Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Hf3crXytfo0LXv52ebZknUWINYs.roa
File: Hf3crXytfo0LXv52ebZknUWINYs.roa (raw, json)
Hash identifier: F+T315ppL7uqay/aJLv1klbtSwwXoG1O5szsVeChZ5I=
Subject key identifier: 1D:FD:DC:AD:7C:AD:7E:8D:0B:5E:FE:76:79:B6:64:9D:45:88:35:8B
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01852E930BD08407D85AD7A8A96F73365378
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Hf3crXytfo0LXv52ebZknUWINYs.roa
Signing time: Tue 20 Dec 2022 08:07:46 +0000
ROA not before: Tue 20 Dec 2022 08:07:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28753
IP address blocks: 91.243.42.0/24 maxlen: 24
91.243.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:93:0b:d0:84:07:d8:5a:d7:a8:a9:6f:73:36:53:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Dec 20 08:07:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dfddcad7cad7e8d0b5efe7679b6649d4588358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:99:0b:47:3d:28:e7:1c:62:27:e1:ba:cd:d0:
8b:a8:47:67:9c:4b:7f:c5:c5:b6:73:5c:b4:d7:af:
95:0d:a8:d9:49:40:a2:e2:89:67:f2:da:2d:c2:5b:
ce:0a:ea:cc:b3:b4:fa:a9:c7:2a:e4:db:b9:c2:30:
26:50:a8:04:b4:d9:03:c1:7b:db:14:e1:3c:99:5b:
03:df:06:10:9b:a2:4b:2c:41:a4:49:8d:02:f3:89:
3c:ce:4f:2b:28:4c:9a:5f:7e:f8:0f:71:74:9e:58:
15:28:fa:ca:21:60:2e:fa:1a:d3:e1:9b:8f:de:5b:
97:06:88:15:c3:f9:6c:fd:55:76:80:94:b4:c5:e8:
1c:8e:ad:2c:c0:bf:24:78:30:ae:78:6c:15:0d:ab:
ed:f1:d1:07:85:c4:03:68:4a:a6:36:00:34:da:a9:
43:10:63:78:00:e5:a2:b8:d7:48:ab:8d:b9:8d:61:
64:a5:75:cb:cb:c2:ae:7f:04:8c:bb:e3:0a:c0:14:
dc:49:97:1e:3b:3a:2e:b4:1d:fb:77:b6:ec:c0:74:
78:16:fd:de:37:2b:3b:48:16:74:92:c0:f8:a8:1e:
73:7c:fe:88:2f:5b:64:5a:26:49:e2:a3:13:bd:d9:
5a:00:ea:cc:f0:f8:c8:e2:c6:48:5f:3a:d1:99:3a:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FD:DC:AD:7C:AD:7E:8D:0B:5E:FE:76:79:B6:64:9D:45:88:35:8B
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Hf3crXytfo0LXv52ebZknUWINYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.41.0-91.243.42.255
Signature Algorithm: sha256WithRSAEncryption
4f:f9:3c:97:f4:ac:85:28:ad:20:4d:ca:d1:b5:54:cc:1d:eb:
35:c8:8e:70:77:ca:77:8d:29:0d:16:c6:a6:ad:2b:29:01:5b:
5d:fe:24:e9:1a:7d:4a:3b:52:ef:0d:8b:d7:42:e5:c1:0e:9f:
b6:ed:61:39:87:66:9c:01:00:91:1f:f6:24:93:93:ec:65:30:
6e:ab:81:1f:fd:d6:32:bb:78:e8:7b:9c:db:7d:6a:e3:75:b2:
be:8b:27:ca:7a:a0:61:69:1b:12:01:50:0f:18:85:bc:dd:86:
23:20:ee:8b:66:13:66:04:5d:29:6e:f3:92:0b:15:5e:32:d5:
c6:f0:d0:f7:d4:a7:ed:fc:a0:2f:83:90:73:75:f9:9e:bf:d0:
69:bf:a9:e1:f3:76:9a:e9:23:b1:03:ec:3a:68:49:17:e5:6f:
f7:02:40:02:1d:48:fe:21:da:52:5c:af:11:12:fc:90:24:9d:
34:94:a0:7c:dc:df:93:15:d4:b0:1d:cb:f8:81:0f:be:d0:1a:
52:24:1c:bb:29:10:45:ed:c7:dc:3f:a9:c0:e9:49:27:c7:8d:
96:40:d5:e9:fc:a3:d5:ff:81:89:06:0c:2c:95:ea:b0:b9:17:
65:a7:71:7e:59:9b:d0:63:5d:cc:92:8e:ee:b4:1b:7e:dd:72:
65:1b:6e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org