Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/9l8gcnRRVkmYV5gUnnAnHoAh5-w.roa
File: 9l8gcnRRVkmYV5gUnnAnHoAh5-w.roa (raw, json)
Hash identifier: F4Y50JvXaUc8ekddJnvkKUBMokI3jqUH9PYaVCVehJ0=
Subject key identifier: F6:5F:20:72:74:51:56:49:98:57:98:14:9E:70:27:1E:80:21:E7:EC
Certificate issuer: /CN=0b4326f84c150160c720765998fe8fa53ca2e2e8
Certificate serial: 018258F2319ED65A6B625A0FBADCF8A9ADCC
Authority key identifier: 0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/9l8gcnRRVkmYV5gUnnAnHoAh5-w.roa
Signing time: Mon 01 Aug 2022 10:27:23 +0000
ROA not before: Mon 01 Aug 2022 10:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399618
IP address blocks: 91.237.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:f2:31:9e:d6:5a:6b:62:5a:0f:ba:dc:f8:a9:ad:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4326f84c150160c720765998fe8fa53ca2e2e8
Validity
Not Before: Aug 1 10:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f65f207274515649985798149e70271e8021e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:98:0d:8a:bd:31:c9:67:0b:09:68:3a:d1:
2f:09:98:b1:2f:12:52:ae:e4:a9:6c:c1:fd:7a:9c:
7b:7d:23:47:79:a0:cc:0d:a5:0e:c9:a7:9b:8d:25:
4a:78:6f:46:d5:a1:c0:1a:9b:18:a3:e9:b3:d6:c5:
44:c5:60:56:e7:49:ce:6c:d6:e3:69:e1:6e:1a:51:
d4:f0:53:fa:9e:db:a7:70:b9:e4:34:0c:f4:6e:4c:
92:80:d6:6e:fe:cf:18:e4:d0:55:e8:29:e3:3c:1c:
03:da:fc:f9:1b:64:4f:7c:73:bd:8b:3d:51:74:14:
c1:7e:f1:d0:9c:b6:7d:06:2f:b1:c1:74:0e:5a:28:
f5:f0:15:3d:3a:a2:1a:f8:2b:ca:14:f9:37:32:91:
ed:a4:3a:62:04:8e:5b:5c:7e:b8:51:12:fe:80:ea:
9c:d4:00:85:bf:64:17:f0:a4:2c:40:e8:83:40:9d:
4a:63:8c:c3:a1:3e:71:f5:9e:e2:10:51:49:08:e5:
71:c9:6f:b6:43:b3:ef:87:8d:c9:fd:a8:df:7c:13:
49:5e:8d:ec:e3:3d:ab:4e:ce:4d:4f:00:cd:2c:20:
8a:68:a9:27:a5:56:c4:15:10:5f:f6:e7:3a:f9:dd:
4f:b9:0f:ad:90:cb:06:52:b2:29:d2:99:84:7d:13:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:20:72:74:51:56:49:98:57:98:14:9E:70:27:1E:80:21:E7:EC
X509v3 Authority Key Identifier:
keyid:0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/9l8gcnRRVkmYV5gUnnAnHoAh5-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:59:4e:d5:5e:1d:9b:7d:f9:87:f3:6e:8a:56:ed:8e:02:1a:
d7:db:88:1b:08:c6:87:7a:e1:71:84:13:fa:0d:1e:d2:92:c6:
c9:80:d6:0d:25:a2:83:fc:81:08:15:80:9e:a9:fa:87:87:b9:
69:6e:1b:a0:70:f8:0b:cd:62:a4:0a:c9:b1:10:12:03:62:91:
c2:71:c2:fa:e4:ba:8c:62:0a:ac:8e:7d:87:ec:b8:e0:50:d0:
db:54:fd:69:00:a2:23:00:2a:a3:d8:ad:cb:c5:aa:d3:d6:1d:
26:8b:88:55:fa:25:2d:73:d1:a5:cb:90:db:9b:ac:83:1c:26:
b1:3a:0b:c1:2b:17:fc:48:9d:f8:15:ae:28:04:d5:f4:88:6d:
85:fd:05:17:26:85:18:e1:b6:86:6c:d7:c8:45:b2:3c:bc:34:
bc:19:62:35:7d:fb:cb:b3:04:7a:d1:13:8c:a4:0f:b2:b6:97:
82:03:ce:a2:df:00:13:d6:59:30:ec:3e:c8:22:7d:63:19:d0:
1e:4a:2c:5d:00:6a:0f:47:d2:ed:49:80:d0:3e:3f:3b:4f:eb:
5e:16:90:94:50:56:8e:36:70:31:06:39:70:ed:1b:11:71:d0:
b5:d1:36:e6:94:f0:14:5d:35:47:c9:01:d3:86:06:b1:61:d7:
fb:0d:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:03 2023 by rpki-client on console-ams.rpki-client.org