Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ENtN2slKzcYn0T9eeAAoooTmNew.roa
File: ENtN2slKzcYn0T9eeAAoooTmNew.roa (raw, json)
Hash identifier: Q3scGI/ZqcS5eHCRIbOSntQY8Txf6bHuTovkubFKxk8=
Subject key identifier: 10:DB:4D:DA:C9:4A:CD:C6:27:D1:3F:5E:78:00:28:A2:84:E6:35:EC
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018405137BECC9E5CC72540C00A0177FE4E3
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ENtN2slKzcYn0T9eeAAoooTmNew.roa
Signing time: Sun 23 Oct 2022 13:41:13 +0000
ROA not before: Sun 23 Oct 2022 13:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.238.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:05:13:7b:ec:c9:e5:cc:72:54:0c:00:a0:17:7f:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Oct 23 13:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10db4ddac94acdc627d13f5e780028a284e635ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:fd:0b:fd:1f:08:d9:02:7d:23:52:34:9d:
51:7e:0b:1a:f3:24:5a:88:b6:bb:7e:14:96:20:2a:
a7:b4:82:c9:d7:2c:02:52:fd:a5:e9:25:7a:77:d7:
fd:1a:6b:df:ce:eb:fe:a2:9e:19:81:82:a2:84:52:
89:b6:0e:44:da:26:07:22:28:8c:0e:32:c9:13:bc:
64:a1:07:f9:60:12:9b:f0:57:bb:e9:40:c0:ae:98:
05:8d:97:0d:8a:bd:c0:6e:c0:ad:6b:99:6e:34:b5:
f3:b5:26:b3:16:37:cc:c9:6f:c0:90:73:2f:36:21:
77:8f:2b:e6:ea:c8:2a:74:41:45:8d:a2:31:d5:61:
4b:a9:9c:ff:89:6e:da:a6:58:48:51:ca:9d:58:eb:
05:90:5b:16:97:9b:5c:e9:3f:dc:2e:1d:e1:32:bd:
36:c7:bf:ed:6f:f3:72:1e:37:52:fd:e8:7e:16:23:
c9:13:a6:a2:ab:7c:2b:d6:8e:b8:41:29:e6:72:d7:
89:b5:e7:99:d6:d7:23:26:d7:0a:3c:d7:5b:4a:dc:
cb:77:2b:ea:1f:84:79:03:60:66:4f:23:d4:f7:c9:
87:ba:b1:f0:08:66:2c:f0:74:15:33:8c:e2:01:1d:
de:47:cc:29:44:b3:c2:d4:5b:78:60:e5:02:7f:aa:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:4D:DA:C9:4A:CD:C6:27:D1:3F:5E:78:00:28:A2:84:E6:35:EC
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ENtN2slKzcYn0T9eeAAoooTmNew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ad:ca:bc:a1:3e:36:79:67:92:c9:f4:04:2a:87:6f:60:c1:
ab:43:ce:3c:eb:4b:67:a7:10:76:e4:78:0e:fa:71:f4:5c:c8:
92:1f:f2:d3:72:da:ba:e1:fe:ce:df:8d:29:f5:78:4c:94:af:
00:79:6b:f3:ac:75:26:79:5c:8b:a1:ff:97:55:35:e1:cb:b9:
59:87:72:01:77:e5:bd:c1:d0:02:cb:44:97:ec:70:61:46:1c:
9e:43:29:4d:02:8c:79:14:c1:ca:ea:dd:a3:a0:12:e1:51:c2:
60:e6:32:e3:67:05:e6:80:49:c9:5d:1b:74:56:22:45:bf:cc:
26:89:b1:2a:7e:1e:07:2a:a4:0c:a1:cf:93:b4:27:b2:01:c2:
5a:5e:fd:a1:82:62:c0:ec:da:93:72:c6:78:81:82:88:74:2b:
e3:eb:de:78:ee:bd:3f:ce:4e:e3:da:8e:7e:3c:67:97:4c:a1:
1c:39:6c:52:21:dc:b4:35:e5:8b:b0:9d:15:a6:56:ae:ae:d9:
6f:0d:7c:d4:73:67:a5:90:1c:46:0f:be:35:c4:77:eb:89:18:
11:9e:aa:fb:01:80:3e:51:04:4c:4a:ea:68:c1:66:a6:15:da:
b2:22:13:d2:b8:0a:2d:f7:71:2b:a1:18:cd:cd:3f:0b:85:06:
a5:57:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org