Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/XzmrRqNPAJ05727LIVhe4eQsfKA.roa
File: XzmrRqNPAJ05727LIVhe4eQsfKA.roa (raw, json)
Hash identifier: HRIE4as7tOlNU507LPKka7aum7rfJ3fH3iY7mMkp+FU=
Subject key identifier: 5F:39:AB:46:A3:4F:00:9D:39:EF:6E:CB:21:58:5E:E1:E4:2C:7C:A0
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 0437AEA2
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/XzmrRqNPAJ05727LIVhe4eQsfKA.roa
Signing time: Wed 11 May 2022 13:57:02 +0000
ROA not before: Wed 11 May 2022 13:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.217.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70758050 (0x437aea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: May 11 13:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f39ab46a34f009d39ef6ecb21585ee1e42c7ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:85:5e:d3:f7:6a:03:b5:95:96:10:dd:b1:
f9:1e:f8:b8:e2:09:10:7a:2c:8a:02:f3:66:68:44:
e5:c3:96:08:08:34:bd:e9:01:c0:f4:a2:20:4d:7f:
23:00:3a:bf:51:65:4e:28:e5:af:4d:69:47:e6:e8:
7e:f0:05:04:f7:65:35:04:11:1f:db:bc:61:a1:79:
61:1e:e7:9b:43:0c:5d:b0:97:c1:cf:34:5e:ad:3b:
d9:dd:ab:43:2f:1f:f8:9a:04:98:96:43:a3:5d:60:
23:10:fd:ec:c2:dd:69:af:e0:82:8a:b3:0e:42:23:
df:8e:f1:c5:39:b9:5f:bf:ca:8b:ee:42:f7:e5:e2:
18:fb:0f:a2:89:a5:f8:28:d6:e0:35:1c:00:0a:59:
e6:54:c6:76:1c:ba:dd:d2:83:60:92:8c:fc:66:85:
fe:82:fd:67:bd:41:f9:29:cc:fc:ac:de:51:a5:49:
7b:0f:d6:9b:d3:f7:2c:4d:47:56:b1:56:94:22:55:
a3:66:6d:64:55:1a:9f:74:45:be:0d:2d:26:1a:c4:
5b:e2:6f:b2:df:7b:34:19:5b:26:c0:80:c6:58:cc:
f6:a7:4a:59:6d:37:9b:d9:d4:cc:4b:e3:c4:97:b5:
9c:42:84:19:8a:d3:2a:26:da:e6:b2:4f:75:ab:e9:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:39:AB:46:A3:4F:00:9D:39:EF:6E:CB:21:58:5E:E1:E4:2C:7C:A0
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/XzmrRqNPAJ05727LIVhe4eQsfKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
be:81:93:b0:f8:ff:b8:1d:f0:fb:39:73:fd:09:06:a6:3b:35:
b8:81:79:dd:b2:20:87:b3:da:64:99:bb:0f:21:6f:59:df:c5:
eb:b6:50:cc:e2:f8:55:71:ed:3e:dd:49:56:d9:c4:98:20:2d:
cb:76:77:71:cc:42:60:24:17:da:eb:54:e8:63:d6:ed:1f:8f:
0a:c1:0a:a1:b7:ef:df:3b:6f:7b:00:e3:36:e1:97:48:60:e5:
8e:00:71:d6:16:52:a1:0d:3b:79:fe:dc:5c:a3:bf:4a:7e:5b:
ec:11:72:ac:68:9b:b4:60:be:94:ee:72:ac:97:ff:4a:d3:33:
07:16:c7:d5:ba:bd:6b:40:b6:7f:f6:4e:7c:9b:49:a2:b2:bd:
93:7a:33:7b:3e:5f:d3:78:a1:cf:eb:af:c7:0e:85:0c:a9:c1:
d5:55:a5:3c:12:1c:96:43:8f:e1:24:ad:8c:99:08:dc:db:66:
3a:cb:a9:45:30:55:71:3c:ab:02:4b:da:28:6b:e0:29:c7:cf:
00:0a:ea:4d:d8:0a:39:69:92:5c:1a:7d:92:e0:82:bc:84:b7:
48:af:c2:49:3b:de:1f:d3:dc:12:12:89:a3:b8:38:70:6c:9e:
a0:65:25:5b:56:f5:bd:3e:22:f3:9f:47:92:bc:d2:9a:84:ad:
8b:2e:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org