Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/B2s4-GKzclBRPYKD092AKWBhO1k.roa
File: B2s4-GKzclBRPYKD092AKWBhO1k.roa (raw, json)
Hash identifier: kOY7lfPHd8cw4HISLPg+BXj30bDAAvq/S7aDmDGgE4s=
Subject key identifier: 07:6B:38:F8:62:B3:72:50:51:3D:82:83:D3:DD:80:29:60:61:3B:59
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 037226B1
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/B2s4-GKzclBRPYKD092AKWBhO1k.roa
Signing time: Mon 14 Feb 2022 09:29:42 +0000
ROA not before: Mon 14 Feb 2022 09:29:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.193.232.0/22 maxlen: 24
91.220.249.0/24 maxlen: 24
195.8.200.0/23 maxlen: 24
152.89.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57812657 (0x37226b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Feb 14 09:29:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=076b38f862b37250513d8283d3dd802960613b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:cf:b3:1f:da:a2:47:22:51:10:84:64:25:
4a:0a:47:a8:e0:b3:e1:15:4c:5b:36:a2:62:75:89:
ea:77:b2:86:2b:b2:4a:3e:5e:d2:35:18:70:b6:a4:
17:2a:be:c3:3e:ee:44:4a:fa:3e:1b:f9:fd:53:27:
59:68:72:d7:c2:e1:4d:52:33:e3:29:44:19:8e:c9:
de:36:38:7a:7a:02:b7:c9:3a:78:a8:63:23:6a:79:
3a:b7:a5:d7:b7:0f:2c:eb:77:c6:9f:6d:7b:69:32:
20:f0:4e:ba:a0:c3:e6:c7:d4:a2:b9:8d:71:55:50:
be:4f:32:56:ec:41:86:a6:40:7e:44:6e:dc:96:3c:
ad:5e:ef:b7:5b:50:b3:34:8f:a7:86:6d:a1:f8:2d:
b7:95:b5:1e:b3:bb:92:a6:2c:63:d6:c4:cb:4d:65:
ce:1a:c5:28:1e:15:6a:71:90:8d:15:15:5e:55:68:
43:2f:32:8d:1c:33:cf:66:8d:ea:30:0b:0f:9c:44:
95:db:15:ee:5c:e7:23:cd:56:65:59:49:cf:d8:79:
68:51:b8:4b:c2:ae:11:8b:a6:5c:1d:f1:07:01:0a:
36:63:ae:ea:d6:a1:8b:a6:2f:99:1a:23:1d:b6:1e:
b5:b9:82:03:50:4d:99:77:4c:e2:c2:05:13:b2:a6:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:38:F8:62:B3:72:50:51:3D:82:83:D3:DD:80:29:60:61:3B:59
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/B2s4-GKzclBRPYKD092AKWBhO1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/22
91.220.249.0/24
152.89.194.0/24
195.8.200.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:7e:cd:0b:b6:06:9b:34:ff:20:57:92:ef:49:83:c3:e0:d7:
05:d9:f7:03:a0:6e:72:45:4e:7d:f7:c2:a3:c9:a9:48:c2:72:
e7:5f:01:11:fd:83:df:cc:bb:44:a9:53:3f:8a:97:6c:ab:52:
d5:05:39:03:84:e4:dd:35:1f:4a:68:08:56:6f:04:e3:63:72:
17:83:89:d3:e4:23:7a:41:e7:4d:d2:1d:a3:62:a3:13:db:89:
37:db:ff:d1:e1:00:2c:67:6b:30:82:c8:de:b4:66:8f:4c:88:
fd:b1:65:8f:fd:33:bf:34:29:5a:d2:b4:9e:58:62:d9:59:af:
8b:9a:cb:84:93:ad:dd:f9:9b:84:fb:8b:14:e4:ce:63:68:15:
b2:c4:1b:b5:aa:71:44:2e:d1:2c:fd:da:cd:70:8d:72:27:00:
0d:67:4e:49:3a:d8:23:e8:bf:ab:17:ac:de:62:18:e9:9d:6e:
22:16:35:ff:be:8d:c9:ad:0c:ba:e4:f2:31:1b:2e:2a:8a:ee:
73:e6:9b:fc:d8:f8:b6:a1:6a:91:19:a4:8c:97:aa:30:7c:78:
99:98:02:d5:94:4d:f7:3c:d3:b2:45:80:46:7e:c7:da:a6:9e:
ca:0d:39:1e:57:9a:25:7a:d7:87:3f:ab:f1:32:aa:09:69:32:
fc:57:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:28 2023 by rpki-client on console-ams.rpki-client.org