Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K9-ZKxAxtYLrmksZbRovaWe5qI0.roa
File: K9-ZKxAxtYLrmksZbRovaWe5qI0.roa (raw, json)
Hash identifier: 8KE/CQDTNxVoDOGPMgSRySCU7kXf2OaQ7AcOSBV2iqs=
Subject key identifier: 2B:DF:99:2B:10:31:B5:82:EB:9A:4B:19:6D:1A:2F:69:67:B9:A8:8D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 145485D5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K9-ZKxAxtYLrmksZbRovaWe5qI0.roa
Signing time: Fri 18 Mar 2022 18:18:07 +0000
ROA not before: Fri 18 Mar 2022 18:18:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62281
IP address blocks: 91.242.86.0/23 maxlen: 24
91.242.88.0/21 maxlen: 24
91.242.96.0/24 maxlen: 24
91.242.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341083605 (0x145485d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 18 18:18:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bdf992b1031b582eb9a4b196d1a2f6967b9a88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:07:5f:4a:39:0c:4b:57:eb:fe:c2:27:a2:
3d:c5:f5:f3:df:21:d3:18:91:e6:4a:15:02:01:6c:
48:3f:f7:f5:4d:23:d7:50:a5:2d:e6:b4:f1:2b:82:
70:da:55:50:32:a4:de:1f:38:0b:58:b4:c5:36:79:
a7:73:8c:d5:71:65:43:53:8e:80:56:cf:07:50:13:
84:d2:f1:d5:c0:62:c3:ce:b1:fe:c3:4e:2a:5e:3f:
53:d7:09:c8:e6:7d:0c:5b:55:94:be:f2:40:b7:4d:
1f:d8:a7:e5:5c:8c:68:0d:bd:d3:15:74:d1:c8:af:
70:87:eb:23:1f:86:c6:9c:e3:9b:71:f2:fd:89:61:
21:db:fd:2f:7a:9e:4a:00:11:a0:85:64:0f:bd:84:
c3:1e:4d:ce:39:8c:6c:8a:0a:20:6b:9a:c5:3c:5b:
5b:a0:2f:fd:65:a2:80:9a:a9:eb:21:8e:0c:94:db:
1a:da:63:ac:c6:e9:d7:8a:4e:0e:55:c2:ec:00:f5:
15:a8:cd:bc:56:2e:4c:23:8d:25:c9:57:33:92:b2:
8f:9b:cc:b0:13:41:0c:9b:8f:3c:40:bc:6a:17:e8:
ee:d1:14:52:0d:bb:54:03:50:f2:93:35:11:70:8d:
7b:71:48:d9:e1:16:dd:53:9f:b6:bd:7f:8e:21:0a:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:99:2B:10:31:B5:82:EB:9A:4B:19:6D:1A:2F:69:67:B9:A8:8D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K9-ZKxAxtYLrmksZbRovaWe5qI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.86.0-91.242.96.255
91.242.106.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3e:20:ff:f6:06:01:f9:3c:08:3c:8c:a9:a8:3f:99:21:54:
15:41:52:40:54:26:50:28:85:f0:3f:ed:b5:8d:39:e7:7e:bc:
36:14:8a:bc:96:9e:0a:ca:03:94:3f:8b:a9:e9:85:88:da:ea:
8e:a4:a3:f4:b7:8d:d6:7a:ca:ec:0e:0f:c2:a9:58:35:4e:09:
20:b3:a6:30:d2:06:1b:9f:09:a9:a2:bf:99:85:90:1d:8a:74:
6f:c0:86:44:d0:e3:6c:23:f4:a6:50:d2:67:dd:21:c6:97:fc:
58:16:05:44:71:55:3c:b4:3e:26:1b:d4:d6:35:21:63:41:b1:
7f:5c:1c:0f:91:d4:b2:84:75:90:3b:d5:f3:cd:a1:18:99:48:
69:9e:cf:d5:66:a1:cd:53:45:f8:0e:e3:e7:9e:75:f8:1d:74:
58:17:f2:7b:d2:bf:e8:b8:77:88:35:c0:b7:9a:a4:de:88:42:
a9:85:aa:b6:ba:9d:a7:25:f9:53:96:f4:49:73:57:b8:d3:a2:
ea:9a:6f:22:67:1f:18:f0:8a:c7:4e:f7:cf:bb:6c:35:31:fa:
3b:4f:a2:58:31:e6:06:55:8f:12:d1:97:c1:2a:d0:49:07:d7:
ea:99:ac:cc:9a:32:b8:4e:71:5a:64:7f:d9:53:17:20:ef:02:
67:80:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org