Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/o62xvC41R-0qzbL7Ik-n8c-40Lk.roa
File: o62xvC41R-0qzbL7Ik-n8c-40Lk.roa (raw, json)
Hash identifier: UsU26H1ExUHZ6BevyiXEvkeR6xOYLPTI7jj0tTfadBA=
Subject key identifier: A3:AD:B1:BC:2E:35:47:ED:2A:CD:B2:FB:22:4F:A7:F1:CF:B8:D0:B9
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48672AD5
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/o62xvC41R-0qzbL7Ik-n8c-40Lk.roa
Signing time: Sat 01 Jan 2022 03:00:28 +0000
ROA not before: Sat 01 Jan 2022 03:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46844
IP address blocks: 37.9.44.0/22 maxlen: 22
91.243.89.0/24 maxlen: 24
91.243.92.0/24 maxlen: 24
91.243.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214720725 (0x48672ad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3adb1bc2e3547ed2acdb2fb224fa7f1cfb8d0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:bf:e0:8d:19:37:ed:79:e2:a8:33:02:d3:
e8:c5:4c:04:4c:7e:fd:d9:59:2b:ef:e1:20:10:37:
9a:1d:d3:40:7e:34:bd:a1:56:10:dc:d6:b5:0b:0b:
c6:7e:dd:9f:2c:b8:63:32:ab:2a:8d:f5:5d:18:c7:
07:7b:b3:91:3a:47:1e:33:2e:93:53:46:ed:f3:1f:
47:ff:d8:cc:fe:32:43:80:8d:3d:d8:bf:29:db:f7:
72:06:a4:a7:f8:23:5b:99:ef:f2:ca:54:cd:90:3e:
c9:98:35:ad:e9:80:06:96:dd:6e:a6:de:7b:e0:b4:
ee:da:bf:60:4d:3e:f7:17:a9:dd:fc:85:9c:59:c5:
66:63:96:a9:41:8d:1a:c1:c0:c9:63:79:b3:b3:e4:
c1:e5:c9:99:e7:e5:5b:02:47:8f:5e:bc:ed:62:73:
09:8b:5c:aa:e0:f4:dc:52:c7:43:18:85:73:73:84:
e3:e2:e2:d0:6e:3f:66:c3:ff:15:18:3d:60:47:5b:
d7:93:09:2c:21:2c:91:3f:e0:0d:e2:70:05:81:cd:
1e:18:bf:a9:b7:f5:03:15:50:47:6d:7b:88:98:14:
a8:88:f0:49:0f:3f:5b:7a:26:9a:5e:5e:cb:2f:57:
df:6a:95:4f:04:46:44:38:a9:eb:ab:e4:98:2c:e1:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:B1:BC:2E:35:47:ED:2A:CD:B2:FB:22:4F:A7:F1:CF:B8:D0:B9
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/o62xvC41R-0qzbL7Ik-n8c-40Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.44.0/22
91.243.89.0/24
91.243.92.0/24
91.243.94.0/24
Signature Algorithm: sha256WithRSAEncryption
44:23:ba:28:52:95:8b:c0:2d:48:b0:43:2f:60:ea:4b:e5:68:
01:7d:f5:19:de:1e:f8:7d:08:4f:65:22:9b:12:1f:ba:aa:7d:
ef:a4:bf:71:67:bf:f9:cf:e5:11:af:5b:4e:be:9e:62:69:0c:
1b:65:00:69:ab:6b:f2:4d:4b:37:1b:18:71:20:ce:cd:f8:64:
a8:0f:37:41:1c:03:4f:32:46:51:0c:14:dc:ed:bf:2a:8b:8c:
44:86:e4:04:cc:f6:8b:8e:8e:a4:51:af:d2:c1:f3:1e:25:b0:
09:d5:e7:d1:27:46:9c:b8:fa:d6:1d:e7:7c:32:c2:56:87:03:
9f:36:bb:9c:a2:83:2d:d9:c7:3d:dc:6a:f0:72:f1:f4:34:3e:
8d:88:b6:16:12:97:28:d7:79:46:ee:6d:d2:09:6d:69:6c:b1:
3a:26:e4:87:ad:97:96:cd:15:a4:b3:ee:4c:a3:a5:af:7f:56:
3e:93:74:b8:30:41:e5:63:a5:1f:df:10:e7:4d:d8:83:1d:23:
ea:2a:3c:35:01:5c:db:03:fd:1d:e6:60:21:66:26:53:f4:a7:
16:39:a2:3b:e6:44:c8:25:1c:fe:16:8e:34:01:0f:f7:06:3c:
4d:00:bb:a6:57:35:0c:c2:37:6a:0a:a2:e6:af:9a:95:82:c1:
d1:18:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org