Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/S0qOyKCW6r2xGzp5IsMoIWzakCc.roa
File: S0qOyKCW6r2xGzp5IsMoIWzakCc.roa (raw, json)
Hash identifier: sLOM5Zjzw0jbgJ0Nn2ZOsidWd5TMqu8EVObD24sT550=
Subject key identifier: 4B:4A:8E:C8:A0:96:EA:BD:B1:1B:3A:79:22:C3:28:21:6C:DA:90:27
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 12A724DB
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/S0qOyKCW6r2xGzp5IsMoIWzakCc.roa
Signing time: Sat 01 Jan 2022 05:03:39 +0000
ROA not before: Sat 01 Jan 2022 05:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9155
IP address blocks: 91.221.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312943835 (0x12a724db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Jan 1 05:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b4a8ec8a096eabdb11b3a7922c328216cda9027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:83:99:9d:38:0b:ba:16:e3:4d:27:75:97:
4e:41:ac:8e:09:1c:e1:10:58:d0:12:1c:8d:2b:8f:
da:3c:99:f5:9a:af:01:92:e6:0d:78:8e:93:79:5d:
0f:7f:d9:a7:d9:4a:7e:f1:0a:ea:26:0f:78:6d:2a:
a5:42:7a:47:bd:11:3e:f2:dd:37:52:eb:98:34:2b:
72:b6:77:25:71:b4:67:a5:ca:93:2e:e2:74:37:95:
dc:dc:b5:2f:8b:ac:0e:82:1e:2e:37:c9:d3:d9:0c:
96:30:81:6c:dd:4f:a6:4d:fb:be:b2:60:26:b3:dd:
f6:ad:ef:ae:2b:c9:b2:d0:90:ad:c4:40:8b:47:76:
29:a9:20:24:6a:be:3c:61:bb:36:31:87:d2:9d:76:
46:c5:df:46:12:31:10:0b:1b:d2:98:14:16:1a:a4:
17:91:51:f7:1d:10:14:4e:36:73:1a:df:df:4d:55:
63:66:fa:5e:05:0c:78:7a:bd:5c:55:15:bc:46:2c:
2c:e2:04:90:ef:67:ab:c2:46:a9:22:e2:bf:bd:b9:
de:dd:30:de:3f:9c:8b:89:02:8d:0f:03:d1:9d:12:
f3:11:cd:ac:1e:ee:f9:b5:45:d2:14:c1:75:9d:1c:
85:b1:13:72:bd:07:e7:ae:41:5e:9c:56:98:d7:36:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4A:8E:C8:A0:96:EA:BD:B1:1B:3A:79:22:C3:28:21:6C:DA:90:27
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/S0qOyKCW6r2xGzp5IsMoIWzakCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b1:90:a9:b1:cb:76:67:2b:b1:2e:c3:e9:2f:a3:5f:1e:cd:
7c:e0:bf:83:ab:c3:7f:f1:c1:c4:ce:d7:71:2f:c3:17:05:0a:
43:fb:f4:39:c9:7c:53:c0:3b:9e:ff:d6:ea:05:ee:ac:92:cd:
5a:c9:39:09:f3:48:b4:f2:94:12:b2:09:0d:b6:77:7b:cd:80:
d6:98:38:b7:18:5b:7a:4d:08:06:d1:d6:2b:4c:bd:34:0e:69:
d0:dd:d3:9e:bd:bd:c2:01:94:e5:40:8b:ce:ab:5d:aa:af:da:
e1:b4:85:06:e4:27:74:84:83:cd:7a:82:a7:07:19:cf:03:f5:
77:cc:2d:cb:ba:3a:d3:ae:6d:6a:0c:43:50:33:2c:3f:47:9e:
64:32:46:39:da:eb:f3:2b:0e:3a:a1:3e:8a:46:8d:62:64:12:
c8:4b:93:31:02:3e:fb:29:e6:61:2e:3a:c0:26:31:8d:a4:ff:
27:d8:40:14:da:6f:9c:60:f7:0f:96:10:9f:3b:af:82:3c:70:
ca:2e:95:88:13:bf:75:25:a3:36:92:1f:38:5b:47:0a:ac:48:
5b:17:02:90:a4:bf:8f:43:78:28:4d:a8:69:96:3b:4e:d0:b6:
1d:8b:48:97:e7:56:6c:23:3f:18:d9:e9:6c:8b:69:55:10:6e:
41:0e:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:34 2023 by rpki-client on console-fra.rpki-client.org