Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-aSg3k1nQjJtt1DC4FGftp0-f4k.roa
File: 1-aSg3k1nQjJtt1DC4FGftp0-f4k.roa (raw, json)
Hash identifier: jmOq0hqnK4ufYLwEzSMO3Rse+iw9/PsbvBqavsUMNyc=
Subject key identifier: F9:A4:A0:DE:4D:67:42:32:6D:B7:50:C2:E0:51:9F:B6:9D:3E:7F:89
Certificate issuer: /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial: 0150D25C
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-aSg3k1nQjJtt1DC4FGftp0-f4k.roa
Signing time: Sat 01 Jan 2022 14:59:10 +0000
ROA not before: Sat 01 Jan 2022 14:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43854
IP address blocks: 91.220.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22073948 (0x150d25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Validity
Not Before: Jan 1 14:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9a4a0de4d6742326db750c2e0519fb69d3e7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:16:3a:b3:bb:4a:15:4d:17:9d:a5:37:ea:
bc:51:a9:5f:24:9f:02:2b:10:79:95:bd:64:59:4d:
1e:ea:0f:39:f9:83:1f:28:b5:92:04:11:41:9f:30:
61:6b:ff:54:6a:14:ab:75:00:d5:2e:e2:98:41:9b:
92:60:fa:ad:26:20:8f:a4:18:4e:6f:65:1f:5d:a3:
07:be:58:2f:b8:42:36:6e:20:82:11:db:29:64:ef:
a7:64:e2:12:8e:bf:3a:6f:e8:12:7e:bc:da:41:f6:
4d:e0:5f:71:58:c6:b9:a8:c1:eb:44:dc:c9:eb:ef:
6a:64:a1:cf:cb:91:5f:af:1f:7a:2b:6d:84:d7:4d:
4a:24:90:e4:09:e9:67:aa:eb:19:66:f1:2c:5b:6f:
e6:7c:e1:aa:50:ee:86:a6:b2:c9:94:f9:c8:ba:5a:
5d:a1:fa:ee:b5:32:bf:3b:86:56:5b:1c:80:8c:89:
7a:99:a1:23:15:58:6c:11:09:70:8b:81:49:9c:47:
79:6c:89:16:4c:02:c7:46:b7:b8:38:a7:2b:c4:95:
65:93:0d:29:05:d2:39:64:86:fa:49:f0:b9:1e:42:
27:e9:26:bd:23:f7:30:14:b7:0a:8f:f8:b3:2b:bf:
cb:dc:4a:36:64:ce:b5:bc:f9:8b:e3:8d:88:89:c5:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:A0:DE:4D:67:42:32:6D:B7:50:C2:E0:51:9F:B6:9D:3E:7F:89
X509v3 Authority Key Identifier:
keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-aSg3k1nQjJtt1DC4FGftp0-f4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.213.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9e:87:ac:62:21:b7:46:94:d6:2a:42:fb:6b:da:6c:63:3f:
63:98:6b:ce:30:43:31:85:37:c1:cf:e8:1d:fa:83:fe:5a:f6:
c9:33:92:58:6e:c2:7c:cd:90:90:07:be:fc:11:3d:1b:d4:23:
44:54:8b:b5:1b:59:1b:e8:c7:40:31:da:e9:b1:9a:67:79:9f:
74:03:88:f9:b5:6a:55:80:ce:ef:02:46:51:7f:16:88:db:51:
ce:93:bc:fe:b5:18:5a:35:09:75:03:a7:90:34:d0:f2:01:9d:
66:34:37:85:ee:a0:e2:2a:f4:b1:76:0f:2f:dd:45:30:ec:fd:
f7:f8:81:13:e5:19:28:bd:ff:2d:b4:97:3e:aa:e5:6f:26:12:
5b:fe:aa:59:24:75:c7:ed:7b:5a:56:73:d7:2b:e6:50:19:86:
77:2f:87:0d:f9:7c:c5:7a:e5:5f:b2:e5:bd:b9:0d:b3:36:ee:
4b:3a:ad:99:90:fd:b5:4c:6a:97:19:22:77:96:ce:af:c6:95:
02:5d:7c:10:c1:52:51:c3:d3:5a:66:79:59:f8:e7:94:97:23:
99:68:96:85:a8:07:1c:b4:fb:db:d0:fd:17:4c:7a:77:0f:a9:
42:56:00:aa:5e:0d:4c:d9:d8:26:a6:00:7d:47:10:02:05:9c:
fd:0a:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:35 2023 by rpki-client on console-ams.rpki-client.org