Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/v_vUyF1we6xVktLpssYHu-pF7ro.roa
File: v_vUyF1we6xVktLpssYHu-pF7ro.roa (raw, json)
Hash identifier: CVZh2MCEFeoZ3B36/xjhRBMWx1U1fp2iWi9fS6zCRIU=
Subject key identifier: BF:FB:D4:C8:5D:70:7B:AC:55:92:D2:E9:B2:C6:07:BB:EA:45:EE:BA
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0184D478FB872108D951E680ED821CFF49FB
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/v_vUyF1we6xVktLpssYHu-pF7ro.roa
Signing time: Fri 02 Dec 2022 20:13:29 +0000
ROA not before: Fri 02 Dec 2022 20:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:78:fb:87:21:08:d9:51:e6:80:ed:82:1c:ff:49:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Dec 2 20:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bffbd4c85d707bac5592d2e9b2c607bbea45eeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:f5:52:1a:cc:09:85:c6:78:a6:5d:e3:94:
5b:eb:a8:d7:58:0c:8a:72:bb:fe:b5:46:39:9d:5a:
90:de:27:dd:f4:b6:e4:14:18:27:de:f3:7c:17:a4:
3c:d2:e4:af:66:7a:5f:bf:4b:e6:17:cf:47:34:97:
ff:f3:7f:d0:86:00:b7:0f:fc:ea:8d:41:e8:f9:72:
b9:4e:c8:76:3f:cb:37:e5:af:70:c8:5f:57:c5:9c:
ab:ff:c0:10:2a:5f:c0:c0:8b:68:2f:7d:b3:2f:2b:
65:df:0a:b5:3f:86:5b:82:85:78:2f:97:fa:12:d4:
ca:fe:90:67:39:b5:d5:9f:87:3b:74:ab:9d:fc:bf:
2e:9e:8c:7f:2d:94:75:c2:ce:82:b6:d2:ea:03:b5:
64:d7:9b:2b:e2:76:58:ef:63:d1:99:85:40:ec:02:
5a:29:b2:a9:cd:ec:62:d9:b2:27:1d:c8:f6:64:29:
ec:71:df:41:21:2f:60:56:fe:4b:fd:3f:52:f6:70:
47:e3:13:77:fd:fa:a9:14:06:9f:4b:bf:ac:d4:a3:
8b:bd:d7:1e:e2:1b:3c:03:61:dd:41:fc:ee:1b:0d:
1b:c8:23:9d:cb:fc:d8:23:4e:dd:6d:94:c1:76:74:
48:86:db:23:80:db:74:74:01:83:52:19:f1:b2:fb:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FB:D4:C8:5D:70:7B:AC:55:92:D2:E9:B2:C6:07:BB:EA:45:EE:BA
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/v_vUyF1we6xVktLpssYHu-pF7ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.15.0/24
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c4:09:04:8e:b5:9d:48:96:44:af:fd:04:cf:b1:42:38:f9:
85:bb:79:67:58:04:67:68:c0:82:e5:ff:83:22:d6:fc:c5:3a:
5d:33:ab:26:2b:e8:14:62:9e:54:12:e1:9b:ec:81:84:b9:ac:
58:92:ea:e0:49:f7:6b:27:87:9b:0d:67:5a:78:9c:3c:20:b1:
39:b8:45:e7:91:0c:8e:2f:3e:d8:d4:28:c7:85:d1:7f:06:73:
07:32:18:6d:de:5e:22:a8:bc:91:51:e7:2a:f1:7c:9a:57:fb:
e5:0b:20:4c:ca:99:43:58:0c:6d:b1:27:e6:59:5e:36:10:56:
e6:8f:aa:3a:ca:99:72:48:b2:a7:21:28:49:61:fc:f9:88:78:
0a:88:1f:70:3e:59:4f:ba:bb:95:62:86:76:ef:5b:19:41:81:
b0:93:11:b6:15:b7:d3:12:0a:57:fb:a5:32:5c:dc:d3:44:44:
de:6d:92:22:88:1a:07:6f:7e:70:a0:a3:5e:66:46:e9:ab:11:
b1:9d:60:81:d2:54:9f:d4:d7:bd:96:1f:cb:12:fa:6b:f7:0a:
8e:a9:b1:21:f8:79:ce:7d:1a:c0:48:71:0a:91:5a:13:d3:15:
94:b7:b7:0f:6c:0b:90:93:4a:87:dc:2e:5b:df:4c:29:08:18:
72:1d:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org