Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/Uz7q5iD0PC76MLryiimaPAqsPbA.roa
File: Uz7q5iD0PC76MLryiimaPAqsPbA.roa (raw, json)
Hash identifier: F9iPtr0VX9d9UNCRPk/fi6xORA8zinht1I1HuS81bEI=
Subject key identifier: 53:3E:EA:E6:20:F4:3C:2E:FA:30:BA:F2:8A:29:9A:3C:0A:AC:3D:B0
Certificate issuer: /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial: 028AF35F
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/Uz7q5iD0PC76MLryiimaPAqsPbA.roa
Signing time: Sat 01 Jan 2022 02:52:56 +0000
ROA not before: Sat 01 Jan 2022 02:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198295
IP address blocks: 91.197.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42660703 (0x28af35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Validity
Not Before: Jan 1 02:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=533eeae620f43c2efa30baf28a299a3c0aac3db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:15:93:93:9b:26:30:ce:58:07:b8:a7:b5:
ae:ee:61:42:d7:41:c4:b4:05:b6:b5:08:42:a5:86:
9d:8b:08:07:e0:8d:a3:25:49:ab:71:b0:78:2f:85:
73:67:05:b9:21:00:a2:6e:64:5a:93:51:04:4e:41:
fc:59:af:1d:20:84:69:b2:ee:cc:33:ad:51:43:e3:
ff:c4:99:e2:93:04:4f:9e:a7:99:69:73:d9:d7:80:
d5:30:89:e2:b9:5e:6b:5c:3f:77:c5:9e:9f:5b:10:
c7:2c:ed:30:ff:83:5b:fa:b0:62:d8:80:d0:e4:37:
11:85:4e:0d:d0:55:f7:17:93:af:82:ee:d9:7d:83:
b1:df:d5:88:15:ae:08:26:0b:81:c7:b4:df:9a:da:
0d:6a:1e:32:ab:dc:c4:b6:c3:2b:a2:64:6a:f9:9b:
3b:f0:3a:3a:e6:16:f6:ec:e7:ac:0c:11:db:cc:6b:
73:07:19:15:42:79:16:35:d1:f3:67:45:17:1e:3e:
07:72:fa:3e:33:d3:6f:ca:65:d5:91:d2:04:a6:d4:
5f:70:4f:6a:a7:a9:48:a5:73:63:28:3b:dc:54:10:
57:b0:66:69:7b:fa:e5:52:d6:cb:79:be:8f:f0:05:
cf:09:a3:ff:c2:f9:5d:c9:78:dc:21:ef:f0:e5:ee:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:EA:E6:20:F4:3C:2E:FA:30:BA:F2:8A:29:9A:3C:0A:AC:3D:B0
X509v3 Authority Key Identifier:
keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/Uz7q5iD0PC76MLryiimaPAqsPbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.212.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f3:1c:3a:c0:df:1e:9f:a6:66:3e:44:8e:9d:ec:44:00:8b:
ef:4d:d4:19:f1:35:51:f1:23:ac:a5:d1:c7:27:c1:9d:f3:22:
94:72:03:d1:84:3a:eb:28:83:21:ea:b5:b4:4f:e8:2d:5d:e5:
7c:0a:e2:19:f1:e9:3c:f6:0a:e6:df:d3:a6:5d:43:dc:d3:1f:
24:dc:a3:1b:a8:30:33:ef:4b:40:5d:e0:8e:6b:10:80:1a:56:
83:d9:d2:ac:21:f5:66:ee:c8:4d:f0:a2:5a:42:08:44:a7:e8:
50:04:44:92:c9:c0:df:5d:d3:78:45:b1:41:b4:53:c1:ea:f8:
88:e2:f2:bd:d5:0e:25:f4:09:90:ef:11:dd:e9:a0:93:39:b4:
a9:f0:04:8f:2f:f2:a7:80:0b:5b:f1:7d:29:f3:1e:a8:ac:26:
7f:2e:e3:e3:6b:48:60:7d:c3:60:63:c2:d7:f6:a3:91:d1:c8:
41:5f:e6:e4:92:b1:78:c1:5a:39:dd:2d:2d:c5:39:83:5f:b1:
c9:1a:76:33:8f:73:a9:69:55:ae:2d:b8:be:37:1a:ab:6a:62:
bd:18:1d:d1:12:9c:ec:4a:27:1e:9f:bf:c4:9d:3a:46:24:22:
fd:fb:af:2d:2d:83:38:c9:bf:b2:c7:15:a8:03:f9:a8:e1:c2:
70:c1:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:58 2023 by rpki-client on console-ams.rpki-client.org