Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/iFuSDJkniNPP4DtNIPbhL-dP98k.roa
File: iFuSDJkniNPP4DtNIPbhL-dP98k.roa (raw, json)
Hash identifier: mCJS1jJKhQ8FXeamlAfFHZ7PTIctSe3nMdzTo7YARJs=
Subject key identifier: 88:5B:92:0C:99:27:88:D3:CF:E0:3B:4D:20:F6:E1:2F:E7:4F:F7:C9
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 099FBB29
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/iFuSDJkniNPP4DtNIPbhL-dP98k.roa
Signing time: Wed 09 Mar 2022 05:38:37 +0000
ROA not before: Wed 09 Mar 2022 05:38:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49724
IP address blocks: 91.215.220.0/24 maxlen: 24
91.215.220.0/22 maxlen: 22
91.215.222.0/23 maxlen: 23
91.215.221.0/24 maxlen: 24
188.0.160.0/20 maxlen: 20
188.0.162.0/24 maxlen: 24
188.0.160.0/19 maxlen: 19
188.0.169.0/24 maxlen: 24
188.0.166.0/23 maxlen: 23
188.0.175.0/24 maxlen: 24
188.0.176.0/21 maxlen: 21
188.0.183.0/24 maxlen: 24
188.0.180.0/24 maxlen: 24
188.0.186.0/24 maxlen: 24
188.0.184.0/22 maxlen: 22
188.0.189.0/24 maxlen: 24
188.0.190.0/23 maxlen: 23
188.0.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161463081 (0x99fbb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Mar 9 05:38:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=885b920c992788d3cfe03b4d20f6e12fe74ff7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:d9:e8:c9:9c:b6:b2:ef:37:17:43:da:4f:
95:76:53:3c:b4:1a:13:cc:9b:ba:63:0b:bb:2a:8c:
40:1b:cc:50:24:87:88:70:f4:d8:3c:89:8b:92:59:
27:03:5c:72:16:84:5c:bf:6c:c0:d8:7a:96:91:ea:
8f:75:7d:a1:37:9b:a6:5a:aa:6d:58:bf:93:92:47:
f8:50:12:d2:1a:b9:d5:c8:8e:75:c8:90:d0:73:a0:
da:0f:5e:e2:36:74:b3:60:f9:c8:cb:ff:d3:51:7e:
58:9c:d5:1c:0c:5e:a4:cb:0f:41:59:32:89:d6:15:
3b:8b:d0:b3:85:c6:f2:9a:66:e7:79:da:bc:41:0d:
ea:e0:68:d1:59:71:c5:71:38:58:b3:34:b4:71:7c:
4b:2d:a8:c7:c9:5a:72:a3:30:67:b1:7b:d6:d4:71:
c6:f2:91:8c:38:6b:ee:c8:23:88:99:33:3a:8e:f2:
d8:ae:c6:fb:74:ad:71:38:3f:03:2b:66:ec:1d:32:
92:d9:68:f0:41:48:4b:ae:b4:5f:2d:e5:90:59:9f:
9a:4c:e0:94:69:3e:7b:ee:e9:15:e3:3c:43:bf:3b:
39:01:14:bc:55:30:ef:2c:62:61:29:62:c3:7e:a4:
54:57:2a:55:b6:c8:00:00:8a:34:55:d5:39:8d:6d:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5B:92:0C:99:27:88:D3:CF:E0:3B:4D:20:F6:E1:2F:E7:4F:F7:C9
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/iFuSDJkniNPP4DtNIPbhL-dP98k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.220.0/22
188.0.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:46:68:8d:7d:e6:6c:16:2b:7f:28:fa:1d:1c:78:75:d6:bc:
21:d4:40:1c:80:be:09:a9:86:4d:ba:2b:1e:1c:ef:ca:62:ba:
e2:10:6e:69:55:6a:b2:a1:e5:f9:30:60:be:d9:db:50:e8:1b:
f8:fc:0a:d8:ee:2b:df:b8:c1:e0:43:55:06:ca:e8:df:8d:de:
f6:0e:46:3b:cc:65:c8:c0:2a:d5:08:c0:d2:62:ab:76:e0:a4:
95:30:da:9a:80:97:2c:1c:18:30:c9:31:8f:f0:05:73:68:1d:
56:de:d3:79:bc:4f:ef:3c:0c:87:4a:72:08:8e:14:43:b3:dc:
44:6a:ae:8b:3f:bf:7f:cc:16:ba:fa:0a:cb:59:3d:9c:69:4d:
49:0f:32:06:fa:75:7a:c7:71:14:12:f7:9a:01:93:59:80:de:
0e:72:19:d9:99:4d:15:ca:46:f7:2e:a7:95:0f:56:02:46:c4:
d2:91:69:a0:bc:d6:8a:9c:10:41:69:e4:09:f4:60:4d:a8:d4:
84:16:2b:d7:95:ee:b9:d0:3c:6e:ee:a2:a4:81:37:a3:72:4d:
ab:3f:6c:a2:1d:56:71:cc:e0:d3:76:b0:4a:8f:cc:37:46:d3:
05:e0:0b:97:6f:cd:23:d5:7b:a0:36:01:d5:bd:fa:69:8d:48:
e8:a7:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:39 2023 by rpki-client on console-fra.rpki-client.org