Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/s8k0oeS0gXXBXRD5mI4mww_LGjE.roa
File: s8k0oeS0gXXBXRD5mI4mww_LGjE.roa (raw, json)
Hash identifier: mffH9QWallOkV/UKwNVHCGxYDCoiZ8XoE5a45U3sRWw=
Subject key identifier: B3:C9:34:A1:E4:B4:81:75:C1:5D:10:F9:98:8E:26:C3:0F:CB:1A:31
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 7D2C09
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/s8k0oeS0gXXBXRD5mI4mww_LGjE.roa
Signing time: Tue 08 Mar 2022 15:55:38 +0000
ROA not before: Tue 08 Mar 2022 15:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57724
IP address blocks: 91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8203273 (0x7d2c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Mar 8 15:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3c934a1e4b48175c15d10f9988e26c30fcb1a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:20:dd:f4:39:42:65:1b:d8:e7:e4:5a:b0:
2e:f6:b5:7f:b8:9a:65:cd:a3:ab:55:1c:f2:ab:6e:
96:59:5e:e9:80:fa:25:1e:dc:69:44:0b:31:60:ed:
ec:5f:5a:a3:23:2f:4e:b3:32:2f:77:5d:0e:75:60:
ed:e4:16:7f:e7:2e:db:cb:9b:6e:de:5e:a0:8a:bc:
4f:d4:7a:02:eb:e4:77:d5:6f:13:56:5c:76:19:99:
56:5a:11:e4:c4:88:92:b6:b3:32:3e:ae:7a:78:a6:
2e:03:4a:20:5d:fa:28:4c:03:80:b1:34:69:79:0f:
1a:48:0b:f5:ee:d7:21:5e:cf:2f:4c:c0:61:97:e5:
2b:ba:7e:eb:dc:82:cb:a4:87:f0:e6:68:be:0b:ef:
3d:d0:4b:96:2e:f3:35:98:0b:5f:43:c8:a8:4d:bf:
2e:bc:95:4e:c8:27:32:a4:0e:f1:a2:14:f3:52:70:
e6:50:52:1e:ac:2e:76:3b:7a:e9:f6:30:d8:b1:99:
97:54:48:80:ec:df:8a:e3:ee:f9:07:65:9a:e9:c0:
b7:ea:1a:8e:8a:9f:49:b6:4d:4e:d4:40:f8:15:35:
c5:d4:0d:09:bc:a8:4c:45:63:cb:af:3d:a4:34:08:
7a:2c:97:ef:b1:08:fd:0c:7e:fb:8e:e7:fd:dc:f2:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:34:A1:E4:B4:81:75:C1:5D:10:F9:98:8E:26:C3:0F:CB:1A:31
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/s8k0oeS0gXXBXRD5mI4mww_LGjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.224.0/22
Signature Algorithm: sha256WithRSAEncryption
81:f1:cd:c2:e6:da:73:d5:81:41:a4:53:a7:1e:da:3a:89:20:
12:4f:6f:8e:c3:e4:cb:03:80:8b:fd:43:57:91:6d:85:49:ff:
e6:23:35:29:26:45:f4:df:d5:cc:f2:5b:6a:c0:5d:f5:c2:0f:
d7:b6:2d:ac:ef:8a:34:37:38:da:28:d6:3c:1e:ef:3a:08:73:
24:e1:48:aa:e9:41:ab:4c:8f:8a:87:47:5f:0a:4a:4d:77:95:
05:92:07:60:bf:3c:9d:97:e2:f3:b3:69:cb:35:22:13:f8:86:
d0:6b:f2:96:8b:32:ce:c8:ac:67:69:76:a4:b6:4b:62:fb:fc:
67:ea:69:4d:67:22:f1:87:33:25:30:9d:77:98:f1:cf:7a:0d:
89:af:cd:33:5a:fc:5a:30:0c:a8:74:22:47:2c:e9:71:5e:13:
c7:13:3a:be:e3:1f:42:b8:27:2e:2c:33:ba:cb:c9:e5:92:3e:
0d:f8:70:6b:5d:64:ae:f8:98:4d:8d:2f:1f:21:69:85:17:e8:
04:0d:89:f0:8e:65:60:4b:d6:c8:ae:44:7a:bd:99:a8:d9:1d:
6f:f7:ac:0a:27:51:42:99:db:e3:ab:76:de:e0:32:89:75:b6:
72:e4:65:5c:e2:83:68:74:37:b0:09:6b:3b:f6:e8:ba:b3:a1:
aa:bc:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:03 2024 by rpki-client on console-ams.rpki-client.org