Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/DhCVfaWE0V7iqt7pDzKKEwrbJpg.roa
File: DhCVfaWE0V7iqt7pDzKKEwrbJpg.roa (raw, json)
Hash identifier: SHWV2Gs4ByFFlj7P0jYLPJKzw5Luu1XoW5G+yGTcV6g=
Subject key identifier: 0E:10:95:7D:A5:84:D1:5E:E2:AA:DE:E9:0F:32:8A:13:0A:DB:26:98
Certificate issuer: /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial: 0DD1CC64
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/DhCVfaWE0V7iqt7pDzKKEwrbJpg.roa
Signing time: Sat 01 Jan 2022 14:08:04 +0000
ROA not before: Sat 01 Jan 2022 14:08:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49817
IP address blocks: 91.195.2.0/24 maxlen: 24
91.195.3.0/24 maxlen: 24
91.195.2.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231853156 (0xdd1cc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
Validity
Not Before: Jan 1 14:08:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e10957da584d15ee2aadee90f328a130adb2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:80:61:65:12:42:e2:51:71:71:51:a2:4f:
8a:ae:65:5b:f6:79:7b:8e:9f:3e:d1:c8:39:34:36:
87:4a:a4:46:a5:e5:91:02:e2:6c:f3:fc:b1:76:0b:
bd:d5:9e:5e:e8:25:4a:10:c9:18:e7:1e:e3:c1:f1:
a6:64:cf:a3:74:06:21:80:1c:3d:19:4f:c5:13:d8:
1e:fb:9c:a9:f2:fa:fb:4a:46:83:97:5f:76:79:7c:
15:33:54:7d:e8:ed:ec:f5:86:d5:d7:51:64:f1:6b:
7e:e0:b9:30:bc:de:c8:0d:95:2c:b2:31:eb:c8:db:
66:30:f1:e4:f9:f5:24:ce:ae:d0:a9:5e:8d:b5:57:
7f:ae:b7:13:5b:5c:f7:a8:c0:68:d5:7a:14:04:dc:
47:8f:2e:9e:cf:6e:e0:e4:d9:7d:d2:d0:bf:f5:7e:
30:7c:f3:98:ef:a0:fe:88:23:16:75:19:5d:74:bc:
dc:41:89:91:cd:24:88:f2:cd:c4:47:87:6c:cb:04:
6e:39:d5:c1:1d:91:b8:d0:30:1c:0b:b5:0f:e6:32:
08:8d:8d:d2:d2:7e:0b:a8:6b:2f:cb:45:66:21:53:
cd:3c:89:77:97:01:c8:57:db:c8:51:7c:5e:29:3c:
fe:42:63:70:33:82:40:05:bb:af:c8:8a:14:b1:f7:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:10:95:7D:A5:84:D1:5E:E2:AA:DE:E9:0F:32:8A:13:0A:DB:26:98
X509v3 Authority Key Identifier:
keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/DhCVfaWE0V7iqt7pDzKKEwrbJpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:23:32:ff:71:b7:18:2e:ba:1b:db:41:7e:a4:ba:01:a5:db:
c6:9f:73:6d:21:e1:93:b5:4a:af:b1:23:5c:51:3a:35:b4:6f:
ea:01:cd:a1:cc:25:64:21:b6:13:64:da:db:55:8e:b2:9d:48:
0a:96:af:19:70:ae:cd:af:ad:ec:fd:b2:37:61:71:2e:58:e6:
80:bd:6f:41:4d:b8:32:55:64:c8:98:97:96:a8:77:67:5f:60:
63:25:fa:d1:29:d5:52:5b:2f:06:cb:f6:f5:28:5f:a2:d9:f0:
50:0d:76:8e:46:47:78:fa:7b:54:2b:b8:97:10:4a:a7:4e:b6:
7f:a9:39:b8:7b:cb:96:b6:ef:02:87:29:d0:57:84:11:9f:3d:
76:28:6f:f2:fe:7f:45:38:96:fa:e5:4a:0c:5f:10:d7:f5:fc:
fc:3d:a0:9d:0e:eb:c3:a7:ae:2a:8c:96:f3:bb:3e:23:41:d0:
ee:2f:ca:ab:58:b1:ac:d1:b9:49:db:59:f8:1c:2f:0b:2f:58:
19:a9:f1:5f:64:b1:80:18:06:a4:6d:46:f6:9a:98:cc:dc:77:
21:ee:d4:6a:32:8a:39:38:f7:c6:2a:52:9a:ac:13:eb:cb:62:
aa:2c:18:28:e5:92:e2:79:3c:78:5c:74:11:0e:b3:42:4c:ed:
67:b3:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:35 2024 by rpki-client on console-ams.rpki-client.org