Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/boYdfVb2hB-I0z0O-rDqOGZbj40.roa
File: boYdfVb2hB-I0z0O-rDqOGZbj40.roa (raw, json)
Hash identifier: UkLbP4sxG1Lq/ZsGtkAiDz0kW0UM4syDWSWrbNyub4w=
Subject key identifier: 6E:86:1D:7D:56:F6:84:1F:88:D3:3D:0E:FA:B0:EA:38:66:5B:8F:8D
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018438B757A39497ACE7F4377D02E9C4313A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/boYdfVb2hB-I0z0O-rDqOGZbj40.roa
Signing time: Wed 02 Nov 2022 14:20:50 +0000
ROA not before: Wed 02 Nov 2022 14:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:b7:57:a3:94:97:ac:e7:f4:37:7d:02:e9:c4:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 2 14:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e861d7d56f6841f88d33d0efab0ea38665b8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:5a:67:9a:bd:c6:1b:af:c5:29:ed:4f:00:
70:24:85:9d:9e:77:7c:43:da:14:f2:d1:89:b3:6f:
6a:39:ad:27:b0:3a:d9:ae:a2:2e:5a:e0:40:a4:50:
8e:74:14:1f:5b:d3:f1:a4:0d:7d:b0:46:0b:83:57:
21:f6:b9:ac:a9:17:99:b2:59:fb:b4:51:ad:97:4f:
9b:0b:bd:73:1f:2a:23:67:90:1d:2b:35:74:25:83:
60:b1:de:c4:66:0a:a2:d0:e5:e2:c1:db:26:e3:fe:
5e:18:a2:75:f9:4d:36:ef:e1:67:5c:aa:bc:be:55:
ae:df:af:b3:30:b5:18:ed:73:43:a0:31:74:8b:97:
42:27:42:cb:aa:90:15:dc:81:8b:dd:34:49:0e:51:
cb:90:ca:0f:90:8a:f2:fb:75:6e:b1:94:0e:b9:18:
99:3f:cc:43:53:bc:53:1e:34:79:ae:8f:89:04:d4:
82:91:0e:86:78:d1:17:ba:35:5e:44:81:29:9f:61:
89:3c:c7:26:aa:4c:c4:b0:e7:e6:a2:06:85:66:86:
20:f0:ad:dd:86:52:93:e3:e7:3d:62:64:49:a9:c5:
0b:28:51:2b:51:73:c2:12:30:4f:af:26:a1:0d:43:
0b:e3:dd:0c:7a:75:70:80:a6:ee:74:72:db:5a:66:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:1D:7D:56:F6:84:1F:88:D3:3D:0E:FA:B0:EA:38:66:5B:8F:8D
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/boYdfVb2hB-I0z0O-rDqOGZbj40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
50:57:47:68:04:1c:5b:7b:78:62:c1:94:30:3d:a8:79:ba:d4:
61:cf:42:9e:6b:a5:b4:9d:2d:3f:f2:d1:aa:51:16:38:13:04:
8c:b8:51:be:99:90:43:0e:ad:bd:03:28:10:a1:07:bc:25:d6:
5e:cd:bc:82:24:bb:ed:70:8c:d5:94:c1:77:55:7d:05:b7:03:
d1:66:9e:88:8b:f5:83:c7:19:ba:19:94:26:6f:d6:fa:8d:9c:
3d:14:3f:49:6a:e5:bc:63:e3:46:47:6f:d5:62:cc:53:7b:ca:
51:08:d2:5a:10:e7:88:f5:64:77:7b:5a:06:40:1f:de:d4:7b:
d7:81:64:0f:3b:ea:f5:da:43:99:3c:95:fe:67:c6:d9:b2:d7:
e6:3f:c1:2f:a4:12:9c:de:0a:c5:bc:b3:a9:30:a6:08:56:3e:
c7:25:01:30:b2:7c:30:1b:61:1c:0a:27:05:67:9a:de:b3:15:
09:65:1a:13:9c:de:f8:85:1a:86:92:4c:00:f4:3a:3b:b5:d4:
c2:ac:3e:0e:60:e0:0d:63:0c:4e:3b:cf:32:82:be:6b:dd:48:
1c:41:a1:cc:5e:76:bf:ec:60:a6:65:b6:7a:e6:da:98:56:91:
7e:68:1e:1f:29:a0:94:93:85:6d:83:08:19:46:17:e7:24:be:
db:92:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org