Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/EY647tOFMHZxZjs8ukCbC0QPm1s.roa
File: EY647tOFMHZxZjs8ukCbC0QPm1s.roa (raw, json)
Hash identifier: XUoB9MlS9rSvgm2o8wlchHylST5NyA4mb0Y8AeGYiJ4=
Subject key identifier: 11:8E:B8:EE:D3:85:30:76:71:66:3B:3C:BA:40:9B:0B:44:0F:9B:5B
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 7B8847
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/EY647tOFMHZxZjs8ukCbC0QPm1s.roa
Signing time: Tue 08 Mar 2022 15:54:17 +0000
ROA not before: Tue 08 Mar 2022 15:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136038
IP address blocks: 91.204.224.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8095815 (0x7b8847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Mar 8 15:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=118eb8eed385307671663b3cba409b0b440f9b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:0a:69:e8:33:a4:7e:f8:83:05:b8:05:e1:
d8:9b:bc:65:d7:d1:00:9b:01:4c:63:01:6f:0c:63:
10:27:97:87:20:67:cc:36:9d:4f:71:81:c9:c3:f7:
77:b1:0f:4d:ac:e7:c2:0f:f3:c2:3c:15:35:91:6a:
b8:d9:d0:7e:26:9b:34:a1:da:4a:cd:db:66:b4:a7:
39:ed:62:bd:d9:81:8a:fa:3c:21:7f:e3:d5:36:38:
35:52:d7:d0:07:ff:50:67:31:d3:b8:df:fa:87:9b:
8f:ba:9d:ca:32:5a:ab:07:b5:4f:63:8a:29:49:cf:
e8:72:0b:10:6e:28:07:04:ce:95:e4:ea:44:d8:49:
80:a2:00:e0:24:5d:6c:88:63:5b:c1:39:54:8f:af:
e1:fc:bc:7f:d1:0f:26:97:16:08:5d:7e:77:58:0a:
72:c3:d7:d8:b2:b1:0e:b5:f0:cf:6e:b2:20:08:5d:
9a:49:b1:f2:74:08:bf:57:61:07:70:a4:65:53:2e:
b6:ee:87:ba:04:1a:92:87:05:03:09:4d:c3:0c:2f:
59:05:a7:34:2a:18:62:83:8d:61:35:71:10:ae:9a:
c0:c0:d2:bd:56:0e:14:e2:01:b9:cb:70:1d:c4:5c:
dc:62:6b:b9:11:95:1e:ee:20:f2:14:9f:92:7e:7a:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8E:B8:EE:D3:85:30:76:71:66:3B:3C:BA:40:9B:0B:44:0F:9B:5B
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/EY647tOFMHZxZjs8ukCbC0QPm1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.224.0/22
Signature Algorithm: sha256WithRSAEncryption
46:47:de:77:b0:56:9c:20:7f:3d:69:59:a0:61:af:c7:13:8b:
ac:d3:e2:6f:f3:5a:bb:83:8a:32:c4:3d:c9:87:8a:41:a2:37:
30:20:d8:e6:70:33:36:b0:4d:c4:c6:c4:a5:59:75:43:19:5e:
94:18:15:30:9c:d4:b6:77:bb:11:f2:b2:39:69:1f:67:fc:12:
e0:db:a5:64:2d:1c:22:51:64:c6:6f:6b:35:fd:5d:6d:01:26:
10:c1:01:18:41:a9:57:37:33:15:44:10:77:7c:90:1a:d9:37:
e1:b3:ee:1c:69:14:a7:bc:7b:0c:7f:06:81:3a:04:3c:d4:8f:
67:9a:e0:75:6d:ee:ce:2a:23:c1:22:97:cd:7b:d8:0a:76:6e:
6f:24:9f:d3:b6:b6:a0:39:78:b2:10:4c:8f:5f:1d:99:e5:f6:
44:9a:9d:88:1c:ca:9f:d8:7c:ab:af:2e:15:4a:40:66:da:3a:
a8:71:e7:52:df:4e:c8:d3:48:11:36:15:ee:13:2d:2f:75:6d:
d8:f7:ea:90:f7:fa:5f:38:8e:38:b2:9f:2c:a5:c3:a3:98:74:
0d:57:78:e6:8b:50:e2:2b:8c:83:de:56:45:9b:43:85:86:44:
ec:22:b8:00:0d:db:0a:a3:ba:a2:e8:4a:36:a4:03:46:65:d9:
66:91:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:30 2023 by rpki-client on console-fra.rpki-client.org