Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/74kZURDmpOclKjNxPh_o5v5x3S0.roa
File: 74kZURDmpOclKjNxPh_o5v5x3S0.roa (raw, json)
Hash identifier: ZluAsIQOGLnXAH3nyB48PDFDZlc2kqE44R6wUGRF3S8=
Subject key identifier: EF:89:19:51:10:E6:A4:E7:25:2A:33:71:3E:1F:E8:E6:FE:71:DD:2D
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01828C27E82E323714AE7939AA55931A1F95
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/74kZURDmpOclKjNxPh_o5v5x3S0.roa
Signing time: Thu 11 Aug 2022 09:06:41 +0000
ROA not before: Thu 11 Aug 2022 09:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 91.147.116.0/22 maxlen: 24
91.147.124.0/22 maxlen: 24
91.147.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:27:e8:2e:32:37:14:ae:79:39:aa:55:93:1a:1f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 11 09:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef89195110e6a4e7252a33713e1fe8e6fe71dd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:af:93:33:a5:91:d4:0f:9a:a9:db:eb:cf:
a3:90:37:de:a5:23:ec:85:13:8a:bf:95:f3:fd:22:
53:ac:8d:9a:63:a0:1c:d0:14:f0:ad:52:8d:fd:24:
a4:80:ff:14:44:e6:ed:3b:d3:02:66:43:b7:57:38:
0d:f3:99:ed:91:db:ae:db:82:5e:a2:de:f0:9b:9a:
b9:bb:16:03:4b:18:93:ed:56:a6:03:e2:9d:62:ed:
62:92:45:26:ca:26:48:33:4b:8f:7c:0a:2d:96:31:
02:08:cc:5e:83:a2:eb:11:36:cc:30:6f:5b:a9:3b:
5f:e4:e7:42:a0:aa:5d:d6:85:3a:08:b1:25:60:a4:
62:12:bf:8f:2e:cd:d5:d2:2d:b2:d0:99:e7:b9:b6:
9f:39:d9:30:35:6f:01:f4:fd:09:71:e3:38:78:57:
97:14:60:28:42:95:05:66:e1:ae:28:f4:0a:31:ec:
74:38:e5:18:30:fe:77:0b:a8:d1:cc:04:d8:d2:f6:
d9:3c:5b:2f:01:72:a6:77:9f:1b:1d:36:be:29:82:
7b:3f:b5:4d:4c:fd:1d:1f:51:ca:27:93:f3:f0:16:
b0:6b:50:f7:de:9b:c6:10:86:2a:c7:da:7f:a1:3a:
8f:4e:b1:36:69:de:06:55:3b:e8:27:65:bc:11:22:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:19:51:10:E6:A4:E7:25:2A:33:71:3E:1F:E8:E6:FE:71:DD:2D
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/74kZURDmpOclKjNxPh_o5v5x3S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0-91.147.127.255
Signature Algorithm: sha256WithRSAEncryption
9c:39:27:53:23:3f:6e:a1:dd:86:fa:4c:36:1c:fd:c5:f5:46:
d8:ff:ac:ec:78:44:12:18:7c:21:e4:d2:f9:43:56:ef:e3:dc:
b5:fc:1f:0e:10:a5:40:e9:79:31:65:cc:a7:30:bc:02:99:bf:
89:ca:37:97:6b:4a:28:04:0c:c7:65:df:b8:c6:91:eb:69:41:
7c:46:60:dc:85:e6:52:0d:56:0f:75:a8:a6:d3:4c:3d:f7:74:
9d:ac:32:c1:3d:79:ab:8d:37:e9:be:ce:d9:e1:63:00:0f:d3:
bb:f9:ab:5c:d6:cf:cd:ce:3e:fc:fb:f2:09:2e:ba:06:63:c0:
5c:ae:2f:5a:ce:d8:1b:ff:da:33:b9:02:fe:d9:41:b2:e5:19:
2e:c9:c0:c8:0e:f1:f8:62:a8:14:ce:4e:28:ee:9c:6c:15:f2:
41:13:a1:31:81:78:2d:b5:bf:e3:a1:df:4e:56:f3:ed:0a:d3:
90:44:c3:8f:83:af:ab:c4:b9:fa:e6:fd:4e:99:17:2f:b1:f3:
ac:13:04:bb:23:5d:e1:e5:b6:4e:45:cd:d1:2f:84:8e:91:36:
f3:66:7d:47:bd:b9:e3:c0:cc:c1:ed:5c:a2:52:66:f3:60:f0:
23:8a:e3:8a:b5:21:3b:d6:0c:4a:fb:c6:10:f4:cd:1c:16:9f:
27:6e:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org