Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5IRlKFJkZTG6sI9EzQ2qmrRZUE4.roa
File: 5IRlKFJkZTG6sI9EzQ2qmrRZUE4.roa (raw, json)
Hash identifier: LxP55Pa5rjc1/oyCzxI+xrsLv1Zb9r9XPmHbC7fDSa4=
Subject key identifier: E4:84:65:28:52:64:65:31:BA:B0:8F:44:CD:0D:AA:9A:B4:59:50:4E
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 138BC1EE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5IRlKFJkZTG6sI9EzQ2qmrRZUE4.roa
Signing time: Sat 01 Jan 2022 05:56:20 +0000
ROA not before: Sat 01 Jan 2022 05:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202960
IP address blocks: 185.147.48.0/24 maxlen: 24
91.242.70.0/23 maxlen: 23
91.242.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327926254 (0x138bc1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e484652852646531bab08f44cd0daa9ab459504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:1f:cd:68:ae:a5:fd:d0:87:9b:dd:05:22:
33:92:23:90:5c:c5:c1:78:9c:0d:02:76:54:af:6f:
b4:f9:7e:22:86:9c:b5:49:b4:9e:17:e7:31:12:c3:
df:57:35:79:9b:a6:57:4d:8d:df:86:82:61:13:aa:
b3:e5:cf:20:c2:0d:be:c6:71:a7:fe:09:b8:f6:0f:
1e:38:fd:a9:17:13:b3:83:3a:ed:64:25:75:09:96:
4c:9d:25:06:24:50:56:bc:75:51:7b:20:6f:be:a7:
1a:fd:b5:a3:fe:d4:e4:04:e2:db:c0:a9:cd:4e:d3:
b6:38:68:a4:5f:5f:c1:71:92:b5:36:fc:7e:2c:e8:
16:ac:92:76:b2:42:af:41:55:9d:bb:1f:11:c3:89:
0c:31:e4:62:35:79:43:b3:84:2d:3f:95:98:2d:cd:
1e:b6:3f:f4:1f:1a:de:e4:c0:17:5e:eb:d1:3e:6f:
be:99:7a:de:c8:bd:0e:c0:8c:b4:cb:0e:1b:de:53:
1c:5a:17:59:0b:d0:f3:63:cb:db:a5:1c:c7:b6:09:
aa:fd:f5:6d:2e:68:1d:3f:0c:d5:4e:c3:a3:56:59:
b2:3b:ae:0a:b7:b4:0b:97:c3:e3:07:e7:82:52:4f:
97:57:c8:07:8f:06:2b:72:d4:c9:34:85:9b:b2:a9:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:65:28:52:64:65:31:BA:B0:8F:44:CD:0D:AA:9A:B4:59:50:4E
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5IRlKFJkZTG6sI9EzQ2qmrRZUE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.70.0/23
91.242.75.0/24
185.147.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:aa:9b:75:ee:b3:ca:8f:c9:43:30:94:38:42:ee:5b:f8:22:
8c:28:dd:60:dc:2c:df:95:f1:71:0e:6d:c2:6b:10:12:49:39:
c7:64:fe:72:7f:d0:6a:6a:fd:85:03:67:34:6e:8c:14:c4:e2:
67:07:7f:3c:ec:9c:87:5b:77:0f:f6:5e:4a:3f:93:7a:87:5b:
5d:66:16:48:9c:4f:aa:d3:e6:9e:f8:38:7c:79:1f:c0:7d:25:
60:00:61:ea:93:f4:6d:ae:46:7a:b0:1b:a7:4f:72:81:07:a8:
ab:18:3f:74:bd:78:ce:4d:73:6b:3e:32:f2:55:a5:27:98:9c:
bd:e2:a6:1e:8e:f4:61:ef:8a:0d:15:f8:50:57:58:a6:f1:00:
d7:3b:e1:ed:81:2e:c8:07:dc:9e:62:61:c6:9f:f4:b5:5c:41:
e5:84:dd:b0:1e:e9:3f:5d:b6:5a:65:c2:bd:e4:7a:17:74:55:
f9:ce:d9:ce:83:81:f1:39:7b:61:e0:9b:17:c3:6c:63:b8:71:
52:42:1e:cf:e8:ba:95:32:f8:24:2f:ea:dc:f0:69:78:d1:83:
36:96:12:7d:c3:68:93:b3:f1:89:e0:c1:13:6b:2b:29:a6:3b:
5c:93:41:6a:6f:b9:c5:53:59:50:34:3c:51:0e:62:26:ab:b4:
2e:0f:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:35 2023 by rpki-client on console-ams.rpki-client.org