Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3ULck7FiXrbKQyDEfOu_7smfPa8.roa
File: 3ULck7FiXrbKQyDEfOu_7smfPa8.roa (raw, json)
Hash identifier: 7t6vkixlky8axDCc+IO6hW4ifexF9n0e0oImwwncaYM=
Subject key identifier: DD:42:DC:93:B1:62:5E:B6:CA:43:20:C4:7C:EB:BF:EE:C9:9F:3D:AF
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01843429DFA810275153C9CB2605BEF2318D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3ULck7FiXrbKQyDEfOu_7smfPa8.roa
Signing time: Tue 01 Nov 2022 17:07:50 +0000
ROA not before: Tue 01 Nov 2022 17:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42401
IP address blocks: 91.192.88.0/22 maxlen: 22
91.192.89.0/24 maxlen: 24
91.192.90.0/24 maxlen: 24
91.192.91.0/24 maxlen: 24
91.192.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:29:df:a8:10:27:51:53:c9:cb:26:05:be:f2:31:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Nov 1 17:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd42dc93b1625eb6ca4320c47cebbfeec99f3daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:f2:d7:6a:4d:6b:85:33:bf:1a:90:f5:a0:
de:8c:46:a2:67:65:69:69:ae:cf:9c:e6:11:4f:b8:
cb:77:d1:07:69:7c:d8:86:8b:f6:0a:10:af:dd:6b:
89:8c:e3:ac:40:a6:32:14:73:f1:bb:3a:41:89:6b:
db:ef:a5:15:95:9f:5f:6e:05:93:90:57:eb:59:46:
39:4c:e9:15:95:a6:96:e1:9f:65:fb:2e:6b:ef:96:
b6:c8:fc:ef:bd:c6:1a:31:36:67:ea:b1:c8:11:fe:
a4:3d:34:10:24:d9:f5:6d:81:11:ad:52:d1:6c:f4:
88:20:d2:fd:a9:6a:5c:f0:5a:46:0c:c9:ae:84:ba:
8d:51:fb:bb:2a:89:47:25:46:60:c5:d2:ac:a3:7c:
9e:0c:ba:80:42:7b:05:23:24:7c:0d:7d:40:e7:25:
0b:ba:30:f0:b2:56:70:4e:19:34:61:a5:73:37:87:
2a:26:73:19:f2:90:6d:d5:ea:e1:9a:21:9f:67:76:
4f:e6:da:48:2e:cc:a7:e8:d4:ee:f8:a3:9c:34:fe:
f6:da:64:73:79:99:7b:71:cf:4b:e0:3f:90:6a:45:
a1:4c:9c:90:7a:5c:98:d1:c7:0c:4c:7b:7f:35:2d:
55:97:f0:c2:76:c7:8b:e8:6e:78:5c:b1:14:5f:d9:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:DC:93:B1:62:5E:B6:CA:43:20:C4:7C:EB:BF:EE:C9:9F:3D:AF
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3ULck7FiXrbKQyDEfOu_7smfPa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.88.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b4:12:e8:23:a4:69:be:5e:b7:62:99:f5:2d:2a:8a:1f:ee:
8c:ab:ae:87:32:6b:50:54:96:0a:fb:48:b8:7d:13:a0:55:33:
4c:5c:12:65:b7:e2:5f:17:bf:47:ac:74:6c:4d:62:f4:ae:ef:
4d:02:68:d5:de:41:7c:05:30:c5:63:63:aa:2e:f3:1e:b0:4a:
81:ef:a5:c0:9f:9b:49:c2:b1:00:b7:5a:ec:90:88:90:91:d3:
b6:6c:d4:6e:2e:5f:79:d4:de:61:ea:ed:18:e1:d2:f2:a2:75:
99:f3:5d:41:ea:17:00:5d:03:19:4d:b9:fb:83:c6:8e:e1:c8:
01:cd:b6:9a:80:14:36:50:04:ac:a7:fe:45:4b:ab:35:76:8e:
77:c9:e1:4b:de:a9:c2:81:52:cb:11:d1:f9:b7:11:61:e0:7e:
7a:65:29:50:f8:c0:fa:a1:e5:76:41:25:1f:66:95:8c:82:bc:
e6:4a:15:b2:70:29:66:3a:59:fa:92:35:43:0d:68:00:90:c8:
3b:b1:fa:f6:01:35:69:db:e1:b0:4a:c3:84:6c:7c:57:15:e4:
66:72:32:b9:fc:6e:0e:27:ff:51:27:6f:99:e1:0a:3b:6c:f9:
9f:d1:aa:fb:9c:8e:f4:08:fa:08:a7:31:56:6a:f2:e1:13:cd:
6a:d1:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org