Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5SHrdRn7W0hm4cGKJkv2NzXiH7w.roa
File: 5SHrdRn7W0hm4cGKJkv2NzXiH7w.roa (raw, json)
Hash identifier: jIPcRYbS/cM+CfBkbSzmoD6eFYcJhHqSvAvPZzgT21k=
Subject key identifier: E5:21:EB:75:19:FB:5B:48:66:E1:C1:8A:26:4B:F6:37:35:E2:1F:BC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01823532C32007819132CF9B40185705125F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5SHrdRn7W0hm4cGKJkv2NzXiH7w.roa
Signing time: Mon 25 Jul 2022 11:51:35 +0000
ROA not before: Mon 25 Jul 2022 11:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:32:c3:20:07:81:91:32:cf:9b:40:18:57:05:12:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 25 11:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e521eb7519fb5b4866e1c18a264bf63735e21fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:83:8f:1c:f7:36:78:d4:12:0b:a1:2d:ee:
c0:3f:1f:3d:8a:3a:e2:b4:c3:52:b8:51:b5:6c:2e:
66:a1:40:77:79:b0:9d:77:1e:e9:c0:09:f5:0b:10:
c5:b9:3f:9e:17:84:97:14:50:dd:38:d6:26:d1:bd:
54:30:e8:b3:d6:8b:e4:01:9f:74:e7:77:8d:5e:e8:
df:7b:64:69:b2:1d:71:12:72:99:5c:20:2b:53:c2:
44:d2:91:bb:b7:be:73:ac:00:dd:65:7c:15:d9:28:
94:20:cf:b9:12:68:dc:c4:e7:a0:d1:d1:0d:a0:2d:
33:3b:58:1c:21:70:23:52:c2:65:1a:dd:1d:a3:16:
8a:6d:57:ae:5d:2d:1c:a1:ea:80:3c:da:10:c2:66:
20:49:48:2d:1f:c0:c5:84:3d:9b:f2:bd:8d:7a:b7:
46:ec:ad:22:ea:a0:a8:4c:0a:03:93:a9:01:6b:03:
91:ba:6e:8f:c4:8b:d4:63:c1:c2:1f:19:6f:42:9c:
d0:ee:1e:78:9a:1b:26:07:ed:21:5a:28:64:b4:91:
b4:25:1a:79:a4:5d:8f:a9:7f:ce:5e:9e:4c:39:f9:
cd:62:d1:e4:31:46:bb:91:ae:39:7f:ca:29:54:fc:
2a:9d:23:84:24:19:e1:34:f8:dc:45:49:72:16:ce:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:EB:75:19:FB:5B:48:66:E1:C1:8A:26:4B:F6:37:35:E2:1F:BC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5SHrdRn7W0hm4cGKJkv2NzXiH7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d0:13:84:e6:e9:38:06:ba:93:4f:6b:8a:a6:0f:9e:86:92:
68:71:34:52:1f:ac:e4:74:a3:02:f3:9c:7d:df:b7:64:dc:4b:
f4:ea:7f:5a:81:64:80:1c:5c:59:a7:7d:a7:8f:c6:74:35:ba:
f8:2d:ad:de:26:ca:09:58:19:f2:bf:6d:a7:4a:8c:e1:b4:f4:
f2:6e:cc:d8:f7:98:9c:8e:05:9e:98:ae:3a:f7:23:55:b8:7f:
c2:80:37:23:47:c7:f5:59:4a:86:62:b0:22:b0:42:cb:e8:1b:
ef:39:64:16:13:eb:e6:7f:a5:b3:f7:0f:4c:0d:e7:76:75:5e:
16:ee:e9:77:84:00:4b:8d:82:73:2a:e5:ba:57:21:95:27:53:
43:01:e5:57:c1:c1:bb:a1:ea:95:8b:2f:88:17:e7:e1:07:aa:
ce:62:69:f1:d1:f2:fc:12:ad:43:13:98:78:cd:5f:ae:e5:e5:
94:fa:75:00:a2:e2:3e:83:18:c3:38:36:18:cc:e3:bd:0c:25:
df:2f:21:40:bc:87:15:b4:e1:1a:08:1b:70:36:1f:bd:4f:55:
63:d7:9a:ff:e3:26:09:4f:9a:21:5b:91:53:ca:a8:58:ee:a6:
f3:c1:b1:e9:32:5e:51:1a:01:d9:3e:ee:11:0b:b0:0f:f2:e6:
b9:15:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org