Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/1MEkKERswMMtpljXbTjTt07UWTU.roa
File: 1MEkKERswMMtpljXbTjTt07UWTU.roa (raw, json)
Hash identifier: u8YvJx+I9qc3nK8s6cIBf1kqPuz95b/UHtqx8v7JVbA=
Subject key identifier: D4:C1:24:28:44:6C:C0:C3:2D:A6:58:D7:6D:38:D3:B7:4E:D4:59:35
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 03149F40
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/1MEkKERswMMtpljXbTjTt07UWTU.roa
Signing time: Sat 01 Jan 2022 13:59:17 +0000
ROA not before: Sat 01 Jan 2022 13:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23959
IP address blocks: 91.217.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51683136 (0x3149f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4c12428446cc0c32da658d76d38d3b74ed45935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:2b:03:51:c5:d4:b7:3d:38:67:93:42:34:
ae:f6:86:3a:60:8e:74:e8:ee:cc:92:7b:d4:73:c4:
84:63:24:97:04:7d:cf:07:c4:0b:22:cc:57:71:35:
dc:3d:1a:c0:83:ae:9e:4d:ab:34:16:2a:75:d0:0a:
10:98:e1:48:18:d8:39:c6:65:1f:b6:9e:e3:f7:4e:
e9:d9:22:9e:99:ff:81:63:cf:c9:87:4c:f9:6f:78:
1c:6d:3e:f5:ba:35:2c:a9:b6:26:31:d7:ad:81:c7:
96:a3:f0:97:ef:a1:5d:46:79:d6:e9:a2:b6:7a:c9:
5f:0c:e8:67:b6:df:42:33:ad:5b:b8:28:11:6e:a4:
1a:17:38:a9:3a:28:cf:54:d5:5e:b9:94:6e:48:09:
53:37:95:6b:38:64:53:58:6c:85:21:ec:9e:49:5c:
a5:40:1a:de:e9:41:0f:66:33:2e:a9:1b:2f:ea:a6:
05:8f:48:05:f7:aa:d7:b6:67:3e:18:1b:90:88:1f:
30:30:32:31:a5:80:df:d1:8e:c5:b4:fe:d1:34:1d:
ed:a7:4b:0a:45:34:31:73:5d:c8:07:e7:f3:25:ea:
15:e3:1a:51:a5:c8:32:a4:95:38:12:da:43:46:bc:
9c:7a:2d:7d:87:64:82:d4:44:c8:b4:06:29:18:43:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:24:28:44:6C:C0:C3:2D:A6:58:D7:6D:38:D3:B7:4E:D4:59:35
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/1MEkKERswMMtpljXbTjTt07UWTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0c:b6:5c:4c:59:2b:84:be:00:d4:93:e7:48:cf:0c:96:63:
72:8d:86:2b:9d:2a:0b:d9:51:04:0b:6b:ae:46:95:82:ac:68:
fa:01:10:c3:00:e3:3f:ad:d4:47:b9:4a:8d:fc:e2:ff:1c:cf:
20:c1:a0:88:84:a1:8c:c9:ac:14:e4:70:8d:a1:c0:35:27:79:
21:cf:d9:68:c4:a5:17:5a:75:36:64:6a:2d:3f:9d:d6:ae:78:
63:50:ca:fd:8d:76:b2:02:9a:e9:84:27:39:2e:2a:83:6e:60:
41:66:2e:8c:cd:8d:13:9a:cd:ab:71:42:13:57:ec:ab:ea:50:
ef:0c:5f:bc:4c:f0:e3:af:48:ff:0f:6a:10:55:cd:d8:05:c8:
ce:64:ce:e8:b0:76:3c:45:10:35:2d:d3:18:5a:2e:46:c5:04:
c4:0b:b5:f3:02:c4:9c:66:81:cc:a3:2d:c7:a9:86:3e:84:40:
29:9b:b0:55:99:88:01:c3:be:b5:41:78:a4:48:58:ec:bc:05:
83:e3:81:2c:ac:c0:81:9f:16:5c:7d:dc:69:77:ee:02:0d:f7:
22:b6:a1:38:de:ef:5b:7b:b5:4d:e4:57:5c:e7:e0:bb:6e:3d:
a2:e5:ad:74:d2:cd:88:4f:42:89:27:65:11:e7:7c:1b:35:c0:
07:88:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org