Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/gLr1XBvbAdsV2aGJ1bVtXSAN6Ig.roa
File: gLr1XBvbAdsV2aGJ1bVtXSAN6Ig.roa (raw, json)
Hash identifier: m/90pQBr6aUT2CdpoXWZkswcIFU00OJJGx26r6Wvino=
Subject key identifier: 80:BA:F5:5C:1B:DB:01:DB:15:D9:A1:89:D5:B5:6D:5D:20:0D:E8:88
Certificate issuer: /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial: 0184595D1B7B440A16E16CB7B2E4034683E7
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/gLr1XBvbAdsV2aGJ1bVtXSAN6Ig.roa
Signing time: Tue 08 Nov 2022 22:29:44 +0000
ROA not before: Tue 08 Nov 2022 22:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51501
IP address blocks: 91.235.148.0/24 maxlen: 24
91.234.54.0/24 maxlen: 24
91.235.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:59:5d:1b:7b:44:0a:16:e1:6c:b7:b2:e4:03:46:83:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
Validity
Not Before: Nov 8 22:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80baf55c1bdb01db15d9a189d5b56d5d200de888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:83:db:5f:bd:58:c3:02:ce:49:05:ab:4f:
4f:f8:b9:49:d5:4e:1a:17:d2:12:02:a1:30:c1:55:
68:cb:67:30:62:7a:d6:4a:bb:cd:95:26:ba:70:b6:
20:3f:70:75:50:5d:20:59:48:53:b9:d9:a9:bd:06:
1a:e5:fc:69:09:bc:99:5f:79:e7:f1:d5:1e:04:17:
57:70:b8:2e:c0:20:f6:2c:ab:7c:45:65:f9:b2:85:
30:ad:59:56:f8:6a:fc:22:7b:2d:44:12:8f:e9:ae:
c5:24:4b:b8:d8:9b:81:f9:63:ad:9c:48:32:84:0f:
7b:45:87:fd:25:c3:84:81:c2:aa:bf:10:ce:67:02:
d6:68:a8:7c:fb:61:b6:6c:36:d6:c8:04:8d:2d:dd:
73:72:8f:09:68:a2:3e:94:d6:8c:4f:ec:54:48:97:
e3:bb:42:ef:a6:a0:12:42:27:5d:19:b6:81:7c:f8:
76:fb:4e:80:32:47:39:b0:04:79:6a:7f:ac:5d:ec:
ee:3b:07:dc:cd:6d:37:47:3c:4e:95:89:89:6f:36:
a7:47:5f:45:30:a7:80:44:8e:1d:3e:91:23:dc:7e:
79:16:8d:c6:a0:07:b1:66:7c:75:0f:a5:b3:41:3f:
2c:74:e7:74:44:7c:6c:34:73:fa:fc:b3:b6:bf:68:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:F5:5C:1B:DB:01:DB:15:D9:A1:89:D5:B5:6D:5D:20:0D:E8:88
X509v3 Authority Key Identifier:
keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/gLr1XBvbAdsV2aGJ1bVtXSAN6Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.54.0/24
91.235.148.0/24
91.235.241.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2d:a9:c9:be:f8:d3:1f:c3:a6:00:06:7a:f2:3d:bb:0c:78:
66:97:d6:84:6b:bc:8a:c7:c3:16:9e:e2:8f:ee:99:6a:c2:20:
72:ee:70:6e:81:62:61:6b:92:ba:b8:1d:54:12:e2:72:2a:7b:
89:90:74:44:7f:9e:2f:77:94:cd:ce:b7:8a:e2:2f:2d:8b:75:
47:21:45:73:38:d4:98:0c:46:7b:1e:7c:1e:f4:b3:01:99:ef:
09:6b:56:bd:a3:47:e5:01:3f:2b:48:cb:39:c5:37:c9:b9:a8:
a3:09:a3:44:df:97:ba:66:fd:3c:ab:83:07:4a:9c:36:6d:71:
91:6d:3d:13:10:86:6a:8f:15:db:b6:ee:e5:2b:81:ea:21:3b:
8c:aa:d9:8e:99:6b:28:d1:5c:49:89:bf:f2:c6:cb:44:85:77:
49:9d:e1:45:16:74:e9:6b:9c:e7:0c:7d:61:5c:49:cd:84:c6:
ba:68:79:77:bb:d6:7c:d2:6a:5b:5c:f8:5e:6d:14:6d:23:df:
eb:48:28:6b:f1:89:94:3c:ae:aa:8c:1e:c5:48:13:51:62:7a:
f3:4a:24:f4:04:35:47:50:69:81:40:45:c9:b4:81:9b:e5:37:
68:7f:d1:37:15:dd:3e:0a:06:34:ec:48:6e:38:f9:45:a1:e1:
c3:15:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org