Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/1-V78ACTQZqvYgqTXrdbnUvZvy6w.roa
File: 1-V78ACTQZqvYgqTXrdbnUvZvy6w.roa (raw, json)
Hash identifier: EDCkGtso4Ub4qZ8Fzneg/NWp2iSWeN6FNxiPi/tpQbo=
Subject key identifier: F9:5E:FC:00:24:D0:66:AB:D8:82:A4:D7:AD:D6:E7:52:F6:6F:CB:AC
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 01823CF632FF7EFAB6D7785468B1FFF7EC33
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/1-V78ACTQZqvYgqTXrdbnUvZvy6w.roa
Signing time: Wed 27 Jul 2022 00:02:23 +0000
ROA not before: Wed 27 Jul 2022 00:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209828
IP address blocks: 91.241.50.0/24 maxlen: 24
91.241.49.0/24 maxlen: 24
194.5.236.0/24 maxlen: 24
194.5.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:f6:32:ff:7e:fa:b6:d7:78:54:68:b1:ff:f7:ec:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Jul 27 00:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f95efc0024d066abd882a4d7add6e752f66fcbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:ac:2d:20:d1:cb:bd:6e:63:d6:66:1b:58:
1b:65:16:29:f0:77:a6:e4:0e:11:a8:a8:9b:95:ad:
e4:8c:1d:e8:69:74:2a:a9:68:25:3c:9e:67:03:3b:
d9:46:5e:06:da:f5:fd:ec:7b:ec:9e:a6:44:d7:08:
38:98:b6:15:1d:8f:eb:8b:fa:fc:f8:88:0d:ac:3c:
98:3c:8e:e2:2c:a8:0c:c4:4f:b1:b0:48:fc:06:77:
45:ac:21:f7:e0:6f:e4:7c:84:c2:2a:24:39:6d:01:
2a:2e:ae:7f:d7:e5:d6:2e:a5:9b:a4:d3:ce:db:33:
de:8a:27:80:aa:29:20:64:77:50:29:92:eb:47:9a:
92:6d:24:75:00:ad:03:30:95:dd:29:4e:9c:fd:86:
e3:24:aa:2e:f7:6a:4c:2c:4c:dc:49:4f:af:c0:e7:
27:9f:b5:63:19:aa:2f:d3:d7:c3:33:1f:fb:b1:6d:
98:fb:9f:c5:9e:5d:4b:3e:e6:95:81:34:97:55:f9:
d8:4f:eb:3f:07:e2:65:d5:10:43:b0:2c:6c:21:c6:
89:30:ae:1b:10:c9:a5:63:ab:5e:ec:d5:be:20:1e:
78:20:a1:dd:73:31:ad:85:9c:0b:81:e9:ad:69:8a:
65:59:df:a8:db:23:94:c9:e3:8b:db:6b:d9:7d:a0:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5E:FC:00:24:D0:66:AB:D8:82:A4:D7:AD:D6:E7:52:F6:6F:CB:AC
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/1-V78ACTQZqvYgqTXrdbnUvZvy6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.49.0-91.241.50.255
194.5.236.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:9a:c0:e3:ed:b9:99:ae:03:ec:e7:1c:66:af:a6:a6:43:96:
1c:da:0f:47:37:91:98:32:45:e1:77:e7:ba:5f:a9:36:6f:1e:
cd:94:ab:3d:db:12:99:4f:d3:d9:76:18:cb:17:ae:80:08:b6:
56:17:ac:83:86:a8:d8:38:cf:58:06:f9:8c:bd:a7:0e:cf:bc:
36:b9:94:61:fd:3e:32:ae:91:3e:53:86:1d:c5:f5:ec:98:5c:
02:17:43:d3:41:38:77:cd:a4:05:17:5d:d4:7a:cb:06:b3:6a:
c0:b0:a9:20:7e:ad:1c:98:40:4b:b0:d5:bd:90:24:e1:c2:bc:
b4:b8:e8:5b:1b:4b:6f:00:13:06:cf:a6:4b:5b:40:40:ce:1e:
97:fc:32:e1:76:09:a8:44:56:5d:5c:c3:11:56:15:18:85:ee:
84:fe:02:ab:6b:c7:0d:07:14:83:27:62:bd:0c:27:1f:f6:d7:
fe:33:00:b4:c9:6c:f1:0b:c2:1f:de:1f:1e:a6:dd:ec:ad:7f:
00:ae:44:ff:99:ad:9e:a3:cd:36:32:62:b9:bc:6c:19:a0:3d:
2a:0c:35:05:f8:28:a8:8b:24:71:c7:6d:ff:e4:e9:f5:db:28:
bc:bb:74:2f:ac:10:d8:b0:c4:65:77:98:8a:90:2d:60:b8:fb:
f6:f3:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:22 2024 by rpki-client on console-fra.rpki-client.org