Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0ap1dJnUlPEgfkadAXcmwgjV-n0.roa
File: 0ap1dJnUlPEgfkadAXcmwgjV-n0.roa (raw, json)
Hash identifier: B657pEuyaMxrb2lOsqzFtcyl6RAepqNQBGZxkeEeRH4=
Subject key identifier: D1:AA:75:74:99:D4:94:F1:20:7E:46:9D:01:77:26:C2:08:D5:FA:7D
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 05D0A922
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0ap1dJnUlPEgfkadAXcmwgjV-n0.roa
Signing time: Fri 04 Feb 2022 09:53:37 +0000
ROA not before: Fri 04 Feb 2022 09:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97560866 (0x5d0a922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 4 09:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1aa757499d494f1207e469d017726c208d5fa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:cd:41:a2:5c:b4:61:34:3a:dd:aa:04:0a:
59:29:d6:5e:f2:16:d9:3d:3e:f6:03:70:ad:bb:9d:
ca:96:ce:3a:a4:6d:2f:47:e6:54:2f:2c:88:81:65:
6e:b5:e1:ac:6b:8b:1f:f3:44:96:f3:2b:36:f3:45:
08:dc:f3:00:a0:1d:b3:40:5e:34:97:68:aa:b1:70:
24:b0:c6:a7:2e:7c:1b:78:d7:ec:92:fa:5b:be:a5:
d4:95:4c:f5:1d:21:8e:49:11:34:87:ec:9c:d4:8c:
4e:57:68:4a:d0:f0:39:57:dc:9c:c8:25:d1:a6:5a:
51:c8:27:f8:16:d8:02:9f:da:22:99:bc:06:21:fe:
9f:87:78:92:24:48:22:41:3e:68:be:c6:e2:4b:d3:
1d:b0:15:01:f5:33:8a:33:97:e8:d2:be:fb:a9:20:
6b:91:53:1c:75:34:88:52:8e:0b:c9:35:12:04:2d:
37:0c:1a:d3:45:9a:fe:d0:7f:c5:4c:4c:da:85:63:
05:af:4a:0f:e5:f0:19:9f:e9:cf:fc:1e:e4:8a:85:
29:a6:f5:19:be:0c:dc:c8:f6:a8:8c:02:f7:7a:38:
84:95:48:33:bb:90:4b:1b:64:ad:b1:72:a4:15:1b:
fe:b5:22:6f:2d:23:85:f9:99:df:27:95:61:f3:ea:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:75:74:99:D4:94:F1:20:7E:46:9D:01:77:26:C2:08:D5:FA:7D
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0ap1dJnUlPEgfkadAXcmwgjV-n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:d6:20:14:dd:40:bb:41:0e:32:d4:b9:9f:88:52:87:b6:35:
8d:11:f1:1b:56:42:f8:79:fd:e2:c4:e8:52:25:80:d5:1d:fa:
28:78:ea:4d:b6:fa:18:72:9a:39:f6:5b:72:05:01:e8:bc:f4:
bd:16:1f:51:5a:c6:51:b7:8f:82:6b:88:ce:17:f7:6e:cf:fe:
ba:8b:89:a8:8d:80:26:e7:d6:57:a3:ee:32:c8:f8:11:52:04:
ec:f2:87:48:a4:cc:ce:1b:7c:75:9f:8e:59:b4:03:18:16:ad:
8b:2f:ae:ec:10:24:5d:a9:8e:c1:3b:cd:08:2f:c8:81:3d:4f:
4e:ab:c4:a0:c7:ce:d5:d8:c9:eb:7a:f4:44:be:72:7f:54:3a:
28:d3:5f:88:47:08:6d:b6:57:75:3f:1d:1b:4b:ee:6e:7f:03:
58:9c:ac:34:78:4e:63:cd:37:74:e3:b8:28:15:01:4a:16:ee:
00:a8:34:a9:bb:f1:8f:e8:1c:08:b6:c6:81:55:c4:31:3e:9f:
61:d0:d8:f0:cc:80:a9:f1:68:0d:11:2b:ca:5f:80:ff:39:8f:
19:be:0f:6e:23:ea:a7:71:6c:2e:ac:af:2d:0b:78:54:1d:89:
16:6d:ad:a3:f2:20:fe:7e:9d:1d:d3:3f:30:e9:b8:70:ca:9f:
3a:29:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org