Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/h1btEijbeGnuLDkFaxwuuoNzJvU.roa
File: h1btEijbeGnuLDkFaxwuuoNzJvU.roa (raw, json)
Hash identifier: bGGA1Uq9vE5T/G3jmyJ9hS6PUBlzp08mQHet/vxfnFg=
Subject key identifier: 87:56:ED:12:28:DB:78:69:EE:2C:39:05:6B:1C:2E:BA:83:73:26:F5
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 0512B644
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/h1btEijbeGnuLDkFaxwuuoNzJvU.roa
Signing time: Sat 01 Jan 2022 13:05:49 +0000
ROA not before: Sat 01 Jan 2022 13:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49127
IP address blocks: 91.217.253.0/24 maxlen: 24
91.220.28.0/24 maxlen: 24
91.220.35.0/24 maxlen: 24
164.138.248.0/21 maxlen: 24
91.220.71.0/24 maxlen: 24
2a0a:7d40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85112388 (0x512b644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jan 1 13:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8756ed1228db7869ee2c39056b1c2eba837326f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:05:55:20:75:d7:a1:1f:c9:d6:77:58:8f:
94:ce:5c:56:2f:bf:cd:6b:8a:f1:f1:b4:32:c3:9c:
2d:ea:06:ee:57:7f:d2:20:ac:e2:db:ae:cf:5d:bb:
43:42:c7:10:11:fb:8d:8a:5a:2b:53:9e:61:5e:34:
70:9c:dd:3f:6b:fc:95:05:25:d6:be:55:46:81:64:
51:83:c6:df:3f:ce:92:2e:01:8b:39:86:88:99:c3:
99:1c:02:3b:19:81:bf:ab:f4:2c:13:4f:be:84:1c:
50:26:ba:f5:84:49:99:8a:0c:f0:d9:5d:1e:e2:89:
3b:28:5e:97:92:e3:67:21:bf:e3:5d:cc:3b:80:69:
da:86:b9:aa:1f:ac:6e:ae:5e:6a:60:73:46:58:a5:
b9:27:3a:6d:7e:05:f1:9e:54:40:9d:3b:fc:5a:2b:
35:b5:44:6e:c7:f3:38:b3:8b:5c:48:60:dd:9f:dc:
3d:54:b6:8b:45:c7:9d:63:9c:48:9b:97:bb:61:a6:
63:a3:0a:b7:8a:35:9e:60:32:30:b6:bd:2d:82:d4:
f8:fd:15:f3:10:d4:5e:f5:18:3b:52:be:e8:70:da:
7a:07:ab:28:68:07:86:07:3e:fb:40:45:78:e1:a2:
75:a7:53:f7:9a:94:cb:2b:c3:fb:8a:78:52:c1:e2:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:ED:12:28:DB:78:69:EE:2C:39:05:6B:1C:2E:BA:83:73:26:F5
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/h1btEijbeGnuLDkFaxwuuoNzJvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.253.0/24
91.220.28.0/24
91.220.35.0/24
91.220.71.0/24
164.138.248.0/21
IPv6:
2a0a:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
68:69:fc:b9:39:3e:1c:06:78:82:2e:c8:af:bf:53:52:83:90:
cc:c2:cc:dc:2d:95:a7:be:7d:cf:cf:fc:66:65:00:5e:e2:01:
63:61:3b:20:81:29:51:1a:60:b1:d8:12:7a:a2:24:14:a6:40:
8a:f5:b8:90:55:c6:88:e3:cf:d9:d8:8b:12:ed:79:9d:6a:73:
57:2a:85:94:4c:43:5d:ca:b7:d1:52:2a:0e:fd:9e:e4:5f:dc:
81:59:b5:b8:c7:17:59:e5:59:00:40:fb:f1:0e:5b:41:fa:14:
39:d9:7a:0d:d4:ab:4f:2b:52:86:5b:0e:64:a1:64:ee:5d:42:
79:f1:15:8c:57:a3:b5:74:67:ca:73:af:04:de:6c:b7:a9:1d:
05:f2:68:c1:f0:6b:97:cb:82:5c:b1:c3:1c:91:dc:bf:f1:ff:
9f:23:09:24:a7:c5:7d:c6:96:c2:e2:93:8f:e5:5d:02:4a:15:
1b:11:94:c6:e4:f6:77:6f:08:44:31:13:0b:c4:86:95:79:9a:
09:5c:a3:f9:7e:c6:ef:96:d0:a8:60:3c:35:39:b5:48:5d:3f:
ce:b1:ec:4b:77:28:ba:32:b1:07:aa:4b:65:cc:d7:99:5b:49:
b4:a4:01:f0:c5:89:d7:8c:f3:5e:70:2d:48:3d:5f:29:f2:9e:
bb:57:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:43 2023 by rpki-client on console-fra.rpki-client.org