Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/10tznpZwFYFEY1HLzt7RFusGc8E.roa
File: 10tznpZwFYFEY1HLzt7RFusGc8E.roa (raw, json)
Hash identifier: LcvFxOfy2N/esF7dpGjVt79GxNzUQJxfP65nYjD4hB8=
Subject key identifier: D7:4B:73:9E:96:70:15:81:44:63:51:CB:CE:DE:D1:16:EB:06:73:C1
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 3640580E
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/10tznpZwFYFEY1HLzt7RFusGc8E.roa
Signing time: Fri 29 Apr 2022 09:44:35 +0000
ROA not before: Fri 29 Apr 2022 09:44:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57495
IP address blocks: 91.231.0.0/24 maxlen: 24
85.158.220.0/24 maxlen: 24
85.158.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910186510 (0x3640580e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Apr 29 09:44:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d74b739e96701581446351cbceded116eb0673c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:61:f9:68:60:ee:09:2c:27:24:6a:44:68:
a6:2c:8c:55:7f:2f:ce:5c:3c:2f:a7:d6:70:ef:14:
c0:e0:24:8e:6f:2d:54:80:9f:18:82:53:0b:b3:1d:
e9:f8:fb:7d:09:66:e8:b4:1c:d6:a1:71:5f:ad:ec:
f0:c1:b9:84:4b:30:40:7f:54:19:62:b5:1a:1a:fe:
c4:bb:d9:10:02:65:e6:24:23:43:0d:71:99:b5:46:
ca:80:fc:4e:0e:84:62:8e:6b:4a:69:0b:98:ab:f3:
4d:df:fd:c9:f0:c8:de:49:0c:c7:f8:73:4b:0d:ae:
0a:8c:29:bf:da:01:ea:82:9b:c5:99:8c:c0:35:a0:
c7:48:49:55:0c:26:1e:dd:1c:a4:dc:7e:bd:55:93:
12:ad:a0:71:20:08:0e:4f:2f:dc:14:57:60:23:34:
1c:ea:b0:99:85:d7:b9:b7:73:fd:26:80:4c:9b:4d:
0a:ef:34:44:fa:eb:5b:68:43:74:4d:d6:65:dd:f1:
90:2f:64:0c:7d:2b:ed:4e:bf:7c:c9:c8:21:3a:75:
f3:5b:34:b6:f2:18:b8:ac:68:91:cd:56:dd:f4:db:
0c:f9:05:f5:71:09:19:32:15:29:4a:9d:f3:88:a9:
32:7d:91:28:3b:bd:ce:51:64:14:60:d2:9a:e6:bc:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:73:9E:96:70:15:81:44:63:51:CB:CE:DE:D1:16:EB:06:73:C1
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/10tznpZwFYFEY1HLzt7RFusGc8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.220.0/23
91.231.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ff:7b:e0:43:92:36:37:2e:e3:73:7e:da:43:d8:82:cf:01:
29:a0:c3:06:65:ce:16:ae:7f:d9:e3:36:c3:95:40:67:c9:1b:
56:e7:16:95:6c:e0:27:2a:fc:de:0e:67:85:71:28:79:79:52:
2d:93:74:a5:2b:df:d3:7c:e8:a4:b0:09:f3:36:29:4d:c9:73:
ce:b6:b7:26:a8:62:17:d6:42:a8:06:a2:9b:b1:ef:9b:5e:7c:
6f:db:85:b5:56:64:be:2b:8c:f1:54:dd:05:21:5f:86:10:9b:
5b:93:4e:fe:35:c9:b2:ad:1d:c9:e6:ec:00:85:83:cd:8b:ef:
95:24:96:57:6d:69:74:36:7a:1f:ce:48:07:5e:c7:fa:ca:b2:
80:f0:75:42:54:41:96:d7:84:3f:44:b6:03:ae:40:61:ab:ff:
2f:22:95:09:1a:d8:8a:59:0a:13:87:6a:6b:bd:b4:46:ad:39:
b0:7f:e2:27:fe:48:c2:d7:fc:50:57:47:e9:7c:f7:3b:88:38:
db:20:15:25:cf:43:c0:e4:25:a4:4b:c2:71:1e:6a:21:8b:8d:
9c:6b:44:45:2f:92:99:f0:9a:e5:12:b3:d8:78:38:07:34:bb:
31:eb:7a:d6:5e:7f:5a:d7:e6:6b:61:9f:c5:c5:7f:db:2d:91:
00:d3:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:27 2023 by rpki-client on console-ams.rpki-client.org