Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/_xPe_Be9jYHDWufdjfDu9-TpdV8.roa
File: _xPe_Be9jYHDWufdjfDu9-TpdV8.roa (raw, json)
Hash identifier: ROqQV/2Iw+vC5fkCyIgUXQtCuA+KcGqgjwFdHIRYAQw=
Subject key identifier: FF:13:DE:FC:17:BD:8D:81:C3:5A:E7:DD:8D:F0:EE:F7:E4:E9:75:5F
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 0149B51A
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/_xPe_Be9jYHDWufdjfDu9-TpdV8.roa
Signing time: Sat 01 Jan 2022 05:02:44 +0000
ROA not before: Sat 01 Jan 2022 05:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199638
IP address blocks: 91.245.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21607706 (0x149b51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Jan 1 05:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff13defc17bd8d81c35ae7dd8df0eef7e4e9755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:4d:86:fb:2e:93:6c:ac:2c:36:12:ca:44:
e8:b5:18:5e:63:1f:cc:cc:5b:de:80:1f:5c:c1:5a:
96:fd:5d:28:f9:4e:ca:5d:3d:1d:89:46:52:41:0a:
96:f8:48:24:6f:e2:75:5f:f5:d4:dd:31:85:19:97:
a2:a5:f0:2e:32:b1:94:c5:ca:15:be:d4:67:4e:84:
56:56:bf:0c:8a:53:f5:d7:06:28:d6:57:fb:a8:f5:
ad:da:ea:6f:48:45:02:16:75:a4:b1:c8:41:27:88:
44:b1:c1:fe:af:cf:ac:37:2c:34:2a:0e:2e:44:80:
a3:c9:6b:21:89:5d:fd:93:ef:c6:35:7c:7c:52:1c:
8c:cc:2d:c9:2b:58:6a:cc:36:80:8c:02:1d:24:05:
d6:c3:e7:01:c3:2e:d4:1d:99:e1:eb:7c:cd:dc:78:
07:00:c7:e7:83:f4:b1:c0:82:5c:5f:cc:c3:fd:c6:
0c:59:69:55:7b:39:ff:3a:fa:5a:26:0b:c0:d9:b4:
6a:4e:46:a6:f5:92:2a:d3:1b:e3:fa:f6:db:7a:0c:
91:53:c3:8d:79:2b:60:8d:b5:a0:e9:75:7f:c1:72:
68:83:0f:12:7d:07:30:98:d3:bf:dd:14:70:15:8e:
89:37:d2:9b:f5:90:97:d4:5f:2c:13:14:28:39:dc:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:DE:FC:17:BD:8D:81:C3:5A:E7:DD:8D:F0:EE:F7:E4:E9:75:5F
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/_xPe_Be9jYHDWufdjfDu9-TpdV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:69:6e:24:fc:ec:71:71:47:b5:33:2a:e3:a5:cc:da:3c:2e:
9e:7e:5a:fb:79:27:c6:56:d7:cb:08:1c:82:ac:54:b2:5c:47:
9d:d8:b8:be:6c:23:7a:6b:1e:79:f3:05:34:ab:1c:22:d2:5a:
64:77:78:d3:5e:6b:03:f6:5d:4c:c0:01:3f:0c:82:ba:df:5f:
f0:db:f9:27:6a:45:84:c2:3c:ec:ac:8b:a4:c8:4d:2e:fe:61:
f9:94:10:39:0b:28:96:af:7a:06:5d:30:d9:55:54:e0:7c:49:
ba:ab:3b:29:a3:dc:85:96:8d:a9:e4:de:5f:91:69:27:bf:a5:
1d:a9:3d:86:ae:cc:af:dd:27:23:8b:96:fa:aa:fd:ed:48:5f:
f0:87:bb:10:60:2e:ce:81:79:f0:74:26:87:27:05:dc:89:ec:
af:9c:d3:37:ad:b1:06:21:eb:ba:2f:f2:bf:ce:61:7d:fc:f1:
26:c5:d2:65:93:07:07:4a:9f:4c:7c:fc:b1:1e:a0:5a:0b:95:
b3:62:a7:ed:80:36:d7:a4:aa:31:98:b5:4b:8d:c3:dd:42:3a:
95:29:70:8f:b7:be:c6:4e:25:e1:7d:76:60:ed:61:bb:ec:81:
15:84:fb:da:b5:1d:c5:78:0f:14:b3:4d:f6:59:e3:0c:52:4f:
e1:31:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:54 2023 by rpki-client on console-fra.rpki-client.org