Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/ibahe0NNyYk8p8-iSrSJ0W-blq4.roa
File: ibahe0NNyYk8p8-iSrSJ0W-blq4.roa (raw, json)
Hash identifier: jpwvMuhjeVfOB/Lj3XYhlFpmyZF6oN+zoO4P3waH0Dk=
Subject key identifier: 89:B6:A1:7B:43:4D:C9:89:3C:A7:CF:A2:4A:B4:89:D1:6F:9B:96:AE
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 03007919
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/ibahe0NNyYk8p8-iSrSJ0W-blq4.roa
Signing time: Sat 01 Jan 2022 16:07:35 +0000
ROA not before: Sat 01 Jan 2022 16:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 91.231.192.0/22 maxlen: 22
91.231.192.0/24 maxlen: 24
91.231.194.0/24 maxlen: 24
91.231.193.0/24 maxlen: 24
91.231.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50362649 (0x3007919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jan 1 16:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89b6a17b434dc9893ca7cfa24ab489d16f9b96ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:76:a2:cf:b4:2f:1c:79:0f:28:d8:5e:29:
11:83:55:e5:8c:1c:75:ec:f9:52:6e:a6:ab:dd:2f:
a3:57:00:e6:c3:c1:ac:50:94:b3:a2:c7:d1:bc:aa:
40:62:86:b3:62:bb:cb:ee:ac:32:3a:72:48:86:63:
b1:a6:29:05:e5:48:37:cb:5a:96:12:33:d9:cc:b9:
cd:57:c0:4c:a9:fe:e8:ec:86:2b:18:7e:e3:3d:77:
4f:d3:9b:d8:c6:e9:c3:0c:39:5e:dc:3d:e9:aa:36:
d1:f5:e6:62:1c:e0:7f:32:4f:c3:a4:d7:32:bb:7e:
d1:be:d0:4c:7b:87:99:e1:c8:90:39:54:29:bd:75:
f5:8e:5a:0e:fb:35:2c:88:b2:7d:3d:38:6b:07:30:
20:5a:c5:f4:71:ba:7c:b0:d0:e0:64:43:00:a7:f7:
a3:5e:ae:db:26:fb:af:17:4f:c3:1d:d6:8f:d3:de:
72:da:d0:c8:b9:25:52:93:2a:ec:6d:70:cb:b7:fd:
1d:70:9b:13:e3:4a:b2:55:61:07:51:06:b7:e3:2a:
7e:c8:60:a2:08:cc:e9:9a:27:34:db:a3:e4:2c:7e:
b5:29:35:f4:0a:07:7e:78:cc:7b:e1:62:8f:98:21:
dc:22:b9:8b:4f:61:8f:23:e9:cd:c7:1a:71:39:06:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B6:A1:7B:43:4D:C9:89:3C:A7:CF:A2:4A:B4:89:D1:6F:9B:96:AE
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/ibahe0NNyYk8p8-iSrSJ0W-blq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.192.0/22
Signature Algorithm: sha256WithRSAEncryption
73:29:92:ac:1c:85:95:0d:8d:e6:5e:00:02:1c:95:8b:e0:49:
04:dc:92:5d:b1:bb:2d:d2:59:0f:3d:65:08:b7:69:aa:1e:89:
7b:b2:c2:25:86:41:d6:f3:43:04:5c:81:67:12:e1:52:e2:20:
8a:75:ac:55:47:b8:09:33:94:b0:3e:79:e3:39:3e:c1:b9:ad:
35:21:f9:08:75:92:58:46:c3:2e:fd:f3:76:2d:80:49:e7:24:
d5:7d:5a:cd:d3:6c:58:60:22:cb:df:7e:56:0b:f0:7c:a8:ff:
13:2e:96:ba:a2:8b:15:93:fc:ba:0d:8d:70:22:b7:e6:fe:7e:
52:1f:4c:26:ff:82:67:45:0b:86:64:38:36:f6:d7:cb:99:a8:
af:3b:1d:0f:fb:18:81:6c:b2:d2:ef:e0:a1:5c:a9:97:ac:04:
63:f3:a8:83:5f:f0:02:fa:0d:65:66:8c:04:f6:50:b8:f7:d1:
a5:d5:aa:1c:80:1a:5a:61:ca:ce:45:09:08:d2:49:7c:9a:40:
2e:20:e1:4e:b4:cf:22:04:94:03:4e:57:d8:9a:a1:2c:aa:5d:
9a:fb:fa:62:59:c6:35:97:81:57:fd:b4:2f:7a:5a:2c:2a:09:
04:57:fc:66:19:76:8b:ed:d3:60:2a:6b:ed:36:21:60:05:15:
17:93:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:46 2023 by rpki-client on console-ams.rpki-client.org