Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2-Cf9UfiHuzroJoehjsbhEB7C-M.roa
File: 2-Cf9UfiHuzroJoehjsbhEB7C-M.roa (raw, json)
Hash identifier: LRoynw5A1W64S8gnQe/uMBZW7i1dl54AZ+Q6zV9Xk3s=
Subject key identifier: DB:E0:9F:F5:47:E2:1E:EC:EB:A0:9A:1E:86:3B:1B:84:40:7B:0B:E3
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0183A435FF90223733EA366DC33785553C1A
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2-Cf9UfiHuzroJoehjsbhEB7C-M.roa
Signing time: Tue 04 Oct 2022 18:15:45 +0000
ROA not before: Tue 04 Oct 2022 18:15:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43310
IP address blocks: 188.191.96.0/20 maxlen: 20
91.225.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:35:ff:90:22:37:33:ea:36:6d:c3:37:85:55:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Oct 4 18:15:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbe09ff547e21eeceba09a1e863b1b84407b0be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:55:b5:3e:3d:22:71:9d:3e:ee:8e:e3:5b:
f4:26:89:77:03:2e:06:7a:08:d2:b2:35:44:79:a9:
8a:9e:2f:3b:3c:99:b9:0a:c8:4b:f8:d5:b7:55:79:
3b:58:05:e9:7f:b9:32:fe:16:8f:69:d7:18:65:95:
ca:78:f6:e0:39:8e:c1:4a:02:da:39:03:3d:09:4c:
06:a9:16:3a:f0:6c:25:7a:5c:7d:52:f7:66:8e:ba:
d1:16:a4:c6:e3:76:a7:ba:7a:1c:de:63:6e:14:a6:
73:d7:4a:48:96:1f:6c:90:fe:9f:c4:77:5c:fc:f7:
ec:f8:5b:cd:55:17:8a:a8:e3:19:4e:be:d9:4c:a7:
64:56:cf:dd:ff:13:81:7e:e9:79:db:1d:5e:7b:2e:
6b:63:f9:71:5b:37:7d:a5:e6:56:eb:bd:a4:51:fa:
e9:3b:04:14:a2:b6:7e:10:e8:1f:74:dd:c3:b1:ac:
9e:72:a3:2e:5c:fb:0a:dd:f3:fe:9f:1d:d4:81:30:
4e:59:17:0e:83:ac:f6:1e:a8:c5:22:fc:14:ec:5e:
ab:f1:84:59:ab:ab:b6:1d:61:2d:71:08:fb:fb:0d:
ec:fe:c7:38:70:60:a1:dd:77:f4:84:64:f1:48:67:
44:77:a4:af:28:0a:e5:4d:e8:b8:29:6e:e1:c3:0d:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:9F:F5:47:E2:1E:EC:EB:A0:9A:1E:86:3B:1B:84:40:7B:0B:E3
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2-Cf9UfiHuzroJoehjsbhEB7C-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.224.0/22
188.191.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:8f:3e:96:9d:ed:d6:62:1e:8d:c7:07:b2:2c:b3:59:1e:82:
6e:16:e3:63:94:3d:2e:fe:9e:ab:81:59:30:84:69:c8:ea:1a:
9a:01:22:1c:e3:e7:a1:c0:31:4d:a3:ad:ed:35:8b:51:e3:84:
af:bf:5f:62:45:74:b9:1b:dd:07:47:9c:70:b7:92:da:4e:c0:
89:39:32:15:c8:83:5c:a6:b5:34:ae:7e:07:1a:52:6a:b6:50:
7f:20:b3:94:04:14:ce:4a:0e:4e:62:fb:8e:ca:f5:06:3b:66:
ae:5f:bf:5c:d6:45:18:87:2e:44:3d:c1:95:f7:ab:42:13:bf:
bd:ae:7d:c5:b2:8e:72:2f:41:87:5c:81:f3:a5:70:f6:e0:67:
61:11:83:ad:42:94:77:56:c3:72:c0:a1:b2:3c:8d:39:99:a5:
64:0a:fe:69:ae:2d:dc:f8:ba:c2:72:45:22:41:ab:9b:17:52:
e9:86:f2:4d:a5:1b:70:3f:b8:d6:f8:95:79:0b:60:53:16:c8:
c0:ad:44:82:4b:a8:d2:a5:60:a4:17:16:5c:76:f9:ba:d9:62:
02:45:3d:56:23:52:43:c7:3f:4b:85:1d:d4:1a:ed:fd:a8:24:
16:7e:e3:9f:93:74:f4:4e:54:db:d2:3a:e1:0c:22:12:29:13:
61:84:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:39 2023 by rpki-client on console-ams.rpki-client.org