1wwEmFsa2cmzMoj_E.roa (raw, json)
Hash identifier: /6mt4UyBfEqN/S5ZMU+KsBvGIeENVAiOKQRg/ahZRvc=
Subject key identifier: 71:13:EF:09:C0:1F:0E:DD:70:C0:49:85:B1:AD:9C:9B:33:28:8F:F1
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 017612
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/cRPvCcAfDt1wwEmFsa2cmzMoj_E.roa
Signing time: Mon 04 Apr 2022 12:04:19 +0000
ROA not before: Mon 04 Apr 2022 12:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59619
IP address blocks: 91.240.226.0/24 maxlen: 24
91.240.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95762 (0x17612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Apr 4 12:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7113ef09c01f0edd70c04985b1ad9c9b33288ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:0e:f5:1a:28:35:b9:a6:74:30:18:a2:97:
89:01:b8:9c:88:ca:9d:d7:33:62:ad:d3:2f:99:95:
f5:66:87:f4:08:40:83:e3:ec:b0:04:45:2c:b8:da:
94:b5:1f:23:a2:5a:9c:f7:01:28:3d:4b:63:8b:43:
e2:7c:92:af:73:4c:b7:d6:bf:8c:1e:fe:f2:6f:eb:
aa:2e:4c:73:32:37:6d:e9:0a:f6:a6:6d:01:7b:13:
0c:df:98:fd:3c:43:00:2b:55:27:b0:ee:c7:9e:30:
66:c6:cb:49:f4:56:07:f6:e4:e5:46:14:0e:cf:e2:
b8:4f:57:26:1d:cd:58:81:64:43:e7:70:47:4a:af:
e3:50:d0:5b:45:87:3d:ac:95:2d:a4:37:7a:cb:34:
b9:02:3e:d5:da:ab:2f:11:19:81:c0:9a:d6:13:45:
ba:3e:c0:c9:30:57:d2:aa:41:85:dd:f3:01:88:b5:
cd:47:ff:fd:b2:22:26:c2:16:d8:c9:03:ab:f7:ff:
34:55:bc:ce:49:3a:59:ca:e5:21:c2:67:bd:11:03:
74:b8:02:a2:ca:ef:fa:c0:18:84:63:8f:64:3b:2e:
8a:40:36:23:93:f2:ca:01:3f:c1:0e:2d:e2:5e:6a:
ee:61:a8:35:cc:2a:98:91:7d:22:65:dc:af:c2:62:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:EF:09:C0:1F:0E:DD:70:C0:49:85:B1:AD:9C:9B:33:28:8F:F1
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/cRPvCcAfDt1wwEmFsa2cmzMoj_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.226.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:0d:c5:b9:8d:4f:c3:76:09:2b:c5:5a:38:6b:4a:5f:a0:c1:
ab:24:b5:17:a0:f9:38:99:9c:76:9c:c3:35:cf:93:75:c0:c9:
2b:89:16:70:02:c1:a7:9b:55:45:6c:b5:5a:35:a7:44:6f:16:
01:0c:f0:56:0d:30:2b:3e:e6:19:1c:6f:a7:ad:9d:c6:3c:4d:
05:ef:89:ab:80:f8:55:d0:aa:ab:e2:62:a2:97:f9:4d:6c:8b:
a8:35:e7:52:0b:37:86:aa:9c:90:61:e0:28:8e:a6:0d:30:07:
71:01:9f:b3:97:7f:b0:a5:a0:10:b9:13:f2:ed:cd:1b:c2:db:
64:8d:d2:e3:60:c5:48:07:30:9e:21:ae:d6:eb:4d:85:19:fe:
4e:a6:c4:79:ac:14:1a:09:07:68:2b:74:df:00:65:ca:c7:92:
b4:6e:a9:7e:7c:7a:22:d5:0a:75:13:fc:4e:e7:b1:8d:14:86:
1c:36:f5:e2:b2:25:41:90:74:93:d9:17:e2:9b:86:c2:09:17:
e8:1d:74:55:9f:9f:7a:84:5b:44:14:c7:07:80:db:ec:10:37:
63:fd:5f:82:11:ac:6a:c4:19:44:21:61:36:28:fa:65:0f:45:
b7:39:c6:80:9c:23:0a:45:19:95:c6:91:6e:19:11:75:cc:4d:
2d:43:e6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org