Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/Oyvx30ZQLjEesykUgbsmXiJo20U.roa
File: Oyvx30ZQLjEesykUgbsmXiJo20U.roa (raw, json)
Hash identifier: lnJWHwPq6ZBGXgdM4b+3GTDW9nfgEQYvy/3y8Eeo3Ww=
Subject key identifier: 3B:2B:F1:DF:46:50:2E:31:1E:B3:29:14:81:BB:26:5E:22:68:DB:45
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 0183F4634C966AEEE12942B27D0FC452FA52
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/Oyvx30ZQLjEesykUgbsmXiJo20U.roa
Signing time: Thu 20 Oct 2022 07:54:51 +0000
ROA not before: Thu 20 Oct 2022 07:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199164
IP address blocks: 91.146.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:63:4c:96:6a:ee:e1:29:42:b2:7d:0f:c4:52:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Oct 20 07:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b2bf1df46502e311eb3291481bb265e2268db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:d9:83:d1:c7:ac:35:dd:18:37:9e:c6:a9:
d7:ea:b4:f4:e3:e3:92:2d:f5:cc:d5:8b:a2:6d:f6:
8f:01:47:d1:a4:74:c2:f4:7a:85:40:c7:b4:1c:63:
12:6f:d2:7d:cb:ce:88:73:8d:c6:80:f4:34:b6:c8:
02:5c:21:34:2b:65:0d:99:cc:9d:ef:77:f1:62:ea:
0e:7c:04:54:ab:5b:4d:1d:84:bd:d0:d1:18:4d:5b:
24:a2:ce:45:9a:bc:71:7d:74:90:62:c5:f0:a5:d4:
92:3a:50:4b:33:47:45:5c:13:18:54:d0:88:a1:9f:
fb:47:41:f0:24:ae:3c:5a:e2:e3:10:92:86:06:7a:
4a:e9:67:fd:35:fe:72:9e:3a:3c:af:a0:f5:3f:95:
5a:7f:77:51:4d:98:8a:01:92:ba:dc:88:77:61:43:
82:59:ea:9d:4b:7c:c8:d5:aa:dc:69:eb:8f:0f:b8:
f8:9d:c7:4f:f0:be:39:46:6b:2b:04:f9:01:ac:e6:
df:dd:e7:24:24:9a:5b:8a:4d:b1:3b:0b:82:b1:8c:
8f:77:bc:38:e4:bc:cd:6c:ad:1c:b8:66:24:a1:49:
59:02:6f:54:18:0d:f4:83:eb:4b:4c:af:df:d9:db:
9f:73:c2:fb:97:b8:04:28:01:60:2f:c0:0b:20:ca:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:F1:DF:46:50:2E:31:1E:B3:29:14:81:BB:26:5E:22:68:DB:45
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/Oyvx30ZQLjEesykUgbsmXiJo20U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.112.0/24
Signature Algorithm: sha256WithRSAEncryption
67:eb:d2:6c:2a:78:c4:a9:69:08:fd:f2:74:d9:65:57:44:2e:
35:c1:f3:f2:5a:df:ac:1c:bd:c9:c8:ef:fe:23:88:e8:5a:c6:
24:e4:80:c9:64:8c:09:9d:bf:52:5a:c4:29:f8:7b:d3:4b:73:
60:b2:6d:74:12:0f:38:3b:b4:b6:47:da:f4:27:6d:1b:b1:60:
1c:72:e0:b5:e4:6c:ea:bd:ad:fe:52:da:8f:18:2a:60:36:3a:
a9:e1:ec:1c:f4:14:5e:ef:93:c3:03:fa:e8:39:e6:f1:93:bc:
77:17:33:da:69:52:85:8c:c1:b0:50:27:9b:9e:57:54:6d:8c:
06:9a:3b:5c:e6:fd:fa:fb:80:09:fb:9c:71:f2:b9:f7:81:ce:
fd:fd:64:a9:5c:e5:e0:44:63:4e:ce:93:58:dd:f5:2d:91:42:
ec:f1:b8:77:c7:79:2c:67:b4:01:77:c8:30:d5:41:48:b9:ba:
8d:c0:39:08:ee:18:6a:8f:99:91:90:4c:7c:b1:fa:0a:c1:9c:
e9:d5:66:8d:6e:bf:03:9b:a7:bb:78:65:6a:9f:a3:28:04:3b:
65:c0:a3:09:aa:e2:fe:fe:24:35:a9:f1:ba:43:76:7d:c3:7f:
6b:6e:2f:85:4d:ce:62:15:fa:b8:82:a4:f1:58:f5:5c:f7:5f:
73:a2:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:37 2023 by rpki-client on console-ams.rpki-client.org