Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/ERAKwn0kzDkesd_7go2NGYSrcVM.roa
File: ERAKwn0kzDkesd_7go2NGYSrcVM.roa (raw, json)
Hash identifier: N8ZGQuIMBRA78CpCs1s2tUpTKUSYC7/G+WRsI33zYQE=
Subject key identifier: 11:10:0A:C2:7D:24:CC:39:1E:B1:DF:FB:82:8D:8D:19:84:AB:71:53
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 080AC17E
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/ERAKwn0kzDkesd_7go2NGYSrcVM.roa
Signing time: Wed 20 Apr 2022 12:50:43 +0000
ROA not before: Wed 20 Apr 2022 12:50:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 91.227.168.0/24 maxlen: 24
91.227.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134922622 (0x80ac17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Apr 20 12:50:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11100ac27d24cc391eb1dffb828d8d1984ab7153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:91:1f:28:e8:15:49:c2:0e:33:50:9d:fc:
d8:76:ba:3d:84:26:18:dd:50:2a:14:bd:44:dd:70:
5d:94:31:aa:d0:2a:95:6a:85:31:04:24:b4:43:30:
a3:e7:ab:57:77:dd:96:43:11:16:9c:69:2b:5e:84:
b9:60:a1:f1:12:92:6e:c9:3b:89:ae:08:29:6c:67:
f7:f4:1e:05:e3:4e:33:29:00:da:9d:a3:2b:8c:30:
40:46:f6:6e:a6:5d:23:80:ae:e0:1d:78:27:b7:6a:
65:f4:8c:5d:bb:58:14:8f:6c:46:14:5b:db:62:9a:
64:b1:17:d1:f6:bb:26:6d:f2:cf:fa:73:07:a8:43:
14:6d:68:18:b3:36:b3:24:b4:9b:ac:4e:67:c9:8d:
14:57:52:e8:0c:17:67:b1:b3:d3:96:eb:64:b6:c9:
21:a9:f4:1f:65:d4:95:7a:2b:eb:6e:c6:4b:2d:78:
7a:73:7e:0b:58:6e:a8:dd:c1:ae:0e:68:8d:f6:28:
d9:b5:2a:8b:0c:6f:52:06:29:f2:e1:8d:9b:8e:11:
b9:58:10:46:ff:e3:e9:69:43:23:b7:96:15:5c:fc:
23:f0:ee:84:9f:f1:16:e4:a1:d4:5a:94:31:c9:59:
7f:d3:9d:a0:2c:ed:a1:c8:8e:99:c3:45:7a:b3:79:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:0A:C2:7D:24:CC:39:1E:B1:DF:FB:82:8D:8D:19:84:AB:71:53
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/ERAKwn0kzDkesd_7go2NGYSrcVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.137.0/24
91.227.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d9:15:5e:6e:58:05:e9:a9:11:a0:26:8f:d5:77:a5:ba:5f:
b3:03:46:6e:d9:29:b3:48:92:4b:d7:b7:a1:18:f0:f1:c7:a9:
58:29:cc:df:95:2f:a6:19:af:77:6f:2b:76:89:a6:e7:65:67:
71:ab:fa:2e:0a:66:bb:fb:0d:76:bc:b7:ae:40:a3:d1:51:fc:
53:f7:18:d5:c6:20:b1:17:83:7a:28:52:0b:48:6a:a3:00:38:
3b:40:db:84:89:05:18:08:69:9b:50:53:55:5d:93:2f:50:13:
28:fb:93:9b:f5:f5:2e:4f:0b:6a:0c:cd:75:e7:17:f9:76:e5:
f0:ce:2f:3d:6f:6c:83:0e:a4:30:cf:f4:42:8d:90:26:89:86:
a1:64:cc:46:c7:94:dc:f3:79:97:3d:be:65:90:aa:b5:f1:50:
d8:60:82:b9:7f:cb:9e:43:cb:7a:d5:2c:24:57:27:ce:4b:82:
e8:7e:83:60:12:80:a7:21:fb:28:76:ce:55:b7:70:2d:0c:5c:
c9:48:3f:23:0b:1c:17:cb:eb:76:d1:97:ae:b4:f5:61:e5:21:
73:f3:bf:4d:e7:c0:fa:92:96:06:9d:9a:20:db:15:f5:0f:00:
db:60:11:59:32:27:2b:d5:23:02:f5:74:de:7e:68:32:fc:9e:
fd:d9:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:46 2023 by rpki-client on console-ams.rpki-client.org