Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/lYltQSsOtLNpEWh0DmdPCmqVWRw.roa
File: lYltQSsOtLNpEWh0DmdPCmqVWRw.roa (raw, json)
Hash identifier: eLIgJt71qSjT/PA20g9l1yD1E/KlK6bXMYlcd1BTOpU=
Subject key identifier: 95:89:6D:41:2B:0E:B4:B3:69:11:68:74:0E:67:4F:0A:6A:95:59:1C
Certificate issuer: /CN=1e38f7d1bf92bbabfd9451c51503b1d442fb954e
Certificate serial: 0E8EC61A
Authority key identifier: 1E:38:F7:D1:BF:92:BB:AB:FD:94:51:C5:15:03:B1:D4:42:FB:95:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjj30b-Su6v9lFHFFQOx1EL7lU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/lYltQSsOtLNpEWh0DmdPCmqVWRw.roa
Signing time: Sat 01 Jan 2022 05:57:35 +0000
ROA not before: Sat 01 Jan 2022 05:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47527
IP address blocks: 91.230.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244237850 (0xe8ec61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e38f7d1bf92bbabfd9451c51503b1d442fb954e
Validity
Not Before: Jan 1 05:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95896d412b0eb4b3691168740e674f0a6a95591c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:82:36:78:b7:74:8e:e8:84:26:11:48:cd:c4:
13:c1:28:65:1c:2a:0e:c6:37:da:6b:76:99:d4:3f:
49:f5:e5:b1:ca:47:49:6b:64:db:00:dc:6b:51:4b:
f9:34:50:78:e7:df:71:ea:dd:3e:07:cb:44:ee:18:
6d:07:ae:85:6c:3a:cd:18:89:71:c7:f6:ee:1d:7a:
cf:f2:15:fa:d8:9a:88:c6:55:e4:cf:96:45:bb:7d:
1d:60:05:88:33:8f:ae:9c:5b:52:44:24:c4:85:0e:
e1:01:b0:43:62:63:cf:a8:9a:9e:c2:6f:ce:8a:8b:
66:2e:21:29:f9:f7:97:2e:0c:ae:de:cd:e4:50:31:
e7:b3:0a:62:08:c6:be:5f:dc:eb:11:34:b5:c1:e3:
6b:59:2a:46:fe:6c:f4:67:eb:f5:c1:19:9e:ee:91:
ff:ad:78:19:85:e9:c3:9e:38:95:15:33:be:38:76:
17:b8:3d:df:b5:bf:6b:70:6f:16:ed:9c:a8:a7:77:
45:6f:60:4b:05:d7:84:9f:fd:a3:0f:68:ac:cb:92:
a7:32:e2:d3:b3:9f:f2:70:d4:f9:1c:20:f9:04:7d:
25:91:11:fc:cb:89:02:51:ef:4c:c7:5b:10:bb:07:
85:9f:80:b0:45:37:34:a2:10:a3:bc:12:38:0c:49:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:89:6D:41:2B:0E:B4:B3:69:11:68:74:0E:67:4F:0A:6A:95:59:1C
X509v3 Authority Key Identifier:
keyid:1E:38:F7:D1:BF:92:BB:AB:FD:94:51:C5:15:03:B1:D4:42:FB:95:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjj30b-Su6v9lFHFFQOx1EL7lU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/lYltQSsOtLNpEWh0DmdPCmqVWRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/196d22-8aed-49fd-8192-cbc05dd30bd9/1/Hjj30b-Su6v9lFHFFQOx1EL7lU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.239.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7e:a9:68:42:70:ee:63:b8:4a:b3:e8:dd:79:bf:6a:a1:09:
22:3e:45:86:d6:48:d8:a2:3c:e1:b1:d7:1c:9c:76:de:73:c1:
ce:b0:74:f1:f4:cf:51:90:e1:f5:63:d0:32:fc:1a:2e:2f:7a:
3c:3e:fb:93:98:0d:ae:5e:03:67:5d:3a:9e:f9:4b:e8:4b:ea:
da:32:0d:d0:c1:ea:b4:1e:71:1c:3c:c9:8c:07:5a:ea:1c:ed:
f0:68:6d:e4:eb:1c:67:f5:c9:dd:b4:c7:63:39:3b:bd:46:7a:
b7:87:55:c2:31:a4:5a:a2:f6:44:97:39:50:07:40:40:19:52:
1b:e2:e7:ab:c7:b1:39:f9:13:88:40:41:60:e2:3a:42:c6:03:
bd:18:b2:02:26:75:b7:df:00:2a:20:2a:71:39:68:1a:c7:7b:
43:ff:97:cf:f7:6b:97:17:85:69:48:a9:9a:f2:32:d3:1f:b3:
2b:8d:5f:e2:db:a8:03:4a:7f:7e:99:29:61:54:5e:6e:a6:5c:
ed:27:5a:c5:4d:10:a2:4b:93:c0:24:26:a0:da:97:5c:80:ad:
8c:42:c1:6f:e4:25:e4:9d:cf:91:44:d9:4e:a6:f4:d8:a1:27:
bd:28:f0:f5:23:e3:0f:f2:c7:f5:12:35:fd:ba:a2:9a:7d:9b:
e5:4a:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-fra.rpki-client.org