Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/7x2H5R2I0zAmLhfuGVuGWwpQan8.roa
File: 7x2H5R2I0zAmLhfuGVuGWwpQan8.roa (raw, json)
Hash identifier: DhGiHTfZJ71zEp3lTQ/GkMSJkxR1dUlGCGztluSfJAw=
Subject key identifier: EF:1D:87:E5:1D:88:D3:30:26:2E:17:EE:19:5B:86:5B:0A:50:6A:7F
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 01FD954C
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/7x2H5R2I0zAmLhfuGVuGWwpQan8.roa
Signing time: Sat 01 Jan 2022 13:01:29 +0000
ROA not before: Sat 01 Jan 2022 13:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199016
IP address blocks: 91.199.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33396044 (0x1fd954c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Jan 1 13:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef1d87e51d88d330262e17ee195b865b0a506a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:de:19:23:27:3d:f4:d7:57:e3:a8:20:e0:
78:90:0b:60:75:22:33:db:fa:bf:2c:f8:3c:2a:c2:
e3:a9:0c:80:26:cf:f4:46:7d:23:5e:54:55:c8:cc:
06:de:5e:5c:79:fa:8c:30:75:81:22:df:97:3f:f6:
58:ad:0f:2c:a8:a6:ab:dd:51:5c:d4:d0:21:d7:3b:
42:0b:92:05:50:96:77:2a:30:53:36:30:82:39:58:
94:b8:98:64:4c:06:6f:ee:4f:75:8f:92:6f:3d:24:
94:b4:34:c9:ce:36:e4:86:bf:a9:43:9d:48:2b:20:
9c:3c:4a:d9:c8:31:19:7f:5c:5d:ca:55:ad:78:50:
3c:fd:99:44:e5:a7:93:b3:9f:15:40:68:5b:45:d5:
80:cc:b8:08:e9:0f:a6:10:cf:cd:3c:96:b5:81:06:
71:83:77:31:79:0e:4a:ce:f7:12:b5:b4:75:7b:ec:
f4:7b:7a:60:71:b2:fc:98:98:76:34:50:1a:4d:63:
c8:4f:a9:79:6f:12:8a:af:92:d4:61:f9:a6:aa:0c:
62:2a:8f:fa:cb:19:15:71:19:2e:2e:e2:38:59:d5:
b5:79:c3:71:6f:a2:c3:11:d7:41:bb:d5:ae:bd:1b:
c1:e3:60:e6:76:cb:e8:a0:8e:75:99:ee:be:29:a2:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:87:E5:1D:88:D3:30:26:2E:17:EE:19:5B:86:5B:0A:50:6A:7F
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/7x2H5R2I0zAmLhfuGVuGWwpQan8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.116.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3f:e0:b4:54:0a:4f:55:1d:3d:04:35:f1:e1:87:4f:a4:2f:
58:39:73:79:0a:af:46:3a:d3:68:25:9b:21:a4:ba:27:ea:d3:
31:9e:46:a3:78:cb:24:52:6a:71:02:81:f8:93:11:e9:84:fd:
ea:66:ff:55:bc:dd:9c:26:43:c4:bc:bb:04:1e:ca:18:50:5e:
19:d6:58:11:fd:37:8c:b4:5e:b7:ed:57:b6:ea:de:bb:9f:17:
83:02:c3:e7:b7:b1:ef:48:bf:05:05:f3:c4:c9:2f:f2:8b:cd:
d9:5b:91:a8:37:fe:da:46:38:0a:80:51:19:ab:db:0a:45:5a:
8d:0b:d3:f7:3f:05:33:ad:a5:f9:37:e7:2f:3b:c0:1b:39:04:
98:42:d5:f2:ba:5c:0e:7c:a4:8b:4c:73:a8:a1:e7:8e:3a:6c:
8a:cc:ff:96:e8:e6:52:6a:9f:88:b6:5e:fc:bb:87:a6:fc:14:
62:86:d3:21:9a:f0:42:aa:98:a8:50:a8:86:95:69:54:eb:2f:
19:3f:fd:c6:0a:3b:14:d3:a7:4a:71:bc:ca:64:78:cf:ea:c9:
b2:6a:03:4a:32:14:20:bd:89:ff:10:5c:98:59:19:79:3d:26:
cb:04:75:95:9e:e6:a7:9a:d2:c0:21:14:52:99:08:0b:5b:d6:
78:70:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:18 2024 by rpki-client on console-ams.rpki-client.org