Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/1-tdiq-ije4jUxxJI3TLFgon5Elc.roa
File: 1-tdiq-ije4jUxxJI3TLFgon5Elc.roa (raw, json)
Hash identifier: eNqgqx72MC8qs/yNXdIvw27eT/P4cD5EJ0YcpK3M5AU=
Subject key identifier: FA:D7:62:AB:E8:A3:7B:88:D4:C7:12:48:DD:32:C5:82:89:F9:12:57
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 0182936404E6E92A996865EA618C4358EA15
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/1-tdiq-ije4jUxxJI3TLFgon5Elc.roa
Signing time: Fri 12 Aug 2022 18:49:41 +0000
ROA not before: Fri 12 Aug 2022 18:49:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.217.162.0/24 maxlen: 24
91.238.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:64:04:e6:e9:2a:99:68:65:ea:61:8c:43:58:ea:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Aug 12 18:49:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fad762abe8a37b88d4c71248dd32c58289f91257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:d5:3f:87:95:4c:de:cb:82:bf:ba:14:c6:
3a:88:e1:09:9d:dd:33:35:9f:49:e2:f8:13:93:21:
20:37:3d:11:4e:87:31:99:32:83:6c:9a:48:3f:da:
40:01:68:92:76:39:a2:78:fb:73:fa:ba:c5:7f:37:
46:5d:7c:ba:96:d7:30:7d:58:ba:48:bb:86:98:fc:
19:d8:e0:1e:d5:cd:86:8d:bd:15:c2:ce:2f:39:47:
30:d2:7d:e0:d0:51:0c:6f:6c:e4:1f:43:c7:41:bc:
85:5e:09:4b:17:30:6c:31:ba:be:68:de:f1:bd:b1:
bb:fa:a7:1d:b9:6d:86:13:70:ad:da:79:f3:a6:9d:
df:4a:24:11:2b:77:2d:b3:e8:d9:04:e1:48:94:81:
c6:3e:cd:e5:18:88:a7:ae:4d:87:4e:55:ab:04:a0:
e3:e9:c7:94:35:fe:4a:fa:8b:dc:16:58:71:9a:8c:
66:e3:0e:94:a9:0d:a3:ee:be:f3:78:74:9f:76:b5:
a7:c3:7f:df:69:f6:8f:92:87:d1:d7:f1:7e:43:d9:
64:8e:8f:fe:3d:4b:b3:20:89:b6:fa:ae:db:90:17:
ed:53:27:a3:8b:62:e2:51:35:37:8b:3d:c4:cf:75:
99:a8:f7:b5:d7:b0:fa:a1:2f:41:74:76:3c:ff:1e:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D7:62:AB:E8:A3:7B:88:D4:C7:12:48:DD:32:C5:82:89:F9:12:57
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/1-tdiq-ije4jUxxJI3TLFgon5Elc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
91.238.213.0/24
Signature Algorithm: sha256WithRSAEncryption
89:db:8b:4c:98:bd:82:4c:79:10:85:04:27:5b:22:60:bb:19:
f0:3c:c4:c0:66:81:7d:37:56:cc:5a:74:6c:39:f6:3b:cd:4f:
88:f2:e4:54:fe:ee:db:99:93:25:0b:bc:51:db:0f:62:aa:49:
6b:2c:9d:c5:44:dd:a5:09:de:94:98:f8:2c:4a:ac:db:c1:da:
b2:df:29:6b:d3:09:8a:3d:5d:1c:98:cf:ad:29:fc:79:8f:51:
87:3c:d2:e2:33:51:bc:c2:80:51:34:3f:a8:de:ca:bc:5d:ea:
a2:e3:3f:44:69:00:7e:5b:d8:6f:d1:03:65:17:af:9c:78:de:
b4:ab:42:fc:26:6e:85:c3:bf:3d:28:f0:16:45:e1:04:3b:a9:
7d:ea:93:95:94:d2:5d:23:38:d1:cd:fb:8f:56:23:c2:63:9b:
fc:38:db:f6:f1:29:1a:d7:c1:ec:31:d5:0c:58:65:18:fb:18:
67:a1:60:c6:db:f1:78:5a:d5:34:7c:e4:b8:16:73:85:5f:c3:
a2:aa:ab:86:3d:28:64:42:d2:b4:41:cb:cf:98:e8:d5:c7:bb:
cd:00:35:b0:32:06:e6:8c:53:23:47:4f:77:d8:da:87:ad:8c:
5a:80:0b:bb:aa:d1:7b:2a:bf:51:65:a6:3b:b0:b5:7e:de:ac:
53:15:a6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org