Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8tzUT1DrlazNYL3NsZ5KLQ7kvmY.roa
File: 8tzUT1DrlazNYL3NsZ5KLQ7kvmY.roa (raw, json)
Hash identifier: GtGeIJ1dJHjFwzsLzuakZX8eI3kbMitu8dOR6C59wkM=
Subject key identifier: F2:DC:D4:4F:50:EB:95:AC:CD:60:BD:CD:B1:9E:4A:2D:0E:E4:BE:66
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018484CC80380999971A4E9D8AEEC562D927
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8tzUT1DrlazNYL3NsZ5KLQ7kvmY.roa
Signing time: Thu 17 Nov 2022 08:55:05 +0000
ROA not before: Thu 17 Nov 2022 08:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:cc:80:38:09:99:97:1a:4e:9d:8a:ee:c5:62:d9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 17 08:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2dcd44f50eb95accd60bdcdb19e4a2d0ee4be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:0d:18:9f:b4:2d:62:3f:a2:77:d4:50:44:
e2:98:d8:9b:f3:ac:2c:9d:a1:f8:1c:09:92:2a:08:
10:6d:80:d5:1d:14:6d:4b:44:1d:f0:7c:12:fa:9b:
8c:1b:5f:36:52:51:17:3d:6e:23:6e:f2:78:90:03:
f5:ff:9e:d9:ac:74:ac:a7:e0:a0:2f:da:ca:0f:43:
eb:85:89:41:49:9f:28:d3:c7:57:e6:bf:11:cd:6c:
50:00:f6:0e:76:70:1d:ca:0d:51:6d:c3:a7:c8:1d:
aa:a6:e4:94:ef:95:47:55:0e:c9:07:72:25:bd:69:
4a:b4:e3:03:49:b4:b7:fe:a1:e6:b3:cf:e2:0a:ea:
5c:0e:dd:33:0c:71:22:9b:de:16:4e:f8:fc:3a:9f:
73:bb:7d:c4:97:9b:24:25:dd:99:9c:35:40:69:e6:
08:61:55:14:0d:05:ee:68:35:32:04:af:2a:35:8a:
bf:74:c6:2a:48:44:1c:5f:54:41:ff:9d:a0:71:cc:
cb:0f:70:30:db:84:5d:4b:7e:37:cd:88:8d:58:b3:
54:17:65:06:3c:73:b6:d6:84:76:69:44:3e:37:25:
ad:d2:2c:f1:09:53:28:56:cf:07:2f:8e:3e:d6:d6:
ea:a5:9f:34:47:1d:5d:ef:c7:57:15:0d:b1:2b:8c:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:D4:4F:50:EB:95:AC:CD:60:BD:CD:B1:9E:4A:2D:0E:E4:BE:66
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8tzUT1DrlazNYL3NsZ5KLQ7kvmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7d:09:a2:42:b3:1f:f1:cc:9a:c1:94:23:da:94:28:11:fb:
a6:0e:e8:41:c7:25:a2:c2:ce:83:53:6a:85:d5:2b:f2:50:3a:
c8:ca:87:7c:4b:0f:bb:9b:ab:e3:d6:50:1a:53:fc:20:39:d4:
75:4e:03:8c:ff:41:2d:90:89:2c:51:35:32:49:25:b5:74:bb:
bb:67:3d:e3:65:98:5f:ac:2c:1d:fa:4f:ae:45:c9:f8:c6:54:
d8:ea:87:dd:5a:ac:61:74:73:93:60:80:35:0b:19:c9:98:d0:
d6:d8:3e:cd:72:7c:7b:09:3d:b6:7b:8f:2a:4e:aa:8e:1b:76:
f0:00:ac:6a:4d:fe:b4:cb:38:ac:fc:74:6d:07:a7:55:3d:1b:
6a:d2:ae:c7:49:1e:00:09:d2:47:48:c2:e6:53:61:1f:db:4c:
76:de:f2:ae:d4:0f:7b:e9:df:a0:40:8d:c8:12:65:44:61:13:
92:cd:32:29:e9:8e:b2:f5:6d:b1:ed:5f:9b:b4:cd:09:28:7a:
c9:5e:50:8a:0e:a9:1a:17:86:73:0f:eb:ff:f1:7b:7d:06:98:
c3:34:4f:f3:d7:8a:3a:b9:4f:90:c0:ac:6c:fe:22:be:b9:99:
30:2e:3c:83:85:29:cf:92:e8:c6:7a:ff:ce:9c:67:c1:41:b2:
0f:65:1f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org