Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/kkKAplGj2Vp2XK5hAGrhOUw7Ih0.roa
File: kkKAplGj2Vp2XK5hAGrhOUw7Ih0.roa (raw, json)
Hash identifier: lcHl/4KO8PWaeJ+Wdp2tYFeO3ky5N9jPoWcLOzfFnvE=
Subject key identifier: 92:42:80:A6:51:A3:D9:5A:76:5C:AE:61:00:6A:E1:39:4C:3B:22:1D
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 0315957F
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/kkKAplGj2Vp2XK5hAGrhOUw7Ih0.roa
Signing time: Sat 01 Jan 2022 13:59:18 +0000
ROA not before: Sat 01 Jan 2022 13:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40065
IP address blocks: 91.217.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51746175 (0x315957f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=924280a651a3d95a765cae61006ae1394c3b221d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:f4:0b:1c:bc:88:7c:c8:16:85:19:e6:f8:
85:2d:2b:ed:86:2f:21:e1:75:e5:ae:7e:c8:cd:24:
c8:01:36:04:2e:1b:2b:95:d8:5e:86:ca:67:b4:1c:
bb:02:ab:71:88:8e:3f:a0:4a:e6:14:3b:62:a0:e7:
36:fa:d3:45:d1:8a:ec:b5:37:2e:76:98:1c:96:72:
75:69:5c:8a:0b:46:aa:ec:e7:5b:5f:ad:e2:fb:81:
27:ea:6b:76:fd:30:cc:92:02:d7:82:cc:31:c2:8d:
47:f6:ff:b6:8a:31:34:c7:1f:a0:89:7b:37:03:db:
a7:ae:64:91:33:9c:ed:d3:bc:65:87:76:2b:cc:1d:
d6:aa:15:e1:28:38:68:1b:41:ed:a7:7a:0a:00:f4:
21:9d:15:94:21:bc:b1:7c:56:95:f0:4d:0e:a9:d8:
ee:27:4b:ca:e7:4e:cc:85:35:54:ff:4b:f3:51:c2:
c7:58:ff:d1:6f:1b:e2:fe:d2:02:40:5c:cc:95:8b:
d4:b7:7e:72:32:d7:0f:2f:6c:fb:e4:c4:5d:70:c4:
78:a3:d3:9c:42:f0:ec:54:e9:e3:a2:4c:41:89:88:
06:f1:87:a8:f1:43:45:70:63:5e:fc:bf:03:ad:f3:
36:d0:85:fb:24:e1:d7:d0:31:6e:62:0b:47:37:ef:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:80:A6:51:A3:D9:5A:76:5C:AE:61:00:6A:E1:39:4C:3B:22:1D
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/kkKAplGj2Vp2XK5hAGrhOUw7Ih0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.139.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c2:51:ba:95:cf:69:16:37:40:4c:f0:b4:c1:3e:ab:a8:c6:
d4:eb:26:2e:39:2a:43:b7:99:81:1b:05:70:49:b1:66:44:28:
15:60:48:03:6e:13:d1:cf:1f:44:af:0b:fa:7d:ab:95:10:2c:
a3:de:4a:d4:b0:1c:16:9d:98:2b:04:49:10:78:c3:3f:f1:e6:
61:d9:5d:9e:4b:6f:8a:b1:8e:55:82:c7:64:c1:9b:33:f2:3e:
38:5c:5e:37:05:ed:9c:7f:b9:eb:ba:71:d5:05:b4:a1:8b:f5:
af:bf:ac:94:23:d8:61:0a:b6:bc:3f:29:3a:a7:bb:fc:cf:24:
c1:21:b6:24:7b:3a:14:7e:ac:44:31:4f:d8:e8:91:dc:7d:fc:
c5:01:15:dc:09:ad:04:3b:40:f1:51:39:f6:4c:17:db:b4:6e:
06:54:42:70:44:7c:9b:b7:5e:76:1c:04:42:e6:15:40:3f:6e:
de:de:45:04:cb:1a:3b:f2:81:e1:61:f5:cb:54:9d:bb:ef:fc:
f1:15:d7:49:26:b1:05:d1:a7:8c:af:49:fe:3b:cc:58:d5:4d:
9f:1c:4c:0e:36:3b:c1:0e:1f:af:80:0b:61:96:ef:20:8b:20:
10:3a:4b:6e:fc:2f:47:20:a9:0e:f6:22:ab:a1:90:c0:b0:ae:
7f:c7:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org