Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kD7rsTjliQ4U4tiEuGCyvZDdygY.roa
File: kD7rsTjliQ4U4tiEuGCyvZDdygY.roa (raw, json)
Hash identifier: aO0pvDp+tI46YyImdx0lvVNdpb5rrLo3T97QtV+ZwlQ=
Subject key identifier: 90:3E:EB:B1:38:E5:89:0E:14:E2:D8:84:B8:60:B2:BD:90:DD:CA:06
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0183B351FB1332FDC704090AD49D0B1690DD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kD7rsTjliQ4U4tiEuGCyvZDdygY.roa
Signing time: Fri 07 Oct 2022 16:40:37 +0000
ROA not before: Fri 07 Oct 2022 16:40:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.242.105.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:51:fb:13:32:fd:c7:04:09:0a:d4:9d:0b:16:90:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 7 16:40:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=903eebb138e5890e14e2d884b860b2bd90ddca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:d2:0d:b3:96:23:da:5b:c3:37:f6:b6:a1:
b5:08:26:b0:04:3e:09:6f:ae:df:27:48:ba:00:dc:
25:28:2f:a9:60:b0:c1:43:de:51:71:9b:75:f5:f3:
f9:12:e9:ef:2e:40:ea:ad:82:5f:ea:04:9c:c7:c5:
f5:9f:23:09:02:26:11:01:5a:48:3a:76:0b:83:71:
7b:36:02:70:2c:a6:35:1c:12:f8:06:38:82:3b:5f:
a3:4b:43:35:6e:4d:2f:3f:d6:10:66:fa:e9:25:c7:
39:47:b8:9a:e6:ec:5b:38:d9:ff:cd:3a:9f:ed:13:
5d:93:3f:b2:e8:c4:7a:61:40:6e:9e:e4:11:e4:08:
76:33:f9:a9:cf:7a:7b:dd:f1:92:a4:e8:2e:cc:7b:
e1:a4:38:8b:11:00:a7:d7:47:f4:33:22:59:75:34:
dd:a5:03:08:01:a7:c3:7e:71:e8:31:89:f9:49:7a:
03:c8:0b:60:4b:d2:5a:86:bf:83:23:8d:e3:0d:06:
86:51:32:2c:43:7b:bb:87:ca:94:aa:09:a6:17:c1:
38:04:9b:7b:a8:55:d1:31:b6:38:26:4a:46:3c:ca:
45:20:64:bb:ce:8e:10:f5:77:22:1b:6a:88:65:26:
5c:59:52:58:e7:a1:f8:3f:4b:18:96:fd:ea:5e:ae:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:EB:B1:38:E5:89:0E:14:E2:D8:84:B8:60:B2:BD:90:DD:CA:06
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kD7rsTjliQ4U4tiEuGCyvZDdygY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
Signature Algorithm: sha256WithRSAEncryption
09:36:f2:68:f2:ae:49:d3:d5:a4:4f:bb:cd:b0:9e:ca:44:91:
61:fe:48:3d:a1:ad:cb:00:79:37:d6:3d:42:23:2c:4b:15:fe:
00:f9:69:ca:7b:24:6d:3f:d9:fe:c7:3f:05:12:e6:11:d6:c9:
4a:40:ce:42:83:45:da:49:53:5a:b9:a4:de:6e:c6:59:0f:29:
ca:1b:13:33:38:8f:f4:3c:79:b1:a7:03:a2:da:3d:e2:37:3d:
29:f6:68:25:7f:10:4c:55:0e:55:bd:29:51:d3:eb:df:ce:b1:
51:bb:86:ff:e0:c2:bc:38:ea:99:33:81:d9:ba:0e:9f:f4:a1:
00:75:2c:a1:72:8d:69:09:c8:e0:c6:ec:53:73:02:a1:23:19:
37:1c:98:27:4e:99:8d:b4:94:73:67:e5:3e:58:52:fe:0c:94:
05:74:26:e4:64:c0:3d:11:74:cd:b0:2e:0b:a7:a8:b5:26:ff:
b5:b9:0f:01:12:2b:1f:4a:81:f7:e8:05:2c:67:e7:84:2e:23:
ef:c7:72:98:e8:01:75:76:4e:df:e8:35:58:cd:c2:5d:fe:bb:
59:b3:d3:94:ab:79:b8:a0:af:2c:af:7a:04:a5:b4:70:a5:c8:
dc:f2:e2:01:87:f0:b8:94:4a:60:85:9e:76:a5:9e:57:12:c1:
01:10:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org