Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/Q-WAF3kCePc1E6RISEWxRXqAzXA.roa
File: Q-WAF3kCePc1E6RISEWxRXqAzXA.roa (raw, json)
Hash identifier: XEQcqQy4l9mEZHUp9pUz0/uKupeT3Im75FhTuDDcOhY=
Subject key identifier: 43:E5:80:17:79:02:78:F7:35:13:A4:48:48:45:B1:45:7A:80:CD:70
Certificate issuer: /CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Certificate serial: 445760
Authority key identifier: E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/Q-WAF3kCePc1E6RISEWxRXqAzXA.roa
Signing time: Fri 21 Jan 2022 13:41:46 +0000
ROA not before: Fri 21 Jan 2022 13:41:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 91.230.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4478816 (0x445760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Validity
Not Before: Jan 21 13:41:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43e58017790278f73513a4484845b1457a80cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:89:4b:8d:7f:b3:66:69:e9:14:a4:cb:77:
e6:e0:50:8e:58:c8:f3:ec:37:96:98:92:63:2a:c4:
b8:2f:2b:c7:5c:11:60:99:f9:06:a3:51:64:a3:8b:
37:63:50:95:dc:ee:98:d1:fd:74:94:5c:e6:ff:a7:
ed:05:ed:90:66:e1:4a:a2:c5:4b:db:f0:79:d2:df:
72:f5:db:64:65:8b:54:bd:92:f7:11:ff:13:4c:d7:
0a:bb:92:25:85:de:6b:ab:6c:07:e0:cc:37:b1:52:
c4:00:c3:10:94:f7:f3:27:04:c7:03:ad:fd:af:94:
82:8e:f6:1d:92:6f:43:49:a2:a4:58:1d:40:6c:3b:
03:16:be:6c:e1:ba:0c:97:ef:bf:5b:10:79:86:4e:
42:53:00:22:78:26:2f:de:38:2d:c8:ee:01:4e:d0:
2c:65:c2:4b:84:b5:cd:61:17:f9:dc:41:b8:23:f6:
df:3f:2d:03:2b:bb:3e:bd:0b:f5:04:ac:5f:46:b2:
13:b6:56:fd:23:a0:5e:90:44:3f:2f:e1:fa:1d:a3:
d2:21:4e:9c:42:ad:42:e7:87:a1:6e:06:e0:9e:c8:
34:9f:2e:f7:30:fa:0b:1d:b5:96:6a:b9:7a:44:3c:
ad:ee:c4:ac:d3:08:e7:e4:05:a7:09:f0:85:4f:ef:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:80:17:79:02:78:F7:35:13:A4:48:48:45:B1:45:7A:80:CD:70
X509v3 Authority Key Identifier:
keyid:E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/Q-WAF3kCePc1E6RISEWxRXqAzXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:51:70:8f:2d:bd:d3:14:b2:26:c7:76:a3:77:d0:51:f7:3f:
b3:56:92:2f:53:27:6a:cd:4b:0d:a8:14:7f:84:0f:3d:02:a2:
16:ac:61:de:7d:8f:2b:12:3f:74:92:3a:46:61:1e:60:a5:95:
d2:6c:25:31:09:df:13:dd:5a:b6:c2:c1:54:7d:f9:a4:04:0d:
c2:de:82:bb:43:fa:68:df:0c:0a:2c:a0:d6:7b:af:1b:5a:18:
90:91:12:3b:83:28:00:eb:8d:6a:a7:80:ca:b8:9d:72:48:7c:
5f:0c:60:10:02:ab:a8:a3:31:e6:b0:7e:80:e5:71:c3:c1:4f:
ed:9b:e2:23:ae:be:0c:8c:ee:f7:b5:b6:2c:e8:71:11:ee:33:
ae:2b:76:73:4c:b5:3e:b6:5d:2e:2e:82:71:7e:fa:3f:8b:0e:
1a:58:4a:c4:0a:3e:a5:c4:1c:ba:64:7b:6d:4a:f9:b3:04:63:
e5:90:9f:89:bc:da:0e:12:44:2e:fc:e5:ae:12:67:d0:68:d2:
0e:0a:1c:42:72:98:4e:2f:40:98:27:ba:57:57:ed:d5:77:d7:
94:26:5e:39:29:ad:fa:a1:de:c7:db:72:cf:9a:4b:ee:35:51:
80:dd:09:05:94:8b:a9:34:42:ab:89:e5:46:d3:ed:c8:83:28:
66:ba:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:23 2023 by rpki-client on console-fra.rpki-client.org