Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/mI8-A3iI_3YJDHAjTPTY-5PrkxE.roa
File: mI8-A3iI_3YJDHAjTPTY-5PrkxE.roa (raw, json)
Hash identifier: R4GkhzqcqGsWY5iMzOMkPAjPRSR+i/J0MyNI/EOAmk4=
Subject key identifier: 98:8F:3E:03:78:88:FF:76:09:0C:70:23:4C:F4:D8:FB:93:EB:93:11
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 02DFD1D0
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/mI8-A3iI_3YJDHAjTPTY-5PrkxE.roa
Signing time: Sat 01 Jan 2022 04:04:20 +0000
ROA not before: Sat 01 Jan 2022 04:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.199.32.0/24 maxlen: 24
91.199.42.0/24 maxlen: 24
91.199.44.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48222672 (0x2dfd1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jan 1 04:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=988f3e037888ff76090c70234cf4d8fb93eb9311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:76:31:bc:a0:d7:96:10:67:b4:84:0f:63:
ef:20:0e:74:9f:1b:3c:a6:c9:60:23:2f:8c:c5:28:
90:52:26:d1:f9:86:07:c3:a0:2a:2b:10:24:56:7d:
82:32:9e:38:9d:c8:0c:c6:2c:fc:84:16:96:60:18:
df:92:98:17:b9:6a:28:fc:a3:4b:5d:dc:0d:dd:38:
43:13:c2:dd:82:0a:ff:b1:5a:ee:9c:6f:a3:00:d7:
e2:b6:96:a8:7c:83:40:5f:96:26:72:97:3d:03:54:
7a:59:c5:d1:36:10:9f:4c:0c:13:74:68:56:48:6e:
ea:b2:42:76:81:6e:38:46:a5:35:e0:a0:7e:e5:fa:
46:d6:d5:ac:3c:b9:a9:5d:aa:59:13:f2:09:75:b7:
ea:14:e3:7f:31:1f:70:d4:47:77:09:ee:2f:13:9d:
e6:d6:16:a4:f8:88:29:1f:a5:1d:ec:4c:93:49:94:
92:e7:20:3a:98:2a:41:12:e4:4a:71:88:86:28:2b:
0d:63:7c:15:2f:1b:85:24:31:f0:50:fe:e3:6d:17:
db:9e:70:e8:e3:d1:53:38:6a:c3:df:13:76:c0:1b:
59:91:f8:1a:c8:cf:c2:e0:15:64:38:95:69:f0:40:
84:1b:68:63:86:6d:46:97:78:a9:32:60:64:e3:77:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:3E:03:78:88:FF:76:09:0C:70:23:4C:F4:D8:FB:93:EB:93:11
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/mI8-A3iI_3YJDHAjTPTY-5PrkxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.32.0/24
91.199.42.0/24
91.199.44.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
61:02:a0:7b:7b:c1:40:00:05:e9:6a:29:57:9e:fa:66:db:74:
f6:ca:a4:8b:40:79:fe:2a:66:1d:3f:cd:e9:3f:77:2e:2b:89:
4b:e4:f5:fa:cb:c8:7c:11:1d:5c:a6:db:c7:8c:c5:51:5d:85:
50:c4:a0:e5:7e:3a:53:81:4f:df:a6:e6:3f:7c:7a:d5:fb:ec:
bd:83:09:0c:ea:5d:d8:d7:87:b2:f5:4f:0a:08:d9:b9:9f:43:
bc:9c:7f:7b:39:e5:94:c0:b0:51:55:e7:24:79:1e:61:e8:a9:
a1:8f:04:81:3e:85:3a:53:5a:cb:50:2c:26:fa:91:95:7c:4f:
d5:40:13:d7:72:6d:90:89:dd:1d:1d:77:09:8e:82:a8:b6:d4:
bc:6e:1c:f5:57:3c:68:cd:c0:68:bc:de:12:2e:45:db:18:3e:
9c:2e:08:af:97:69:6c:3c:aa:21:e8:89:96:c4:bb:97:1b:64:
47:4d:8f:1d:65:51:67:da:af:fe:dd:14:9a:79:83:3d:64:ac:
c6:91:1a:2d:ba:c0:17:ae:43:9b:e6:72:43:25:da:e4:cc:f7:
22:92:8a:42:f4:9f:7c:08:c2:60:73:8d:fa:3a:85:b1:54:86:
ab:2e:1e:bd:fa:6b:79:55:4b:28:f9:b9:84:89:e0:f5:f2:5c:
9b:a5:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-fra.rpki-client.org