Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/_sDYmOYkfFWOO9lxFZ59eK0bidg.roa
File: _sDYmOYkfFWOO9lxFZ59eK0bidg.roa (raw, json)
Hash identifier: x1UluwyWWoS4kvVAz9/E+KN2D2L6GgIQTJIPyI4VVQY=
Subject key identifier: FE:C0:D8:98:E6:24:7C:55:8E:3B:D9:71:15:9E:7D:78:AD:1B:89:D8
Certificate issuer: /CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Certificate serial: 018437A3C25728AE007416EE3BC37E1B10F5
Authority key identifier: E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/_sDYmOYkfFWOO9lxFZ59eK0bidg.roa
Signing time: Wed 02 Nov 2022 09:19:49 +0000
ROA not before: Wed 02 Nov 2022 09:19:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 91.132.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:a3:c2:57:28:ae:00:74:16:ee:3b:c3:7e:1b:10:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Validity
Not Before: Nov 2 09:19:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fec0d898e6247c558e3bd971159e7d78ad1b89d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:54:47:b4:cc:72:86:51:57:6b:85:49:f6:
4e:c6:e9:5f:36:c2:fc:39:29:4a:0b:59:3d:c6:4f:
04:29:5c:be:99:84:a0:6b:58:e8:00:17:08:36:5e:
cd:46:ac:86:53:2e:64:f0:8b:a9:92:90:8d:4e:33:
1a:bc:52:c5:0d:2b:fb:45:22:ee:ff:b6:60:27:fe:
e9:5d:c3:05:df:c8:c6:e1:6a:01:35:90:c2:10:89:
99:cc:67:34:d1:27:6b:1d:23:1e:44:18:d9:4f:58:
c2:be:8a:17:0b:ab:f8:b3:af:17:81:bc:f7:47:0f:
21:25:e0:bb:0e:1b:59:b8:f8:8f:47:4d:de:42:45:
26:37:f9:1f:6e:05:8d:b8:b6:78:0b:17:1b:a6:6d:
18:1b:1b:8f:c8:b4:5a:33:3c:2d:13:bb:b8:99:4c:
f5:52:43:0f:0e:e6:3c:a6:24:0e:eb:9a:97:29:36:
6a:b3:e8:5a:7b:35:7f:07:da:79:56:e6:3c:c2:c4:
a2:6f:f9:f5:a8:58:63:9b:15:77:76:0d:28:f9:cc:
bd:8f:02:a6:53:0f:df:c4:7b:8c:34:4e:97:7e:9a:
91:0f:d0:74:62:36:5e:44:dd:4b:4b:da:19:95:b9:
38:ee:d7:d0:69:d8:fe:58:69:a2:4b:66:32:75:50:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C0:D8:98:E6:24:7C:55:8E:3B:D9:71:15:9E:7D:78:AD:1B:89:D8
X509v3 Authority Key Identifier:
keyid:E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/_sDYmOYkfFWOO9lxFZ59eK0bidg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d8:68:e2:a4:b3:d7:13:2e:d3:d1:15:66:63:1b:e3:e4:42:
09:e8:b2:a6:df:bc:cf:d2:37:97:51:85:08:1e:96:98:80:c3:
31:59:a3:b6:6b:e2:45:ce:d2:6b:18:27:ba:01:67:b0:3d:80:
1d:4d:0b:eb:29:0b:56:ad:8a:82:4c:c2:23:15:bb:2e:05:97:
64:a9:ee:95:7d:93:61:ed:ca:77:c2:92:0f:5a:90:93:eb:9c:
f9:e0:2e:0f:88:bd:8e:fe:64:c3:99:03:d2:2d:7f:79:4c:2c:
85:22:f0:37:02:f6:18:22:fa:fb:9b:f8:f3:24:85:c6:d5:4b:
fc:0a:33:75:ea:8d:8e:9c:4b:e9:f4:16:8b:4d:29:94:15:ab:
eb:e7:1f:96:cf:c7:80:a2:68:e5:67:02:bd:c4:ba:e0:1b:28:
db:af:0a:5e:6a:d0:8f:b1:60:9f:05:33:8d:5b:74:1d:b9:b7:
d7:d8:10:2f:c5:75:7b:5b:ee:a1:c9:c8:7f:01:38:1c:83:62:
c3:ca:19:af:c9:82:5b:5d:09:f3:21:58:cc:b2:3a:9a:96:c3:
07:1d:e7:a3:a7:72:09:27:47:e7:42:5d:a4:f0:75:40:ec:7f:
82:a6:3f:fd:15:5d:ad:5f:86:e5:dc:4c:79:c9:14:76:2a:fb:
a4:89:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:34 2023 by rpki-client on console-ams.rpki-client.org