Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/g55jN1CRqctdAc_I764o2TTrUUo.roa
File: g55jN1CRqctdAc_I764o2TTrUUo.roa (raw, json)
Hash identifier: zp2NRV/FtzCtyPB84wDvq5SRoWkVI5l136LSL64hA04=
Subject key identifier: 83:9E:63:37:50:91:A9:CB:5D:01:CF:C8:EF:AE:28:D9:34:EB:51:4A
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 055DE886
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/g55jN1CRqctdAc_I764o2TTrUUo.roa
Signing time: Thu 09 Jun 2022 12:05:03 +0000
ROA not before: Thu 09 Jun 2022 12:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.213.186.0/24 maxlen: 24
91.213.189.0/24 maxlen: 24
194.156.150.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
91.208.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90040454 (0x55de886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jun 9 12:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=839e63375091a9cb5d01cfc8efae28d934eb514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:79:4e:18:ea:97:f8:89:59:59:43:86:f5:
98:42:05:29:23:c1:a7:2f:c4:25:c2:61:60:bc:ab:
da:cb:28:1d:f0:38:72:43:aa:19:bf:81:50:ea:0a:
92:73:15:d4:28:8d:e6:52:b0:38:e5:51:d2:e7:2f:
97:81:f0:ed:4b:bd:f3:cf:f2:99:24:7b:d3:d5:ae:
a0:22:3e:15:5d:bb:e8:e9:e5:2f:52:06:25:4b:30:
9f:b5:cb:ac:1c:2c:90:d3:d8:ab:6b:8a:d0:dd:1c:
b5:56:c4:d0:9e:ae:ee:83:de:f0:58:ad:d1:00:99:
7b:80:11:f3:6e:c7:48:e9:1e:1a:82:29:63:61:7b:
b7:dd:ee:43:38:81:79:aa:6b:c2:e0:77:20:84:1a:
22:af:75:ec:47:8a:a6:8c:b7:a7:3b:e8:a0:d1:09:
2d:eb:6e:bf:cf:45:53:37:49:e5:df:fd:77:a3:97:
5a:65:b2:5f:e8:19:ac:07:a4:57:4a:98:75:c1:14:
50:0f:63:d9:8a:a2:8b:7f:03:58:c8:19:f9:9a:f2:
7e:f0:2d:5f:b3:1a:ec:9a:d1:7e:77:44:a9:fb:5a:
b0:50:a0:6f:76:27:d5:91:fa:8a:26:c1:33:be:cc:
7d:04:22:0a:bb:9e:d3:07:df:36:63:f9:14:92:49:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:63:37:50:91:A9:CB:5D:01:CF:C8:EF:AE:28:D9:34:EB:51:4A
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/g55jN1CRqctdAc_I764o2TTrUUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.104.0/24
91.208.109.0/24
91.213.186.0/24
91.213.189.0/24
194.156.150.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e9:e5:9e:b6:af:8b:8d:16:31:5d:3f:7a:71:7c:dd:82:a5:
cc:a3:f0:58:bc:d5:b7:18:bc:06:6b:5d:64:b6:23:9e:09:c1:
13:1a:14:aa:ad:ee:de:88:34:aa:30:80:d0:be:2d:fa:9c:6d:
da:4b:e5:37:5a:4a:18:21:26:fd:34:48:04:e9:a7:50:6a:23:
6e:01:71:aa:37:ce:be:99:d1:19:68:a2:63:92:98:95:59:bd:
91:d6:5d:6d:9f:c2:de:e2:30:50:d1:6b:c2:ee:5b:70:04:dc:
aa:85:5a:f8:fa:11:7e:06:17:a0:43:11:9d:c0:98:2a:05:8a:
10:10:fb:53:81:48:41:db:55:74:44:13:0c:e7:ab:f9:c5:0d:
59:04:3a:0d:58:b4:52:95:51:7e:40:dc:b8:0f:7d:eb:a5:11:
e1:89:80:ed:5b:91:f9:15:3b:74:1a:e2:b7:0c:ec:9d:15:82:
cc:24:46:48:61:6a:aa:2f:26:80:d4:c2:31:18:12:fc:73:8b:
0f:dc:1d:db:1c:29:2c:83:03:21:31:0b:dd:23:86:d3:ec:76:
0f:ac:7a:16:83:b5:9e:d6:ed:9e:f8:25:75:15:a2:b0:e8:51:
b7:86:44:4c:50:38:83:80:43:46:c1:f7:87:f9:06:2d:6a:47:
50:be:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org