Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/eWC45Ma7MnssQ8EWJuOEx-1HM1M.roa
File: eWC45Ma7MnssQ8EWJuOEx-1HM1M.roa (raw, json)
Hash identifier: eS2wXvnWU9/SiCF6XrqOgSzZ7+RC3tqL0Q3lbj03pEU=
Subject key identifier: 79:60:B8:E4:C6:BB:32:7B:2C:43:C1:16:26:E3:84:C7:ED:47:33:53
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 035CF81E
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/eWC45Ma7MnssQ8EWJuOEx-1HM1M.roa
Signing time: Sat 01 Jan 2022 04:52:24 +0000
ROA not before: Sat 01 Jan 2022 04:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49367
IP address blocks: 91.230.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56424478 (0x35cf81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 04:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7960b8e4c6bb327b2c43c11626e384c7ed473353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:70:57:dd:8d:1b:8d:07:27:bd:2e:a0:29:
c4:e9:50:c3:94:48:38:73:6c:f0:b9:3a:31:56:10:
7b:f8:54:45:38:e4:03:05:91:11:52:36:7c:0f:6b:
5b:f9:fb:59:db:25:b0:b8:64:f7:f3:e8:2a:ec:f2:
66:11:f1:e1:58:7c:0c:99:1e:f0:fa:6f:1b:54:bf:
5c:8c:dc:9d:df:13:8d:94:25:19:09:02:8c:87:34:
80:1c:26:74:e2:c4:42:d5:59:67:54:3d:f5:94:9e:
46:cd:0b:93:fc:2f:a8:c9:6d:ff:b6:ef:7d:ff:e1:
cc:53:8d:63:82:3d:25:96:54:2f:e2:ce:af:65:23:
57:ef:b9:1b:6c:48:cb:dd:62:36:e9:8c:42:3f:d8:
ff:85:67:ea:b6:5e:95:d5:82:bc:64:23:84:25:99:
5a:f1:99:56:59:6a:2f:55:13:2f:af:74:8d:da:56:
71:9c:fe:f1:bc:d5:47:09:ca:c0:51:7b:b6:44:51:
d9:b5:57:f4:03:b2:3d:43:ee:80:8d:2b:a3:c8:6f:
df:17:86:8c:88:28:7a:7a:22:f2:ce:91:59:f2:53:
03:95:6b:f5:69:d8:39:ad:65:55:df:f4:99:33:bb:
8e:32:4d:93:54:ba:ad:f3:d4:b1:4d:e0:9d:16:95:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:B8:E4:C6:BB:32:7B:2C:43:C1:16:26:E3:84:C7:ED:47:33:53
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/eWC45Ma7MnssQ8EWJuOEx-1HM1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
43:38:0d:50:18:61:20:00:6a:f9:7d:94:48:d7:a1:8e:32:b9:
df:e2:1d:41:ef:38:6e:f7:e3:63:06:c2:12:58:bb:e0:3d:a3:
0e:18:29:5a:e1:f9:03:9c:7d:c1:fd:43:fa:d7:f3:81:24:85:
21:85:af:a5:7b:cd:47:ef:1c:40:8b:08:4f:75:92:3e:a6:0e:
f9:cf:ba:9d:f2:8e:f1:f2:d1:24:d2:18:0f:08:f4:fe:76:e9:
40:df:41:d8:86:3a:7d:8b:49:eb:a4:13:a6:7c:ea:25:c0:eb:
3e:ab:c9:97:9a:b9:27:2a:1e:9f:f8:42:3f:66:85:61:42:b8:
f9:be:4e:79:30:1f:e8:0f:36:c7:a5:5e:0a:5e:68:79:44:5b:
8d:53:2e:17:b6:33:0b:ea:5f:b1:28:53:69:67:51:af:86:ef:
8d:e3:37:52:bf:78:0d:68:e2:18:d8:d6:46:7e:50:3d:5e:fc:
4c:1c:37:00:b6:75:ee:51:99:50:ad:f3:82:32:8d:f5:46:3e:
b0:62:85:fc:6e:71:a1:0e:68:4f:8e:31:70:28:b7:75:79:6a:
12:f6:b8:e6:f8:7e:00:16:67:f3:7a:cc:2e:61:b2:de:1e:6a:
7b:25:42:11:23:8c:fc:2e:d3:89:6c:63:1a:b9:05:e3:07:a5:
07:c5:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:09 2024 by rpki-client on console-fra.rpki-client.org