Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/j4tSjfKHCMeT7R8ozLilIqdWRUk.roa
File: j4tSjfKHCMeT7R8ozLilIqdWRUk.roa (raw, json)
Hash identifier: +uUzzXLz8f5RugkItqcwq99iVFucCgAal3jyGRmycQ4=
Subject key identifier: 8F:8B:52:8D:F2:87:08:C7:93:ED:1F:28:CC:B8:A5:22:A7:56:45:49
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A98AFB5
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/j4tSjfKHCMeT7R8ozLilIqdWRUk.roa
Signing time: Tue 22 Mar 2022 07:43:56 +0000
ROA not before: Tue 22 Mar 2022 07:43:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 91.222.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177778613 (0xa98afb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 22 07:43:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f8b528df28708c793ed1f28ccb8a522a7564549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:6a:df:9c:0d:0d:ed:33:87:da:a9:4a:08:
84:50:69:a6:a4:f1:e9:71:85:76:93:e8:32:58:08:
99:e4:e4:43:55:ba:b5:1b:90:25:d8:ed:1a:86:16:
70:7a:4c:64:e3:1e:81:a5:6a:85:74:ca:7f:e3:26:
cf:06:c7:e3:e3:1e:d0:f1:05:2e:64:58:77:ac:cc:
f0:47:17:7a:0e:be:46:52:cb:7f:42:93:3e:13:d3:
f7:9a:fc:e8:c7:39:da:0b:28:fc:35:03:bb:99:50:
a6:4a:dc:8d:dd:c3:d4:6b:b1:58:9b:a8:39:2e:da:
f1:d8:ea:f5:3d:4a:f1:db:de:47:88:f4:c6:58:fe:
fa:f5:14:27:61:44:63:fe:21:c3:70:cb:94:67:38:
b4:7b:ea:e6:31:ba:6d:ed:03:97:dc:74:0e:81:61:
ef:43:89:88:14:06:d9:01:5a:da:3a:37:e4:03:8c:
18:31:31:30:34:b7:16:14:0e:b4:a8:1d:17:54:f7:
a7:b7:61:cd:e0:d6:ee:5a:af:4d:03:d4:d0:ca:d4:
5e:11:ab:37:1f:f5:1f:a5:e4:b2:20:46:4f:f6:d6:
4b:5c:0e:3d:4f:d2:97:58:ef:39:e8:08:55:7c:45:
69:e0:eb:71:b3:61:d7:a2:3f:65:1a:b4:b6:17:45:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:52:8D:F2:87:08:C7:93:ED:1F:28:CC:B8:A5:22:A7:56:45:49
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/j4tSjfKHCMeT7R8ozLilIqdWRUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:82:5f:87:92:a0:ba:6c:f3:ef:30:14:fd:ff:eb:15:bd:b2:
ab:62:18:4d:2b:0f:48:58:12:58:0b:ae:96:77:26:cb:5c:58:
95:9f:59:6b:30:a8:47:7d:a9:3a:18:d0:3e:77:e6:ed:3d:5a:
69:bd:fa:58:33:84:58:19:31:bd:d8:cf:fb:da:32:db:84:67:
59:12:d6:81:29:24:70:40:ef:9d:5e:48:4b:22:c8:4b:f0:b0:
7f:0a:5e:31:2d:f8:4e:0d:1e:e3:00:0a:1d:78:79:74:ee:c3:
80:b9:18:af:56:f3:e6:ff:49:ab:ee:67:f8:d1:6d:56:cb:3b:
e2:3c:f2:1c:6b:ea:45:e0:db:2d:dd:1e:c0:04:e5:1f:42:3b:
05:2c:55:38:f6:4f:bc:88:c0:0a:a3:59:b4:0a:1b:7f:5c:bf:
30:44:f2:ef:5e:8d:b3:3e:89:07:0d:5e:02:8a:87:d1:6f:29:
41:3e:58:82:a7:41:57:07:5b:4b:a6:24:e8:58:fd:d2:97:e3:
be:7b:cc:66:d6:4a:fb:94:cc:74:b4:64:61:26:66:b4:03:55:
3e:6a:4c:52:64:3d:40:29:c6:92:50:e1:a5:5e:46:da:ea:4a:
90:ca:dd:9d:b8:33:f3:96:84:e6:2a:b6:21:22:ba:ae:c4:ae:
d3:3b:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org