Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/sIxZnDObtVLDwkwOVNayGAoCo4g.roa
File: sIxZnDObtVLDwkwOVNayGAoCo4g.roa (raw, json)
Hash identifier: fNCO2vFInNt2INOIsdcgdUBw5g8XuVAasxrPvKP9ER4=
Subject key identifier: B0:8C:59:9C:33:9B:B5:52:C3:C2:4C:0E:54:D6:B2:18:0A:02:A3:88
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0B4AE8BA
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/sIxZnDObtVLDwkwOVNayGAoCo4g.roa
Signing time: Tue 31 May 2022 08:28:19 +0000
ROA not before: Tue 31 May 2022 08:28:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55720
IP address blocks: 91.103.125.0/24 maxlen: 24
91.103.124.0/24 maxlen: 24
91.103.126.0/24 maxlen: 24
91.103.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189458618 (0xb4ae8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: May 31 08:28:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b08c599c339bb552c3c24c0e54d6b2180a02a388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:a7:4e:27:ab:17:77:ae:18:96:54:15:b2:
21:b4:ba:90:fe:b0:3d:91:35:63:9d:31:eb:e4:6a:
fa:7f:23:13:ac:5b:0c:62:7c:89:23:50:e8:cb:20:
89:6f:6d:32:f1:d6:ff:36:fc:86:2a:f2:3d:e4:a8:
33:19:40:44:52:d1:ad:ba:2e:2d:7b:67:65:6c:be:
46:f8:66:61:84:bb:d0:6f:1a:b8:40:ba:97:b4:63:
ad:38:3d:52:23:81:ba:57:b5:03:7c:e7:82:0d:07:
ff:49:bf:d5:1e:5c:aa:d7:85:f2:a1:7c:d6:77:2a:
37:75:90:1b:91:61:81:84:14:59:83:da:de:6d:04:
98:2d:28:1a:f3:a7:ee:c0:78:5f:f6:57:a7:a6:07:
46:81:f9:a4:1a:38:03:88:8d:dc:72:8e:84:d8:93:
f2:6d:5f:35:80:6c:32:af:5b:4a:a9:70:e4:07:4c:
29:29:3d:c1:39:d1:38:d8:23:2e:aa:67:a4:ef:af:
95:5b:cc:10:c8:13:2c:36:5f:ee:1c:e3:3d:8b:d9:
c2:29:1f:63:5f:86:39:44:b5:5c:c2:70:d7:b0:4c:
24:20:5e:5b:76:a7:c1:77:2c:83:a7:ce:cf:76:2d:
45:ae:27:ec:f9:c4:24:5b:9c:81:04:11:d9:a8:6e:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:59:9C:33:9B:B5:52:C3:C2:4C:0E:54:D6:B2:18:0A:02:A3:88
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/sIxZnDObtVLDwkwOVNayGAoCo4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.124.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a8:4d:0c:1c:1e:1d:19:bf:3c:a4:b4:5b:68:95:2d:3e:0e:
70:83:de:bf:70:c2:1f:45:92:11:67:a8:99:f7:4b:a8:5a:3b:
01:c5:71:45:ed:a6:6b:e8:90:88:ff:7a:58:52:1a:c4:b5:7f:
51:3e:ba:47:59:f9:62:30:e9:24:01:34:20:5d:c1:9d:42:3c:
32:12:c5:57:82:7e:5e:f0:75:de:64:b8:21:79:3a:b9:53:d4:
30:ee:3c:cb:e7:2a:38:b5:d6:93:9f:7e:01:47:f3:dd:6c:c5:
4e:88:2d:a6:db:f8:06:57:8f:0a:39:76:b0:82:21:25:75:d3:
0b:15:7c:6d:d4:16:ee:de:79:e3:2f:66:41:cf:ec:7a:c3:02:
9f:b3:fd:d3:84:03:43:9c:21:60:45:9c:60:5b:c6:1b:04:84:
78:f6:62:c5:21:73:c2:f1:c2:47:e9:f6:ec:7f:7f:8b:9b:dd:
be:a1:66:27:37:57:50:31:e6:53:3d:e4:29:cb:bb:35:50:92:
9b:a5:40:de:fc:ad:00:bd:3c:cf:46:48:35:2e:f6:de:20:f3:
31:d4:76:11:99:e3:fb:5f:ee:be:7f:5b:e1:50:8a:18:65:f1:
27:4b:16:06:10:54:3d:da:d6:ad:28:fa:48:13:e3:c3:6d:12:
7f:6c:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org