Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/uNnAd_uZ8yHuRtlhiYfIWe2K_88.roa
File: uNnAd_uZ8yHuRtlhiYfIWe2K_88.roa (raw, json)
Hash identifier: /mG+3hH72yWrR1M3xz3cEWitRmtK8Fp+icLyenwSJzU=
Subject key identifier: B8:D9:C0:77:FB:99:F3:21:EE:46:D9:61:89:87:C8:59:ED:8A:FF:CF
Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial: 016C6D
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/uNnAd_uZ8yHuRtlhiYfIWe2K_88.roa
Signing time: Sun 08 May 2022 18:44:39 +0000
ROA not before: Sun 08 May 2022 18:44:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31725
IP address blocks: 91.201.244.0/23 maxlen: 23
91.201.244.0/22 maxlen: 22
91.201.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93293 (0x16c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Validity
Not Before: May 8 18:44:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8d9c077fb99f321ee46d9618987c859ed8affcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:b4:0a:7c:b6:10:00:05:b2:94:35:eb:13:
b5:8e:e6:21:78:f0:d6:1e:59:e7:28:3c:a3:92:dd:
94:1b:4b:67:24:b1:07:2c:9b:a9:f0:27:28:ac:21:
03:b6:55:29:ea:c7:9c:50:0f:d9:fd:ba:20:e9:d2:
b1:cb:08:e0:9f:16:ad:f9:25:8f:9b:d8:a8:60:c0:
79:4d:a7:d3:79:6d:10:ea:1a:b0:99:05:ca:24:42:
f7:ba:78:75:7d:4d:38:b7:a0:ad:ee:86:9d:84:11:
12:57:84:f9:73:1f:d5:71:80:cc:c4:7c:55:9f:61:
ce:cc:1d:88:fb:9e:e8:3b:6e:52:e6:54:17:13:75:
6a:7d:16:22:e8:6c:9d:6c:61:06:f4:54:b7:9e:d5:
d2:c0:62:fc:e0:0b:c1:cc:8d:e7:a6:90:1b:f5:91:
48:c5:fc:5d:2f:44:be:ec:80:c7:6f:15:2e:77:3a:
23:f4:a4:79:4e:00:34:eb:9f:47:51:c6:eb:be:14:
48:6e:cb:d0:2e:70:31:c8:45:e9:ff:55:a1:80:36:
3d:d8:0b:f3:49:0b:d2:27:fd:93:cb:3f:a2:5d:c1:
c3:c6:b4:af:a0:3a:d5:32:ad:0a:b3:22:43:41:8a:
12:94:af:17:0d:18:7f:e5:c9:92:62:1c:d8:10:eb:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D9:C0:77:FB:99:F3:21:EE:46:D9:61:89:87:C8:59:ED:8A:FF:CF
X509v3 Authority Key Identifier:
keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/uNnAd_uZ8yHuRtlhiYfIWe2K_88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.244.0/22
Signature Algorithm: sha256WithRSAEncryption
81:29:8c:9f:18:de:71:e8:d9:93:f8:69:96:79:e8:45:eb:72:
55:52:58:b7:3c:0b:4c:13:96:09:15:ec:4d:5b:31:c1:b6:7d:
9b:5b:f2:38:aa:01:34:47:b7:a5:02:6c:f8:44:73:3a:d3:c3:
1f:2a:01:de:c0:9b:7e:10:b2:44:fa:9c:a1:d6:78:90:87:36:
94:db:4d:49:54:34:74:51:ef:fc:63:56:9c:dd:7b:62:77:cd:
2f:b0:79:b2:85:61:5a:a1:92:29:41:4d:4b:4a:64:ef:59:f1:
59:46:16:64:0c:cf:3e:53:69:34:72:0d:e1:b1:8e:7f:1e:1c:
80:33:20:2f:e3:01:5d:57:f6:36:47:2e:58:68:b9:92:42:e3:
53:f4:34:06:50:21:fe:4f:57:ef:c0:c1:07:da:3b:f5:07:c7:
61:b6:ec:22:e6:86:47:87:6b:1a:3a:a9:cf:76:0d:41:73:99:
47:1f:af:77:78:2e:cf:34:96:73:b7:6b:80:58:f0:a8:46:c8:
e8:4d:f3:e9:5b:3f:a5:2c:43:9e:0f:f1:21:4e:22:00:09:25:
2d:d2:e5:0c:25:ff:d8:ee:0e:4a:4d:6a:ec:d5:0e:bc:54:2d:
fc:13:b3:66:70:4d:8b:af:8f:bf:e7:b8:ba:ff:54:25:e8:e2:
5a:4b:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:33 2023 by rpki-client on console-fra.rpki-client.org