Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/DSGCb9vYdj7JvsMCLM2SEegPi0c.roa
File: DSGCb9vYdj7JvsMCLM2SEegPi0c.roa (raw, json)
Hash identifier: +R9yRQS9Blno4xlZfyxRHxYWGu8C8vp6/uMQ/b6UWaI=
Subject key identifier: 0D:21:82:6F:DB:D8:76:3E:C9:BE:C3:02:2C:CD:92:11:E8:0F:8B:47
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 0347334D
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/DSGCb9vYdj7JvsMCLM2SEegPi0c.roa
Signing time: Wed 16 Feb 2022 14:39:48 +0000
ROA not before: Wed 16 Feb 2022 14:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 91.199.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54997837 (0x347334d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Feb 16 14:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d21826fdbd8763ec9bec3022ccd9211e80f8b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:27:f9:7e:61:b4:db:53:89:7d:d9:f8:38:
aa:fc:ce:e4:81:6f:10:62:21:b0:33:04:3b:c4:2c:
a3:4f:b3:e6:ef:f8:75:16:da:2d:f3:fb:b9:52:ab:
69:77:6b:f1:8e:ea:18:b8:d4:4b:30:32:46:74:28:
2c:3e:23:93:fa:8b:73:16:14:a8:6c:66:7c:b2:2b:
cb:fa:be:32:f7:26:22:1f:7d:7e:f3:35:8f:75:3f:
eb:3b:e5:e7:16:e0:18:66:4a:5e:a7:20:51:c9:c9:
bf:67:fd:72:e8:1f:cf:a9:d9:82:cf:12:3b:a8:f3:
ae:b3:27:de:70:7d:c3:2f:8d:d9:60:a3:d0:29:f1:
9a:f2:8f:e2:9d:fc:8d:de:d5:6f:f0:59:1e:e7:e7:
03:d9:83:f4:e0:1b:79:e7:41:f9:3a:85:0c:ce:bf:
30:9d:32:23:4f:28:9a:65:22:18:dd:5c:79:ba:e0:
ec:cb:6e:0b:0c:7b:67:fc:3c:c5:15:8e:87:fe:7a:
4c:4d:88:3c:87:b4:52:66:43:86:c9:2c:fc:e2:cd:
62:6f:98:f0:4c:b2:9d:b6:bc:db:35:69:12:1b:84:
f6:70:d1:84:a2:83:99:e0:0a:84:15:c5:f3:29:3f:
df:a8:46:50:17:c8:7b:21:0c:af:13:90:ff:90:96:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:82:6F:DB:D8:76:3E:C9:BE:C3:02:2C:CD:92:11:E8:0F:8B:47
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/DSGCb9vYdj7JvsMCLM2SEegPi0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2a:f0:2c:e2:ce:86:9c:ca:68:cb:c2:2a:93:64:50:cf:ec:
a8:b0:d8:0c:da:b0:70:05:45:54:07:b5:85:16:f3:e7:f5:85:
c1:3c:7c:e9:cf:aa:a6:b5:d9:c4:cc:0d:1d:d4:1d:ba:bc:62:
77:ff:11:bf:9c:b8:63:1e:35:50:f6:d9:58:b5:6b:53:1a:41:
0c:49:12:43:e2:32:38:59:12:d6:a0:3e:da:26:64:00:97:bd:
de:4d:b5:fa:81:27:93:83:42:4c:ae:ee:dc:09:22:f5:ea:41:
70:2a:96:63:ed:88:f6:ad:36:b8:42:4a:af:df:81:38:3e:5a:
94:f8:7b:ed:b7:67:36:f1:42:db:38:85:74:12:24:50:b6:12:
4d:9a:1d:9e:cf:83:19:3d:68:90:9c:32:e0:59:1b:5f:1c:f5:
ea:4c:60:1a:72:f0:4a:7e:06:8d:7f:b2:10:0c:ea:5a:e7:9a:
7c:08:27:60:4f:35:d1:ef:ef:56:57:16:9a:2d:da:63:8b:64:
e6:7a:f9:43:09:a7:47:40:fe:a7:ea:cf:9f:5a:df:d7:4c:3a:
04:d0:91:c8:3c:bd:8f:ae:6d:4a:bf:a6:5c:18:fd:bc:b2:7d:
2e:dc:6d:ab:9c:9e:92:05:4f:f3:a7:a6:c4:1c:90:76:ea:0f:
e6:16:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-fra.rpki-client.org