Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/_vJLuA-xgVTlgcARqj2BTtJzP2E.roa
File: _vJLuA-xgVTlgcARqj2BTtJzP2E.roa (raw, json)
Hash identifier: grr+UY7QD/YBBiyzVdow5cUeSwDEluAn4qWw+gQMxsI=
Subject key identifier: FE:F2:4B:B8:0F:B1:81:54:E5:81:C0:11:AA:3D:81:4E:D2:73:3F:61
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: AFA4
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/_vJLuA-xgVTlgcARqj2BTtJzP2E.roa
Signing time: Tue 08 Mar 2022 18:21:27 +0000
ROA not before: Tue 08 Mar 2022 18:21:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29397
IP address blocks: 91.224.240.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44964 (0xafa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Mar 8 18:21:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fef24bb80fb18154e581c011aa3d814ed2733f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:a1:9f:e8:8f:02:49:8c:b1:b7:97:d0:fe:
ee:67:f4:64:1a:d8:cb:1a:b8:d9:ab:24:01:0c:cb:
f4:37:8d:8b:4d:39:25:31:6b:49:08:09:2e:18:ef:
f6:a2:4f:50:8e:db:4a:4b:f8:28:53:b2:4f:eb:ec:
14:3f:c8:c5:5a:55:dd:60:1e:3a:e6:0f:f8:04:9b:
60:fc:ae:ec:97:3e:dd:c5:9d:84:8d:ec:ac:ba:6d:
4c:36:54:9a:c5:91:d0:d7:10:44:14:1e:97:76:52:
78:db:36:ce:c2:af:d4:0a:59:bf:fa:d8:29:b4:ed:
96:2e:d2:aa:2a:1f:3c:00:1c:e0:fc:69:02:36:53:
63:94:52:53:e7:30:24:eb:b7:5b:7d:51:cd:73:ff:
5f:21:e6:4a:76:d2:f5:74:48:39:47:90:a8:e8:c1:
a6:1b:d5:c9:60:fd:e7:b7:66:e7:b7:33:b0:20:db:
51:54:24:f2:2f:36:fc:8c:2e:c6:3a:81:08:80:41:
e1:2c:ab:50:ed:c5:0c:61:a2:5e:d2:d1:5d:3e:9e:
90:5e:4d:23:12:ea:18:e9:66:2f:ec:3d:a3:4a:45:
0c:4f:fb:92:7b:d0:42:4b:43:27:1d:3c:0c:b1:44:
8f:74:02:03:4f:af:d7:77:b4:d8:25:e9:11:cb:95:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F2:4B:B8:0F:B1:81:54:E5:81:C0:11:AA:3D:81:4E:D2:73:3F:61
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/_vJLuA-xgVTlgcARqj2BTtJzP2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.240.0/23
Signature Algorithm: sha256WithRSAEncryption
07:9f:bc:a3:ac:33:06:d9:f8:16:ff:4a:be:23:4d:50:f3:76:
21:1a:3a:1c:49:57:9d:b4:05:55:af:92:9c:9c:80:a1:d4:bc:
0c:61:16:06:7b:63:33:7b:41:37:4f:6f:dd:06:0a:83:4c:58:
80:f0:a8:5a:5b:f8:47:1f:b2:3e:e2:ec:48:0a:b5:57:2f:74:
fb:3a:3f:2a:f8:90:92:62:02:86:70:ca:52:be:2b:75:f5:31:
1f:55:96:51:28:d7:22:61:cb:1d:3d:94:5a:60:4b:61:a3:46:
86:06:f8:ca:0d:c5:9e:4b:b6:f0:e0:b9:9e:e8:b1:d6:20:df:
41:3f:b7:38:35:28:e2:3c:85:e2:2b:36:e9:b6:62:da:8c:a7:
38:e0:7c:85:6b:74:86:69:32:0c:55:1c:41:1a:66:29:62:bf:
6f:05:4d:c9:f6:db:80:05:11:91:cf:60:db:38:e8:77:f9:8c:
61:1c:a3:3f:49:35:a3:ac:98:eb:be:b0:3d:77:67:88:f7:67:
77:94:be:f1:0e:ee:9a:fd:4c:bf:00:27:35:36:83:a2:76:01:
31:a0:87:e0:4b:9b:21:80:0e:2c:b1:c5:83:9f:39:9f:cb:c1:
06:11:d7:77:14:28:78:61:47:16:04:6f:a5:21:a3:56:3d:ba:
91:f0:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org