Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/LjXjyXCZYDJqzwhRNQh12eA4wAc.roa
File: LjXjyXCZYDJqzwhRNQh12eA4wAc.roa (raw, json)
Hash identifier: v+DHAYvmUwcux6n2nMpBGMNmoxBXiuMe3BcplqSB7ag=
Subject key identifier: 2E:35:E3:C9:70:99:60:32:6A:CF:08:51:35:08:75:D9:E0:38:C0:07
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018543A36D5C9AD8C27C515299DF2C5B1C23
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/LjXjyXCZYDJqzwhRNQh12eA4wAc.roa
Signing time: Sat 24 Dec 2022 10:17:41 +0000
ROA not before: Sat 24 Dec 2022 10:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 91.213.186.0/24 maxlen: 24
91.208.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:a3:6d:5c:9a:d8:c2:7c:51:52:99:df:2c:5b:1c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Dec 24 10:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e35e3c9709960326acf0851350875d9e038c007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:a7:50:df:d9:6d:76:95:84:f3:68:dc:ea:
da:f9:ee:c9:0e:07:24:3c:80:d8:1c:77:90:26:46:
85:c3:1d:c6:ba:86:73:02:90:1c:48:82:84:bd:97:
4c:1b:48:86:92:d2:4c:82:ed:ba:ad:46:7a:00:58:
2b:ad:c1:fc:66:64:9e:89:69:fc:80:e4:06:41:25:
50:4b:41:4f:84:70:1a:c3:71:20:a7:4b:be:40:52:
18:24:7f:60:3a:80:9d:da:32:4d:d7:eb:9c:55:d6:
05:41:5b:03:5b:5b:2d:3f:02:79:e8:fc:d7:d5:76:
78:c3:57:8a:3d:89:c8:7a:ff:a4:2e:d4:dc:f0:b0:
c6:d3:b5:b0:b4:9f:af:c6:cf:aa:b9:c9:1c:0a:66:
4a:eb:c8:5e:90:99:c0:dc:ba:3f:5e:d7:2f:4b:15:
ff:1f:5b:d9:35:bc:88:a7:ef:61:9a:f9:e6:a2:c9:
1a:b0:eb:86:c0:28:d5:d8:c9:3e:58:69:de:09:60:
49:cb:23:6c:c4:22:4d:11:95:23:19:97:a7:a2:13:
0c:21:51:b0:86:60:57:7b:eb:eb:ac:09:62:81:e7:
01:62:3c:73:0e:7d:b5:a1:e2:c4:b3:84:54:5e:d4:
7d:93:49:1f:b7:3c:c5:1c:69:ce:8d:73:e7:c5:69:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:35:E3:C9:70:99:60:32:6A:CF:08:51:35:08:75:D9:E0:38:C0:07
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/LjXjyXCZYDJqzwhRNQh12eA4wAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.73.0/24
91.213.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0a:b1:7a:21:8c:63:f7:b2:bb:93:86:98:b9:7e:1e:46:69:
e5:ea:cb:74:d3:40:af:8b:b9:f0:4d:f3:98:7a:5d:e6:72:72:
54:c4:0a:43:0b:bc:8f:0f:59:d7:3a:23:02:59:9d:61:ea:5f:
d5:2d:1f:16:0d:73:fd:75:10:da:74:9d:9b:42:2e:0d:7f:19:
17:1f:77:59:e2:0f:1f:9f:b6:a0:46:24:38:e2:dc:e5:ce:a2:
29:44:8a:ea:bf:6f:c0:80:6d:1c:72:d1:da:fb:47:a0:fc:38:
9e:00:ad:ac:de:49:8f:67:b8:3e:df:29:66:01:7c:20:ad:bb:
da:ed:30:88:75:c7:9d:4e:27:76:5b:38:05:08:b4:cd:c3:dc:
11:3f:13:51:93:51:32:b2:d5:76:e1:c8:de:45:b1:eb:b1:95:
49:a7:01:ac:d7:a2:af:44:61:70:a5:cb:91:b9:7a:56:ef:b4:
2a:eb:fb:71:7e:b9:b0:6a:d2:15:8e:a1:53:b5:e7:3a:66:89:
5d:2e:44:fb:f7:c1:69:b7:fa:51:e5:15:05:79:38:62:96:ec:
3d:64:2d:5d:6b:8a:a5:34:c0:79:25:1a:bb:4d:e5:db:bb:ff:
4a:3a:3d:34:68:9f:42:ef:c2:9b:55:ce:f3:77:bb:d5:cf:bf:
9b:db:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org