Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/N4u1tMqifXaVVYo2qunJTc73L00.roa
File: N4u1tMqifXaVVYo2qunJTc73L00.roa (raw, json)
Hash identifier: gm42GsG6z5zgAl19CUr8xtXQOdvMZJlKY5c56ojBwhM=
Subject key identifier: 37:8B:B5:B4:CA:A2:7D:76:95:55:8A:36:AA:E9:C9:4D:CE:F7:2F:4D
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 035D221D
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/N4u1tMqifXaVVYo2qunJTc73L00.roa
Signing time: Sat 01 Jan 2022 04:52:24 +0000
ROA not before: Sat 01 Jan 2022 04:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57142
IP address blocks: 91.230.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56435229 (0x35d221d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 04:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=378bb5b4caa27d7695558a36aae9c94dcef72f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:6d:d5:1c:ca:b1:1e:88:65:74:13:b6:0c:
65:c2:22:1f:d8:d4:35:1f:d9:f2:62:42:7c:c5:6d:
6c:bc:5b:d2:de:45:99:8c:25:bd:fe:5a:45:93:1c:
50:3d:ee:73:9a:f6:ab:b7:87:b8:0e:0f:b7:23:fc:
08:4c:53:50:d6:d2:ce:f8:27:52:94:4e:bb:98:65:
fe:a8:7f:08:63:5a:ba:dc:e0:a3:0d:47:69:2d:68:
02:cb:cc:3c:33:0f:f4:e1:16:4f:79:b3:36:24:25:
5b:9e:d8:cb:9d:2b:96:60:10:2f:b5:b3:65:72:6b:
f9:18:f2:f3:a8:61:32:f7:85:23:08:c0:42:6a:7c:
06:45:e2:5e:cc:e1:a6:6e:8a:d7:60:3b:62:aa:71:
e0:de:00:23:85:e4:f2:e1:04:48:e4:8e:7a:93:a3:
74:24:c7:c3:cd:81:d3:ed:e1:a4:16:0f:4c:38:d0:
ec:e5:24:48:12:18:d0:df:b5:73:32:2f:71:5b:bb:
d1:94:07:c3:6c:b7:ad:5a:e7:ca:c3:17:eb:cd:c8:
5e:f2:4c:2a:3d:da:0d:24:b8:ce:e8:41:77:fe:38:
ba:e0:5e:60:85:03:d1:0a:14:da:eb:60:79:06:03:
dd:e0:4c:6e:a2:00:0c:8e:49:e5:57:fb:7f:ac:ab:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:B5:B4:CA:A2:7D:76:95:55:8A:36:AA:E9:C9:4D:CE:F7:2F:4D
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/N4u1tMqifXaVVYo2qunJTc73L00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:54:ee:13:59:ad:51:c8:29:0a:d8:8a:6e:7b:dd:d4:a3:43:
41:ab:25:7e:79:a7:e2:98:e5:67:f8:11:d3:cb:59:9d:cc:5d:
40:5c:e1:54:9a:1e:07:bd:98:94:46:3e:1d:60:0e:ac:4e:c8:
f1:a1:20:d6:65:13:fc:82:09:0e:33:0c:51:72:6c:46:33:3e:
8a:5a:ec:ee:c9:b9:e6:f7:99:6e:ad:88:f6:5b:97:6d:36:01:
67:38:2b:13:03:79:1e:01:81:45:d4:4b:33:87:50:fb:1a:88:
da:44:27:e2:21:d2:2c:82:86:6e:a3:3c:2d:85:28:ba:6a:8e:
d3:ff:5c:de:33:69:d8:f9:a8:55:f4:85:f6:9d:a7:35:62:33:
7e:6c:d2:16:7c:e8:b5:63:d7:a7:bb:e1:f0:98:ac:d0:80:d4:
db:aa:16:6d:63:f8:d5:74:fa:b1:47:22:69:53:5f:c3:cb:96:
58:67:68:5d:f1:02:7f:90:b9:08:be:8c:73:eb:b0:1a:6d:46:
9c:d1:bd:22:85:70:55:5a:78:ef:74:15:db:e2:2b:3b:89:4c:
ca:01:ac:ad:06:0c:c5:14:73:04:65:e5:9f:b8:a7:f9:8d:02:
f5:41:ed:82:a6:52:77:cf:c5:6b:c9:16:e8:3b:e0:c8:d6:3b:
55:86:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:30 2024 by rpki-client on console-ams.rpki-client.org