Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/9epjFdMyyuYw_nm65FOt19ScYyE.roa
File: 9epjFdMyyuYw_nm65FOt19ScYyE.roa (raw, json)
Hash identifier: lqblxk3KNxGk6xHaqv2wuaT3rPjZJGdIcAit43jr9LY=
Subject key identifier: F5:EA:63:15:D3:32:CA:E6:30:FE:79:BA:E4:53:AD:D7:D4:9C:63:21
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 01835A091D9D5E8B5C3D173F9575A5B19318
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/9epjFdMyyuYw_nm65FOt19ScYyE.roa
Signing time: Tue 20 Sep 2022 08:34:50 +0000
ROA not before: Tue 20 Sep 2022 08:34:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56694
IP address blocks: 91.219.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:09:1d:9d:5e:8b:5c:3d:17:3f:95:75:a5:b1:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Sep 20 08:34:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ea6315d332cae630fe79bae453add7d49c6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:75:9f:95:ac:8c:4a:e3:ed:6c:07:d5:47:
1a:43:ba:4d:f5:d8:2a:49:55:8b:8e:15:e2:71:1a:
5f:30:0f:3a:36:31:cb:6e:02:80:4d:19:c4:fd:ca:
63:16:9f:66:1c:ea:03:69:83:80:62:08:ce:8b:75:
5e:21:0c:5c:de:86:bd:22:93:a2:72:f6:f4:68:b1:
77:30:be:6e:12:df:9a:7b:b0:d4:38:a1:c3:42:f1:
2c:00:4d:31:06:66:11:d2:0f:cb:e5:49:e8:63:3a:
42:18:c2:72:30:06:66:b6:4c:ed:5c:10:7f:61:1a:
05:12:77:ba:1f:b8:9d:89:89:94:96:9c:46:61:5d:
c6:15:bc:1e:6d:fd:e9:20:e5:2b:d7:6e:9a:c5:b3:
f2:0a:4d:cc:d4:2e:58:09:63:b0:7e:90:c8:14:6c:
95:1c:2a:93:ec:9f:80:5e:95:6c:fc:f8:cd:26:06:
ff:be:42:ef:ae:bb:26:9a:94:ae:05:17:5f:b2:e6:
fe:da:1e:70:7b:75:dd:31:2a:81:fe:95:06:1f:13:
ac:c6:ab:01:14:96:19:d5:11:2c:e8:1e:43:71:c0:
70:6b:9f:46:e7:42:48:f6:86:4d:78:f5:81:9f:76:
72:81:54:a5:dd:e8:bb:f3:25:cf:ec:71:89:7b:b1:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:63:15:D3:32:CA:E6:30:FE:79:BA:E4:53:AD:D7:D4:9C:63:21
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/9epjFdMyyuYw_nm65FOt19ScYyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.148.0/22
Signature Algorithm: sha256WithRSAEncryption
41:cb:cd:3e:46:cd:bb:16:86:91:c8:fd:0a:3c:21:36:79:7a:
aa:76:0e:90:7c:94:dd:04:6a:6b:64:73:c8:79:db:21:00:00:
2f:9e:55:2d:46:a9:95:ff:72:90:bd:48:bf:2d:6e:af:bb:50:
81:d7:67:3a:26:5d:02:9f:84:d9:b7:99:21:21:0f:7c:03:df:
37:3e:71:a7:d3:33:e4:4a:fa:56:6b:a6:74:09:72:e1:5d:c4:
72:69:19:13:cb:40:38:79:05:8e:ed:ea:33:47:00:62:8d:e5:
ab:38:ce:91:02:15:b0:b0:e8:31:ba:a1:2a:41:6c:87:07:8e:
c4:cd:e8:16:19:dd:43:b0:b3:a8:51:c6:f5:a4:f3:1a:a7:d7:
c1:70:ba:18:13:4e:db:46:c9:1c:25:7a:19:16:a2:31:4c:be:
0b:56:fc:1d:83:76:55:1e:29:9b:b1:ec:0c:6d:98:a9:4a:6a:
23:12:26:12:3c:5c:d4:fd:76:3c:fa:3f:9e:a1:d2:d7:ad:17:
2b:37:df:22:4e:0f:05:4b:7a:0a:dc:c3:c9:f8:d0:23:0e:22:
51:93:0c:bb:d2:3d:44:ca:29:c8:4b:58:0b:81:61:0f:e3:a3:
c6:b6:21:38:b7:ad:2e:5e:09:57:22:8c:15:08:0d:91:24:93:
5e:a1:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:11 2024 by rpki-client on console-ams.rpki-client.org