Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/dCAydcS3MR-MrZDbYdUUxrAB_fg.roa
File: dCAydcS3MR-MrZDbYdUUxrAB_fg.roa (raw, json)
Hash identifier: eYNvaYx5N65HhCtsbYemYN+WiWz+JBtrhCuJJAV8QVM=
Subject key identifier: 74:20:32:75:C4:B7:31:1F:8C:AD:90:DB:61:D5:14:C6:B0:01:FD:F8
Certificate issuer: /CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
Certificate serial: 0182AD38D9F81A12531DA903D063F2C50E4E
Authority key identifier: A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/dCAydcS3MR-MrZDbYdUUxrAB_fg.roa
Signing time: Wed 17 Aug 2022 19:12:40 +0000
ROA not before: Wed 17 Aug 2022 19:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50959
IP address blocks: 91.216.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:38:d9:f8:1a:12:53:1d:a9:03:d0:63:f2:c5:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
Validity
Not Before: Aug 17 19:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74203275c4b7311f8cad90db61d514c6b001fdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:36:36:38:7d:ee:7a:e0:dd:a9:05:1f:23:
19:93:cf:8f:89:84:fd:15:6a:fc:48:cd:84:88:f0:
f6:44:fe:f6:c8:90:2b:bb:53:44:37:da:5d:4c:bd:
99:72:99:36:e5:bb:d7:a0:40:53:6a:af:cd:56:62:
20:02:4a:ca:4e:c3:dc:0d:65:d2:f7:d4:e0:dd:5b:
23:e8:d3:08:f1:4b:e6:82:47:96:a7:e9:68:5b:59:
a6:64:9d:7b:55:72:ad:35:bf:e3:b4:23:8d:b5:a2:
6d:9e:6b:22:07:c0:0d:90:4d:3c:68:0f:26:27:c0:
20:3e:66:5a:33:83:ca:3e:fd:1b:9b:d2:35:6a:37:
ef:f5:97:67:d3:7e:49:b5:6d:81:b7:97:2a:32:42:
f3:29:30:fc:10:7e:00:f7:b8:36:8e:6b:e6:f1:d3:
09:f3:a8:81:b3:69:42:a5:e4:5d:4b:8e:44:06:9e:
e7:a2:25:6c:19:eb:f9:5c:6a:da:66:3f:f3:d5:6c:
a9:f0:ad:eb:5e:0a:ac:f2:d7:f5:0a:bf:43:9c:87:
c8:31:fa:57:ee:91:61:9b:f2:d6:a6:3d:cc:1a:32:
7a:8a:da:e6:f1:49:7a:25:0c:63:10:bb:c8:c1:33:
8c:97:fc:1a:cc:d7:84:cb:28:13:cb:23:b9:38:1d:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:32:75:C4:B7:31:1F:8C:AD:90:DB:61:D5:14:C6:B0:01:FD:F8
X509v3 Authority Key Identifier:
keyid:A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/dCAydcS3MR-MrZDbYdUUxrAB_fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.134.0/24
Signature Algorithm: sha256WithRSAEncryption
46:52:58:50:f7:13:c5:c2:ef:2c:c6:74:19:28:4d:53:ec:b6:
1d:42:66:72:ae:5b:02:d8:e5:df:83:cb:bf:60:cc:79:db:1b:
1b:a4:78:83:6f:68:e9:89:2e:02:6d:6f:8c:b5:0d:66:cb:41:
0e:7c:9a:2f:7f:f7:c4:61:d0:a1:12:12:61:e0:bf:64:04:73:
b5:70:82:93:5c:8b:b4:b3:09:13:e7:2b:1f:cb:8b:95:58:d5:
20:8e:a3:93:3c:d0:28:5d:ca:96:42:3c:ed:fb:a3:ea:e5:2c:
eb:b0:84:d5:4d:50:75:e8:5f:0e:2b:2e:16:88:1a:44:cb:a5:
02:6f:a1:be:a6:a5:d6:a2:18:01:18:d9:81:0e:44:cd:b2:16:
a2:c6:c1:9d:6b:e9:2f:18:25:40:24:13:b9:2a:ee:ed:1b:d2:
be:02:42:8e:1d:09:a3:46:12:24:c1:6b:89:1d:49:73:6f:e0:
c7:22:22:62:03:6d:eb:ed:1f:19:cd:f9:9d:11:6d:85:ad:e7:
d6:a5:02:db:8d:d7:c6:33:c5:5f:a8:75:45:09:bd:fe:b7:8c:
9f:55:be:22:7c:12:5e:89:b8:0d:15:f1:86:a9:82:2c:2b:bb:
02:83:83:a5:62:ed:c7:be:62:45:44:65:bf:9e:2b:9c:09:5f:
77:6b:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:02 2023 by rpki-client on console-ams.rpki-client.org