Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/V_f6INtbSmI_zWa-4wFmsdY0buU.roa
File: V_f6INtbSmI_zWa-4wFmsdY0buU.roa (raw, json)
Hash identifier: pjZe+Oi47A9iymaURVZ43FuOkFj3tAts7MXIxWgNcPo=
Subject key identifier: 57:F7:FA:20:DB:5B:4A:62:3F:CD:66:BE:E3:01:66:B1:D6:34:6E:E5
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 06193FB8
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/V_f6INtbSmI_zWa-4wFmsdY0buU.roa
Signing time: Thu 03 Mar 2022 13:42:21 +0000
ROA not before: Thu 03 Mar 2022 13:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102318008 (0x6193fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 3 13:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57f7fa20db5b4a623fcd66bee30166b1d6346ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:6b:ab:61:81:18:79:29:7b:cb:b3:0b:10:
c2:d4:be:a4:5a:b6:03:e3:63:48:5c:a9:73:47:91:
b2:c9:74:50:da:c9:e9:ec:f2:c5:ba:16:57:ba:11:
27:56:55:e6:45:27:df:ab:f7:fd:56:55:32:23:62:
40:23:2c:15:1d:f1:70:9f:80:9f:ae:7a:26:d2:c8:
d1:a8:70:0d:a2:6e:f2:14:64:48:dd:af:6c:07:bc:
85:3a:d7:aa:e8:79:a8:84:23:f3:10:1d:fb:61:6f:
3f:96:ab:31:78:1a:3f:33:0c:c8:b7:db:6e:d7:de:
cd:65:a3:0d:0b:62:09:30:df:59:a6:9a:ae:51:72:
c5:f2:68:b5:2b:ea:3a:d2:54:1d:73:bc:73:9e:b8:
37:bf:ae:d4:1f:f8:70:76:4b:20:63:d9:9e:ed:78:
36:46:6f:d5:0a:c1:64:8b:41:43:0c:d9:31:93:e8:
11:be:fd:13:95:f5:9f:20:88:8f:18:f2:96:f1:32:
17:11:a5:19:39:5f:c3:6c:c7:7a:3d:1b:80:30:95:
5d:e7:07:d1:e2:db:1b:c5:d3:28:1c:0c:15:f0:e6:
e0:2d:e6:de:cd:3b:8a:a7:0a:c2:8f:90:9d:de:bc:
2b:16:1e:ad:02:2d:e3:31:8c:8a:19:0a:34:fc:db:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:FA:20:DB:5B:4A:62:3F:CD:66:BE:E3:01:66:B1:D6:34:6E:E5
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/V_f6INtbSmI_zWa-4wFmsdY0buU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e0:61:ae:53:da:f2:37:cd:0e:56:df:97:cc:04:57:7f:d0:
19:12:45:99:67:35:d6:fd:a8:cb:73:1b:9c:05:fe:25:37:1a:
65:81:77:e3:6f:05:3b:f9:8f:e0:30:64:12:81:cb:3f:6a:0b:
b2:7f:1b:a0:e2:87:e8:ee:fb:cb:76:ac:f7:39:af:c4:7e:71:
39:50:2d:2f:5b:33:a0:0b:81:e5:e3:4c:25:3c:da:0a:bb:83:
5d:61:9a:e8:47:50:54:e7:d8:bb:7f:0a:56:26:b1:27:65:aa:
4d:ce:31:fa:a7:12:10:20:c7:3e:60:35:6b:b0:9d:3e:a5:0b:
7e:94:64:08:cc:3c:1b:f6:c7:5e:c2:a2:80:a7:a4:52:bd:e3:
5e:0a:f7:4c:e3:44:e9:93:8e:27:04:fb:3d:13:8b:d7:70:a8:
26:47:95:41:1b:85:da:62:bc:a9:74:93:5e:a4:92:1c:11:a8:
6b:0e:0b:c4:22:42:d3:75:88:a4:8d:77:5d:80:5b:be:10:93:
84:fd:e2:a9:8e:ac:0f:c2:ba:45:3c:5a:77:42:30:06:91:7a:
92:90:2d:3e:76:c9:e2:6e:de:39:2a:b8:24:4c:31:0a:be:88:
12:7a:c3:a9:63:10:bc:0a:30:6b:b3:60:b1:29:17:3f:91:d9:
41:9e:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org