Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/zO2ixQEeEU2GjMYGhCU-WRYv7R8.roa
File: zO2ixQEeEU2GjMYGhCU-WRYv7R8.roa (raw, json)
Hash identifier: PH3YrBGxp1J3SEb0KGeCfnO9VNTLIh0/bimdCRwj7wM=
Subject key identifier: CC:ED:A2:C5:01:1E:11:4D:86:8C:C6:06:84:25:3E:59:16:2F:ED:1F
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018258C17736F2AEB82078B910044D2C9CFD
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/zO2ixQEeEU2GjMYGhCU-WRYv7R8.roa
Signing time: Mon 01 Aug 2022 09:34:10 +0000
ROA not before: Mon 01 Aug 2022 09:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 91.228.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:c1:77:36:f2:ae:b8:20:78:b9:10:04:4d:2c:9c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 1 09:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cceda2c5011e114d868cc60684253e59162fed1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:48:3d:e9:81:0f:c4:bc:ec:8c:b9:6e:52:7a:
b5:c0:d1:96:54:1d:ce:65:c6:91:94:d2:d3:05:8d:
6b:51:5b:e9:50:64:ea:5c:00:17:14:85:5b:c3:de:
6b:c5:41:68:1e:fa:b1:f6:09:6b:d5:78:cb:91:90:
74:31:a4:0e:c7:2f:45:be:7e:9b:c4:34:88:26:c4:
c5:63:cc:a4:38:d2:14:9b:dd:52:99:03:33:c5:c2:
b5:31:85:54:db:bc:4d:7e:33:f7:cc:ce:87:ed:72:
0a:87:84:db:73:c3:f6:e1:15:82:37:2b:e6:19:67:
1e:da:60:be:91:80:64:ea:f8:00:c6:49:2e:9a:5e:
b3:c5:7e:ae:16:2b:de:09:14:43:6a:89:a2:f1:32:
19:20:21:d0:33:b6:5b:31:47:02:ba:6e:3e:96:52:
a6:6f:f5:3a:8e:41:f0:d6:25:18:d3:3d:23:bb:56:
8e:63:9a:c6:58:db:7c:49:bb:de:fc:4a:e6:40:18:
9f:86:9c:94:a4:37:a9:77:2d:7c:5c:7d:dd:0c:ce:
4c:f0:18:99:9b:c4:81:f2:89:f6:80:80:f8:9b:1f:
5e:82:a9:94:45:5f:3a:a4:b3:ed:d9:d2:8e:e4:6e:
42:d8:dc:f4:45:31:2f:dc:68:a7:92:2d:34:cb:a8:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:A2:C5:01:1E:11:4D:86:8C:C6:06:84:25:3E:59:16:2F:ED:1F
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/zO2ixQEeEU2GjMYGhCU-WRYv7R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
50:14:19:a6:1f:0d:7c:94:fc:43:ba:98:a4:f5:68:ed:46:66:
5a:ee:7d:5c:10:f7:df:56:ff:0f:9e:6e:80:a3:5d:9b:36:2d:
b9:b4:46:17:39:00:de:7d:c3:20:77:f8:11:dc:a5:57:aa:31:
43:8b:18:f5:16:27:eb:1f:db:56:28:83:50:a6:ec:93:f1:bd:
57:6a:11:3b:d9:36:6a:1f:92:e6:0d:f5:d1:26:7c:d9:79:a0:
c4:6b:1a:d6:35:73:51:d5:b8:f6:48:b8:a0:b1:94:ae:f9:e3:
21:8f:93:ea:8f:95:a2:90:df:39:c3:07:54:b1:0c:85:ef:fe:
42:65:de:2a:3b:c6:e5:ac:da:40:13:68:8c:ad:4c:ca:fd:94:
9d:52:e2:44:6d:85:10:65:48:ad:4e:84:f0:54:f4:78:c4:a0:
be:73:58:b1:0e:6c:fc:fb:22:37:24:4e:a8:aa:4c:7c:f4:0f:
ad:ec:51:0d:c8:0a:31:e0:3b:54:83:de:b6:1c:34:06:ba:4e:
b8:97:2e:a8:35:fe:6e:ea:df:9d:15:7a:f6:3f:1d:78:13:fd:
89:e4:e6:93:24:93:e5:00:7c:0c:a5:f3:61:c6:82:4d:c2:d5:
a1:53:ea:9d:a0:89:c8:22:ae:42:d0:d1:68:30:de:2a:f8:50:
75:17:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org