Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/x8dReCZn-Gsunl_UpIKo3QobFkI.roa
File: x8dReCZn-Gsunl_UpIKo3QobFkI.roa (raw, json)
Hash identifier: D/COYSOKnJBM4TTwslMDChVzMYragnOcYqjcFQ778Sk=
Subject key identifier: C7:C7:51:78:26:67:F8:6B:2E:9E:5F:D4:A4:82:A8:DD:0A:1B:16:42
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01852A36171372366B254298795AEA16DB4B
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/x8dReCZn-Gsunl_UpIKo3QobFkI.roa
Signing time: Mon 19 Dec 2022 11:47:45 +0000
ROA not before: Mon 19 Dec 2022 11:47:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.208.73.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
194.156.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:36:17:13:72:36:6b:25:42:98:79:5a:ea:16:db:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Dec 19 11:47:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c751782667f86b2e9e5fd4a482a8dd0a1b1642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:07:7c:81:e2:d0:22:e3:fb:24:f2:d9:e1:
c8:d4:4d:72:c8:27:c3:c7:80:f2:a1:56:ca:ed:e3:
80:c8:a6:d6:82:0d:7d:57:0a:cc:1f:31:00:a4:c8:
8f:13:4b:40:33:7e:26:a4:ca:a0:1e:33:ac:7e:ba:
76:bb:0b:df:6a:0d:df:66:1d:c2:48:b8:65:69:c1:
7e:8d:21:c1:bc:50:8e:46:fe:4e:74:b1:3b:67:e2:
c9:bd:07:72:d5:25:6f:96:7d:bf:2f:52:60:b6:90:
96:6a:d1:00:7c:d9:ff:04:c4:10:0e:d0:25:25:17:
f2:82:79:78:ad:d1:58:57:25:8f:e5:97:b7:93:61:
a8:19:ac:ac:a5:14:c4:66:ab:fb:d4:20:29:81:ff:
c9:03:f6:53:f7:2a:1f:9c:05:79:4b:8a:a8:20:8c:
0c:00:5c:4c:d8:06:1b:2b:a6:af:d4:bf:ef:33:19:
a6:11:61:63:c4:48:78:86:76:5d:91:14:2e:c5:91:
cb:3c:4f:3f:35:a2:9a:71:22:20:6c:60:cc:93:c0:
bc:86:69:ab:51:c0:af:ca:84:37:47:bf:db:15:e0:
f5:a2:4f:aa:9f:ca:3d:7a:3b:f6:57:10:4a:ab:b8:
f0:23:b4:7c:f3:e8:86:70:49:68:47:39:71:53:99:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C7:51:78:26:67:F8:6B:2E:9E:5F:D4:A4:82:A8:DD:0A:1B:16:42
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/x8dReCZn-Gsunl_UpIKo3QobFkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.73.0/24
91.213.200.0/24
194.156.151.0/24
Signature Algorithm: sha256WithRSAEncryption
93:74:d5:40:80:bf:d9:39:64:dc:95:bc:9d:9d:69:d6:d1:df:
a9:15:df:0a:5b:b3:6c:ce:4d:7f:88:e3:ab:76:e2:68:6d:e5:
d1:19:51:ad:67:c7:3b:bf:b3:78:16:cd:00:30:04:a9:67:44:
28:d3:fa:59:60:c6:18:13:3f:2c:c4:9f:c4:c0:aa:6f:c2:7d:
2d:68:e8:8c:ce:d8:43:2f:9a:a2:c2:67:57:6d:af:fc:f7:fb:
9b:df:b6:31:23:ea:be:44:31:20:b3:2f:c7:eb:3c:af:42:67:
22:1b:02:82:90:bd:0b:0d:9f:d9:3a:4d:67:81:f0:1b:dd:3f:
fa:ed:23:6d:f6:87:25:ce:84:99:59:16:57:2b:4e:12:9e:e2:
4a:e0:38:86:27:ce:01:36:08:1f:02:41:87:50:9c:4a:64:36:
ab:64:77:96:38:c5:64:4e:dc:0a:0e:2a:eb:04:b2:3e:12:c5:
e4:43:83:a6:fa:a5:46:33:36:3e:0f:41:d2:a8:91:6b:ae:05:
d0:9d:8e:08:d6:32:c5:7c:b9:e2:a4:7f:5b:26:aa:91:fd:4e:
a1:6c:c7:12:4e:de:59:19:65:17:56:86:4c:a7:06:e2:ff:95:
6a:8f:7c:21:24:e9:36:40:c4:86:fa:83:7b:9d:e2:ec:d1:70:
5d:ae:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org