Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/m4lHw7s_QFDQKo2KWBngFZaZ7-4.roa
File: m4lHw7s_QFDQKo2KWBngFZaZ7-4.roa (raw, json)
Hash identifier: wxVVg6o3yJh2YRTT8e7jq21MYyTcFvk7TSYNa9ZVU6k=
Subject key identifier: 9B:89:47:C3:BB:3F:40:50:D0:2A:8D:8A:58:19:E0:15:96:99:EF:EE
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 03C8B43D
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/m4lHw7s_QFDQKo2KWBngFZaZ7-4.roa
Signing time: Sat 01 Jan 2022 02:56:33 +0000
ROA not before: Sat 01 Jan 2022 02:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23959
IP address blocks: 91.213.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63484989 (0x3c8b43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 02:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b8947c3bb3f4050d02a8d8a5819e0159699efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:a8:d9:7c:20:71:81:b5:92:cd:0c:c3:1e:
e9:df:57:76:0c:e0:36:57:29:0d:3b:f0:7d:3c:df:
c6:7f:cf:78:1a:10:31:31:64:71:d6:16:6e:b4:97:
74:23:78:5b:f9:4d:bc:71:ad:dc:f5:27:45:0c:04:
de:5a:96:95:a8:b6:e7:3b:24:fe:fb:19:14:b1:29:
8f:e6:e3:51:c8:d4:31:9d:a5:0c:c5:d0:ef:93:f4:
31:d2:f2:cf:b5:34:95:4f:c0:30:91:2a:50:9b:55:
67:bb:aa:72:30:79:f2:8c:9b:1b:e8:8a:d0:c8:75:
41:b6:c3:10:f4:e2:9b:c5:2d:fd:52:01:04:c3:fe:
50:84:2d:af:c7:d4:f3:61:45:b7:ea:c2:40:7c:da:
b0:6e:97:63:16:47:eb:50:67:69:7e:8c:c6:c7:4e:
7d:14:7a:da:26:fe:27:6a:c6:28:ef:b3:d1:3c:de:
a9:0b:1e:4a:30:bf:10:08:bd:a9:c4:ef:21:b4:c9:
7e:a5:cc:ed:8d:27:78:f1:fa:69:63:84:2b:9d:89:
6a:e5:e0:0a:38:2f:b5:f9:ce:d3:c3:44:60:19:6f:
73:9e:b6:71:f3:cd:c3:e1:df:c4:4b:1f:43:e7:c3:
38:75:fd:bd:69:43:f6:c6:bb:34:24:fe:2a:e7:73:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:47:C3:BB:3F:40:50:D0:2A:8D:8A:58:19:E0:15:96:99:EF:EE
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/m4lHw7s_QFDQKo2KWBngFZaZ7-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:9e:c6:56:81:74:43:3d:f5:ea:77:ef:69:8a:5a:d6:b2:c8:
23:20:a9:61:31:88:ab:d7:56:2a:3a:dd:30:f8:19:bf:b9:d0:
c1:e4:e9:e8:e5:1c:af:91:39:52:cc:c6:70:c5:51:47:ca:81:
70:ab:b0:4d:eb:88:35:c7:67:76:94:e8:4d:8a:86:bf:a8:22:
e5:83:3c:65:84:3e:04:c9:72:ac:9e:f0:b3:56:be:2c:ad:5a:
74:9c:24:00:66:99:81:4b:fa:9a:76:85:c6:e5:72:2b:a4:5b:
c0:be:17:3d:dd:2a:35:91:00:b5:e2:8e:62:c6:1f:f5:bd:64:
a2:ea:67:4c:5a:51:8e:2b:15:f3:43:8c:a1:09:66:a6:85:70:
ac:a8:b7:f9:7a:82:45:ef:4d:91:41:ce:71:8d:c6:13:7c:1e:
37:5e:88:03:af:60:2e:a8:3a:98:ca:17:05:b8:bf:ed:d8:92:
93:b4:99:18:0d:27:17:84:00:b5:84:7a:8a:4a:3b:40:5f:76:
80:c0:ea:87:84:80:43:82:7c:3b:bb:75:30:09:45:4d:4c:72:
ac:e7:b8:50:08:96:58:ee:b3:4d:83:77:fd:4f:19:3c:53:d0:
30:c8:4f:9b:06:86:b1:df:54:fc:96:ab:91:f9:22:0d:24:72:
9b:85:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org