Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/xcK3Z03H5IadzTIEh6NgSlyNUgc.roa
File: xcK3Z03H5IadzTIEh6NgSlyNUgc.roa (raw, json)
Hash identifier: SJp02HQmMnv4fEes1telwNXbBh8TsKkALxy/bEC6nGc=
Subject key identifier: C5:C2:B7:67:4D:C7:E4:86:9D:CD:32:04:87:A3:60:4A:5C:8D:52:07
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0183FF18645168BF64FEBD30C46AA6B14E0E
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/xcK3Z03H5IadzTIEh6NgSlyNUgc.roa
Signing time: Sat 22 Oct 2022 09:48:52 +0000
ROA not before: Sat 22 Oct 2022 09:48:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:18:64:51:68:bf:64:fe:bd:30:c4:6a:a6:b1:4e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 22 09:48:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5c2b7674dc7e4869dcd320487a3604a5c8d5207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:67:7f:38:8e:e6:30:06:db:76:94:40:4b:
55:8c:c3:d1:11:6a:e5:40:b7:ab:c9:3e:50:58:1c:
30:5d:1f:13:95:98:87:5c:a3:f4:80:aa:07:fe:01:
23:81:13:9a:8b:a6:87:1c:a2:d1:fd:81:87:5e:d6:
29:52:43:4a:e0:83:30:ae:9d:25:cc:c3:e5:cf:f0:
d4:41:07:3d:2e:05:75:ce:39:70:3b:2c:f9:28:5e:
06:d1:a4:ba:94:b1:fc:4c:49:23:f2:62:f7:42:bf:
13:1c:ce:ee:7c:6d:b6:f5:e2:c0:01:da:c5:15:7f:
0f:01:29:09:ab:d5:04:3c:23:96:91:94:00:2a:ca:
04:1f:cf:b6:d4:19:1f:b6:45:87:d6:05:fd:69:f0:
67:ce:cc:9c:fc:12:05:b6:a8:6b:f6:de:d3:19:92:
f8:ac:a4:3a:ea:1d:d6:a4:c1:ac:d1:49:7f:bc:28:
df:32:61:c3:a4:2a:71:ce:f7:b8:a0:40:cc:ea:bf:
1f:ae:04:4b:fb:22:74:d7:40:cc:e5:44:d5:75:4a:
b3:06:2d:bc:f7:07:a2:ac:9b:0b:b3:23:d3:8f:00:
e9:8c:e3:6e:27:02:7a:6b:73:b3:63:02:5a:7f:f7:
f5:51:51:44:05:aa:1d:4a:ed:5e:fd:27:e4:d0:13:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:B7:67:4D:C7:E4:86:9D:CD:32:04:87:A3:60:4A:5C:8D:52:07
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/xcK3Z03H5IadzTIEh6NgSlyNUgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/23
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1a:cf:e5:38:b1:e1:63:a6:d1:aa:4a:31:64:99:6f:6d:98:
2a:7a:46:0b:c3:ee:d4:ab:27:07:38:10:32:f7:22:cf:9e:62:
de:57:20:58:b1:31:00:7f:ef:b9:fc:23:72:46:32:ad:3f:19:
f3:c6:33:dd:d6:68:40:b4:cc:db:36:2c:e8:1a:15:25:b1:9d:
f6:d1:bc:88:9d:ef:b0:48:9d:30:15:17:a7:d7:82:90:84:d1:
aa:79:3d:ad:c9:2b:c7:5a:e7:18:af:db:a7:bb:57:71:98:7d:
02:68:b0:85:0e:97:07:0f:b9:70:2f:30:c9:a2:e5:7f:8e:20:
ee:2e:45:8b:74:0c:9a:e1:a5:c2:5e:09:3a:51:82:00:6f:ae:
d7:4e:00:b5:cd:c9:e7:23:41:47:f2:7f:e0:6a:a9:3c:5f:73:
94:e0:8a:90:ba:54:cd:98:d5:5f:e7:21:80:f3:83:56:e3:fc:
e1:d7:0d:15:36:2c:f1:81:3d:60:50:63:4d:4e:97:4f:45:aa:
31:c0:87:2d:7e:33:95:f2:ab:93:22:af:4a:d1:7e:c2:94:32:
db:ff:21:77:df:f9:84:93:63:92:da:10:1b:7a:93:fb:a3:fb:
6f:fd:5b:13:4b:c0:d1:45:73:84:db:31:dc:6b:c3:8e:aa:97:
dc:4d:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:26 2024 by rpki-client on console-ams.rpki-client.org