Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/I3jkrlndOtBJIo8jjrGhp0Z6wJI.roa
File: I3jkrlndOtBJIo8jjrGhp0Z6wJI.roa (raw, json)
Hash identifier: 17ILjsumi9nnL8KW1alLdoHA1PEJlVKOb7shxEs6ALc=
Subject key identifier: 23:78:E4:AE:59:DD:3A:D0:49:22:8F:23:8E:B1:A1:A7:46:7A:C0:92
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0182C48179006B8EBF7AB8AFC14A2AB1B6B3
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/I3jkrlndOtBJIo8jjrGhp0Z6wJI.roa
Signing time: Mon 22 Aug 2022 07:43:15 +0000
ROA not before: Mon 22 Aug 2022 07:43:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.243.179.0/24 maxlen: 24
193.46.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:81:79:00:6b:8e:bf:7a:b8:af:c1:4a:2a:b1:b6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 22 07:43:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2378e4ae59dd3ad049228f238eb1a1a7467ac092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:83:f8:e3:f8:c7:c6:56:9b:95:3d:ed:01:
59:55:fe:1a:81:1d:c0:4e:7f:73:31:8a:99:93:3d:
67:c6:79:34:3a:93:97:c3:5a:e4:d5:ac:37:4c:07:
2b:81:1e:d3:31:37:4c:f0:c4:fd:39:fa:06:a8:55:
f7:3c:5c:68:68:4e:a3:93:52:32:04:7b:f2:94:89:
eb:71:fa:d9:d0:52:76:bf:4e:a2:3c:b8:54:d3:10:
6f:15:3e:29:f5:be:d9:8b:ff:85:b6:0a:74:95:14:
86:de:97:42:88:13:0a:94:55:c9:ca:f9:9d:da:48:
0b:14:3f:0d:21:9e:d8:80:4a:10:e0:c9:a3:12:88:
c6:ba:39:f5:0d:f3:ca:c7:34:17:91:bc:f5:91:8a:
9e:a9:21:08:28:26:ed:55:90:e5:85:eb:56:fd:a1:
a5:52:44:74:7c:e7:9d:40:83:86:5e:16:19:af:9f:
b4:b5:89:a9:e3:ab:22:d6:91:a0:6c:bd:5c:45:72:
fe:7a:85:b3:e9:5c:65:fc:44:7a:21:6f:40:d4:f1:
34:f9:05:85:e5:57:cc:e0:be:38:4e:77:92:36:94:
96:69:84:0c:65:84:c3:e1:48:d4:ac:08:5c:88:0e:
87:28:0a:c0:a7:69:44:7b:53:c4:df:16:9c:71:ed:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:78:E4:AE:59:DD:3A:D0:49:22:8F:23:8E:B1:A1:A7:46:7A:C0:92
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/I3jkrlndOtBJIo8jjrGhp0Z6wJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.179.0/24
193.46.81.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3b:a4:ab:01:d1:e9:86:25:80:b7:fb:37:d0:67:0f:2a:e8:
1b:74:ef:f6:58:58:c8:67:39:fe:6e:30:40:0b:f1:05:53:13:
87:83:ab:62:68:03:36:2d:f5:b4:0e:ac:bd:92:c2:dc:df:38:
f4:77:90:c6:27:c4:38:2c:f7:6e:f8:a4:30:68:0c:1e:39:4f:
c3:97:fd:a5:13:d3:26:49:5a:f3:14:fc:0b:9c:be:ef:32:15:
4d:05:33:8c:69:af:7d:b4:57:a5:e3:25:76:06:cb:a2:09:fc:
73:cf:7a:3a:d6:96:94:e7:ef:f6:9a:68:fd:8c:05:ec:3c:ce:
86:cd:1d:d6:f6:58:ae:00:55:0b:51:d1:7f:33:89:59:74:b6:
f5:55:9d:bc:7b:94:3e:b1:94:7a:62:1b:73:1e:4f:5f:3c:db:
ed:3d:05:ab:82:24:1f:53:20:7c:81:72:c1:bc:57:0d:47:a7:
65:07:cd:d3:13:3a:2a:da:37:6d:aa:38:0a:16:26:dc:1c:6b:
bb:3b:fb:40:54:5f:c3:0b:95:d7:58:73:4e:95:d0:dc:41:ee:
70:ac:03:e3:4a:5f:e4:71:46:0c:24:59:e3:b7:ca:6d:58:3d:
f8:c4:ca:57:8a:1d:6f:70:fe:f3:2a:e4:04:cf:d1:4f:1a:dc:
2b:a9:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org