Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/x3leVpHqdY45DB_bCvoty7NNoxs.roa
File: x3leVpHqdY45DB_bCvoty7NNoxs.roa (raw, json)
Hash identifier: uKZ7wnwQ4jVs+cnApgYmSGDhXJewajVCPXHbI2MGY48=
Subject key identifier: C7:79:5E:56:91:EA:75:8E:39:0C:1F:DB:0A:FA:2D:CB:B3:4D:A3:1B
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018410A1FCD8D569593922C8EA8E45E2176D
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/x3leVpHqdY45DB_bCvoty7NNoxs.roa
Signing time: Tue 25 Oct 2022 19:32:42 +0000
ROA not before: Tue 25 Oct 2022 19:32:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43310
IP address blocks: 91.225.227.0/24 maxlen: 24
188.191.97.0/24 maxlen: 24
188.191.96.0/24 maxlen: 24
188.191.99.0/24 maxlen: 24
188.191.102.0/24 maxlen: 24
188.191.108.0/24 maxlen: 24
188.191.107.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
188.191.111.0/24 maxlen: 24
91.225.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:a1:fc:d8:d5:69:59:39:22:c8:ea:8e:45:e2:17:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Oct 25 19:32:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7795e5691ea758e390c1fdb0afa2dcbb34da31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:0b:06:c9:a5:3b:5d:f4:c3:19:6d:78:62:
52:7b:72:0c:bb:b2:c1:59:ce:85:f8:ea:59:ba:47:
a2:7c:6b:b4:00:f5:78:3d:83:83:6b:8f:42:e8:0e:
dc:33:48:30:17:94:89:9b:eb:3c:b7:ab:a4:e9:06:
76:6d:27:b5:c2:c9:83:bb:01:cf:f5:cd:7b:51:3b:
3b:e6:04:b3:e0:a7:55:71:52:0f:26:5a:16:fc:bc:
23:24:d7:a0:d9:18:d0:76:19:af:10:c9:2e:c9:6d:
04:01:a4:fd:44:75:6e:27:58:dd:60:b9:ed:c4:61:
fc:68:c4:f0:87:79:82:85:fe:f0:36:fa:ca:79:61:
f7:26:a4:0b:2e:f9:82:d3:60:8e:43:61:10:a9:44:
d1:9c:ce:13:a0:ec:6f:48:9f:53:9d:e3:01:74:89:
8a:0f:c5:38:b5:4c:66:60:bd:a0:bc:5d:2a:e5:b4:
d1:a7:9f:c3:c0:72:f8:3e:04:59:ad:28:36:f1:dd:
80:a4:dc:ed:fb:67:00:f1:76:d8:29:9b:8e:2f:34:
b8:14:2d:d6:13:ad:9e:71:a2:e8:cf:e7:aa:97:45:
4a:26:c1:c2:64:b5:2a:21:9c:24:10:61:14:7d:9d:
71:74:cd:bd:1e:de:26:10:e5:d9:d8:e7:40:dc:aa:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:5E:56:91:EA:75:8E:39:0C:1F:DB:0A:FA:2D:CB:B3:4D:A3:1B
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/x3leVpHqdY45DB_bCvoty7NNoxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.224.0/24
91.225.227.0/24
188.191.96.0/23
188.191.99.0/24
188.191.102.0/24
188.191.106.0-188.191.108.255
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
47:99:ef:2b:32:1c:fd:c0:49:e6:4f:5a:51:a5:03:1a:52:29:
6d:ec:27:1e:b2:48:d9:13:c7:ef:09:48:0c:e9:76:e9:87:66:
89:d5:f2:53:2f:64:81:7c:be:ba:63:b6:45:4b:1e:da:f8:84:
80:1d:0d:8a:49:9e:8d:a3:d8:46:13:76:19:c1:65:d8:5b:5d:
41:ae:31:f5:f2:9e:a8:f8:1d:79:36:62:28:70:22:44:7e:21:
94:b8:3b:11:64:0f:3f:d0:59:6f:79:f5:80:aa:bc:1a:4b:8d:
95:b3:0f:62:25:e5:85:cb:d1:68:1b:6c:06:df:ef:5a:9c:ba:
a4:00:72:9f:e3:2f:53:35:fd:96:b1:cb:df:a3:84:ec:e1:80:
05:05:d7:8e:c8:9d:a9:f8:08:91:6a:5f:35:77:8a:a6:57:90:
99:25:97:f1:24:e4:bf:38:a2:df:f6:37:61:06:9a:d3:fc:5f:
b9:3c:56:f6:10:63:65:15:53:9e:5c:8a:cb:72:85:41:95:6e:
50:e9:7f:32:93:63:9f:df:fa:95:ff:c6:64:55:7a:c4:f3:86:
25:a5:fb:4c:4d:46:a1:a3:e1:6a:5e:90:70:40:10:f0:95:25:
89:a8:9c:66:95:52:3c:5e:ca:84:e4:88:91:13:52:21:07:84:
e2:93:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-fra.rpki-client.org