Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/q4Gd1fD5Tg2TFnW6siwnwGJBlvY.roa
File: q4Gd1fD5Tg2TFnW6siwnwGJBlvY.roa (raw, json)
Hash identifier: BGzAEvRhc2QKJAKl2YbZg85+1tx/aj/V0t5i34SdR/M=
Subject key identifier: AB:81:9D:D5:F0:F9:4E:0D:93:16:75:BA:B2:2C:27:C0:62:41:96:F6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0701433C
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/q4Gd1fD5Tg2TFnW6siwnwGJBlvY.roa
Signing time: Thu 09 Jun 2022 08:02:10 +0000
ROA not before: Thu 09 Jun 2022 08:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117523260 (0x701433c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 9 08:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab819dd5f0f94e0d931675bab22c27c0624196f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:47:60:c6:2a:a1:40:7e:78:26:48:ff:85:
e4:14:cf:a1:9e:c2:7d:ff:db:71:2c:5e:7a:d2:5e:
11:c6:69:f0:c0:6f:c1:1c:bb:64:61:ff:22:f4:45:
7a:48:63:b3:64:b2:f0:64:48:54:58:33:44:d3:91:
c5:f6:c6:dc:88:70:92:04:82:a9:b1:14:da:ef:6e:
72:e8:22:45:e0:f6:db:fe:73:62:19:de:da:c8:4b:
8f:7e:5d:74:4e:90:54:8e:b9:84:ac:fd:2c:43:21:
7e:67:72:25:c2:4d:10:93:93:a8:ba:e0:f8:c0:d7:
52:c9:d2:95:06:a5:c8:da:30:5b:a7:05:b2:6c:05:
3a:de:38:69:94:dd:d9:34:fc:10:e1:48:3a:54:76:
2d:ba:bc:b8:dc:b4:14:62:68:1b:3e:22:85:04:63:
20:00:67:bd:8e:f5:fb:c2:08:4d:b9:85:b6:66:86:
5e:51:77:8c:54:aa:e5:dd:fd:ea:2e:dd:74:54:23:
d2:16:d2:00:23:d2:cc:92:84:4b:8d:d4:17:1f:80:
a7:ea:b8:5f:9e:7e:61:86:bd:17:e0:f6:95:43:9c:
f8:57:ab:21:ca:ac:50:5c:98:67:18:bc:7f:c4:ec:
99:3e:af:56:b6:4d:14:36:5b:09:87:e0:6b:0e:f3:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:9D:D5:F0:F9:4E:0D:93:16:75:BA:B2:2C:27:C0:62:41:96:F6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/q4Gd1fD5Tg2TFnW6siwnwGJBlvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0-94.154.36.255
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ce:bc:ea:a5:60:a2:5a:fa:53:d5:e0:94:0d:17:c7:fc:e6:
db:3c:d4:3b:75:f8:73:19:07:e7:95:7c:51:79:a0:98:26:3b:
3e:58:59:7b:05:cb:2d:b3:83:0d:6b:b8:8e:d4:d9:f1:31:70:
3d:89:61:d4:8e:7c:02:7c:8d:e4:27:35:76:a5:0e:0a:94:64:
d4:91:b0:fa:46:22:ff:93:20:f2:f5:98:51:48:02:fc:75:97:
55:c0:05:b9:4b:03:da:ef:ca:ff:9c:32:d0:bb:12:7e:91:10:
48:6f:82:64:e7:3b:4a:04:6f:2d:6b:15:88:08:10:ef:14:62:
f9:8a:1e:f8:af:97:9e:53:97:4d:c0:fb:ff:80:b8:31:49:d8:
ab:eb:b1:0f:7f:38:81:eb:e7:a6:cf:6a:74:09:0b:23:81:51:
a0:97:c3:66:68:ec:e4:07:b8:18:ac:8b:08:cc:7a:96:4d:81:
50:27:15:3e:ce:85:6a:c4:5c:8b:54:03:06:c7:f8:f6:bb:f1:
b6:9a:57:83:15:75:95:a6:8c:0c:d6:0a:ab:22:cd:c5:56:d9:
54:37:21:a2:dd:d2:36:e5:29:a5:80:05:b6:33:f3:96:89:c1:
eb:91:4b:bb:e6:7c:3e:fa:dc:7f:e1:f8:da:54:01:27:4b:f7:
f6:cb:11:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org