Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bc1qVOUxX5p8PE_OjZdJAoJ5ZXQ.roa
File: bc1qVOUxX5p8PE_OjZdJAoJ5ZXQ.roa (raw, json)
Hash identifier: UxGKglgBOml4cl7qdYs6ieVhDnyqAuynI21DWYBbo0o=
Subject key identifier: 6D:CD:6A:54:E5:31:5F:9A:7C:3C:4F:CE:8D:97:49:02:82:79:65:74
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0183B351FBE528D5ED570EFC23F016B17872
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bc1qVOUxX5p8PE_OjZdJAoJ5ZXQ.roa
Signing time: Fri 07 Oct 2022 16:40:38 +0000
ROA not before: Fri 07 Oct 2022 16:40:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 91.242.105.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:51:fb:e5:28:d5:ed:57:0e:fc:23:f0:16:b1:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 7 16:40:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dcd6a54e5315f9a7c3c4fce8d97490282796574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:11:e5:7c:15:a4:ff:fc:40:76:48:ad:d1:
47:fc:66:c8:3f:9d:94:f3:7e:1f:a6:06:71:d0:eb:
18:cd:0e:8c:5a:71:e3:ef:65:31:2c:83:1f:b5:e2:
2c:27:a5:ba:ce:e3:b6:22:ec:c8:6c:7c:b3:b1:f9:
92:0a:05:b6:42:0d:8f:f7:35:b8:ce:5f:4b:4e:db:
bc:01:d1:35:34:a4:72:92:7a:3e:f4:7d:ee:d7:91:
f3:4f:c7:0e:16:9d:fe:e5:40:94:6c:90:21:89:b8:
04:07:30:5f:a7:58:ad:e3:c6:eb:20:1e:fa:41:fa:
43:5c:91:85:75:d3:db:0e:15:58:1e:b0:d6:26:97:
1e:8a:80:21:fc:df:73:8c:1f:c8:1e:67:02:0c:cd:
31:ed:24:ab:b7:5c:f5:19:c3:55:92:16:58:12:90:
b0:da:f9:b7:73:e1:60:48:8e:3d:42:90:53:62:f0:
b2:4d:de:3d:0b:43:ca:e7:e6:89:23:3d:0c:9f:ad:
fd:40:8e:a5:47:ae:ac:9c:9e:1d:8f:b6:16:bd:64:
42:df:00:3a:9c:c0:c8:dc:d2:d8:e7:78:5a:32:c7:
42:1f:a3:37:88:f0:7b:d0:cb:a5:10:61:75:8a:42:
4f:3b:a8:72:16:7f:f7:47:4e:15:80:e6:97:72:67:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:6A:54:E5:31:5F:9A:7C:3C:4F:CE:8D:97:49:02:82:79:65:74
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bc1qVOUxX5p8PE_OjZdJAoJ5ZXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:e5:74:4d:60:ab:3a:95:2b:f7:39:c7:03:7b:02:ae:7c:58:
06:f3:d1:3a:ba:60:f1:d3:54:bd:a8:7a:9d:8a:3a:49:0c:3d:
af:6d:00:1b:fc:99:be:48:04:f3:91:e9:e6:f6:23:63:25:b5:
75:ff:22:31:ef:bc:9b:ec:71:be:7a:dd:4a:5e:a5:d6:70:01:
db:e5:9d:b7:56:eb:95:a3:89:ff:e5:b4:67:1e:3b:03:d8:24:
15:eb:a1:56:44:04:fd:87:cd:cc:e2:6a:7b:52:3e:35:14:5e:
2a:74:60:bb:df:57:32:50:f4:37:c2:2e:1a:28:7a:dc:ae:b1:
fc:a6:cb:5a:ce:f0:fa:82:8e:77:ba:84:e2:c5:fd:3c:46:dd:
ba:3b:5d:df:5e:08:b9:c2:a7:2f:9d:5e:58:f3:4f:3c:14:9a:
11:c6:43:da:82:5f:ce:cb:ac:f2:46:9d:30:e6:4d:1f:b2:f6:
dc:14:f0:be:fc:f0:ca:01:47:22:ac:99:a9:c5:89:ea:3f:be:
3f:3e:61:64:90:47:61:e8:1b:ca:b3:6c:47:cd:0d:6d:cc:af:
2a:93:0c:d2:ea:3d:f2:8a:96:c6:82:d3:0b:6d:2d:3e:6e:48:
54:56:97:76:c0:61:2d:41:d6:60:7e:ed:35:98:1f:99:d1:5e:
ff:30:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org