Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/pS4H6ReNYdyOF1OF1IHirZyh1-k.roa
File: pS4H6ReNYdyOF1OF1IHirZyh1-k.roa (raw, json)
Hash identifier: qa8nDw2kNk0hJKQ64wX6XdIl9s3XBwV108h2GCAO4O0=
Subject key identifier: A5:2E:07:E9:17:8D:61:DC:8E:17:53:85:D4:81:E2:AD:9C:A1:D7:E9
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01835A2DBE9327628D643ECEF4873CFF7394
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/pS4H6ReNYdyOF1OF1IHirZyh1-k.roa
Signing time: Tue 20 Sep 2022 09:14:50 +0000
ROA not before: Tue 20 Sep 2022 09:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47800
IP address blocks: 91.241.120.0/21 maxlen: 22
91.243.0.0/19 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:2d:be:93:27:62:8d:64:3e:ce:f4:87:3c:ff:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 20 09:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a52e07e9178d61dc8e175385d481e2ad9ca1d7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:3b:df:71:f8:d0:41:2d:8c:62:b1:5a:63:
24:e9:b0:37:38:36:b4:64:ca:29:72:91:2f:35:bb:
66:d9:5f:59:69:0e:bd:b1:19:32:1f:5d:d9:56:6d:
bc:d1:3a:20:d1:83:ac:de:b6:fb:0b:e0:0c:e0:71:
4d:2e:12:8c:31:30:49:86:74:29:7b:3e:b0:34:f1:
31:69:7a:4a:0d:97:4b:34:b0:9c:0a:a1:67:7d:b9:
ca:e9:75:ec:81:d7:4b:64:78:b2:82:01:2f:67:8c:
ab:82:74:71:44:be:a5:0e:7e:40:dd:1b:bd:93:17:
4a:e7:6c:a3:78:ba:a9:28:e4:8d:9c:dd:c1:e0:5a:
46:57:84:9c:20:e1:75:d3:8b:68:92:fe:83:a5:a1:
fc:93:06:1c:a5:72:4e:d1:83:57:51:8c:3b:37:5b:
da:1e:c5:39:60:64:7b:99:e8:f0:3c:7c:31:d5:b2:
84:dd:cf:54:01:6e:72:64:1e:42:4c:7b:02:1a:0b:
56:a6:46:1e:9c:98:c9:ec:68:bf:fc:c1:ef:29:de:
5a:c0:da:d1:8f:2a:fb:68:c6:8e:ae:1e:d5:30:5c:
0a:60:c0:c6:cb:d7:ae:bf:00:78:10:98:53:5a:30:
29:4b:6c:62:94:30:89:44:e0:8e:80:63:a9:30:10:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2E:07:E9:17:8D:61:DC:8E:17:53:85:D4:81:E2:AD:9C:A1:D7:E9
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/pS4H6ReNYdyOF1OF1IHirZyh1-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.120.0/21
91.243.0.0/19
Signature Algorithm: sha256WithRSAEncryption
71:1b:02:27:69:d5:d9:4b:59:a6:62:bc:a6:57:2d:0c:5a:f3:
82:3e:b7:07:be:94:c7:c2:69:02:dd:ac:20:65:a8:2f:6e:24:
1c:bd:c0:f7:e4:38:a2:a4:31:d8:42:6b:96:b5:e3:72:61:9f:
b5:fa:61:9f:17:21:c7:66:50:2e:d6:77:e3:8f:e6:a9:59:5b:
61:59:7a:03:bd:ac:45:2a:f2:9f:ae:57:c9:ed:14:2a:40:07:
0f:b1:74:62:fd:b6:20:cf:cd:49:28:44:9b:b9:76:b4:25:4a:
f8:f4:9e:d6:d6:9a:32:2b:c0:d7:8f:19:8b:c8:33:ac:f5:c6:
5b:de:95:67:53:80:c3:cb:75:cc:78:46:b0:00:58:35:68:36:
4d:fe:d6:1a:eb:68:56:7a:3c:51:dd:ab:64:35:7b:2c:43:47:
4d:4a:6b:d3:83:62:39:63:a4:b0:68:70:03:fe:3f:ac:f8:25:
9c:50:df:0f:75:8c:ea:67:77:ad:76:05:a5:16:34:1f:a8:7f:
7f:4d:5d:9d:97:24:a9:20:7b:0e:27:f9:3f:b2:a2:af:4c:1b:
19:93:ae:52:05:09:d5:41:a9:ef:d0:87:f7:fd:fe:37:13:ea:
bc:77:d6:13:b9:22:38:9f:63:bb:05:ca:fb:0b:3b:08:c8:3c:
41:2b:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org