Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/TG77Y5l5RuH0nNWNxTHwG0_gOzY.roa
File: TG77Y5l5RuH0nNWNxTHwG0_gOzY.roa (raw, json)
Hash identifier: GFAXjXGyZBvFkF7n6QxPbjxoNElRb6Quipg2CtrridQ=
Subject key identifier: 4C:6E:FB:63:99:79:46:E1:F4:9C:D5:8D:C5:31:F0:1B:4F:E0:3B:36
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 050F37B7
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/TG77Y5l5RuH0nNWNxTHwG0_gOzY.roa
Signing time: Sat 01 Jan 2022 06:55:01 +0000
ROA not before: Sat 01 Jan 2022 06:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49367
IP address blocks: 91.199.223.0/24 maxlen: 24
91.199.248.0/24 maxlen: 24
91.203.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84883383 (0x50f37b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Jan 1 06:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c6efb63997946e1f49cd58dc531f01b4fe03b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:2e:10:09:1b:34:54:54:b1:2d:3d:70:15:
99:b6:79:de:34:25:11:e5:1e:b3:32:24:f6:1c:0d:
9d:ef:0d:8a:06:08:d5:4e:40:72:78:95:15:f6:51:
3c:bb:90:a4:7d:b0:e4:d4:50:a6:7e:d5:28:ff:02:
94:3e:32:0f:85:63:5c:0c:38:95:7d:0b:68:a6:c4:
bd:c8:bb:b4:27:b1:aa:90:60:99:c9:92:1e:2c:73:
3f:37:9d:d0:bb:5f:b6:ab:55:14:8d:f1:23:96:bb:
46:3d:c9:30:86:5f:d8:36:79:c4:3a:b7:99:62:cf:
ea:7d:c3:d8:03:e2:90:f7:87:fe:e7:1b:1e:2d:d1:
42:27:23:f2:ad:80:d9:31:1c:86:fa:bb:20:ff:ec:
58:c0:a0:ca:29:d5:22:8d:89:3b:ef:c8:47:f5:aa:
43:91:d1:8b:2d:8c:63:12:82:43:2f:9a:8a:99:6d:
9f:1d:88:b2:dd:4c:bb:b4:13:00:b8:29:fa:75:38:
98:4b:d3:0d:34:a2:65:28:e7:0e:6e:83:34:ee:29:
72:3c:54:2d:aa:28:13:4f:74:fe:74:3f:33:df:98:
17:2e:e0:5b:37:00:72:e9:62:ba:77:b6:43:60:45:
5d:ae:a9:2b:54:2d:f0:f0:b9:42:fd:91:9a:46:87:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6E:FB:63:99:79:46:E1:F4:9C:D5:8D:C5:31:F0:1B:4F:E0:3B:36
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/TG77Y5l5RuH0nNWNxTHwG0_gOzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.223.0/24
91.199.248.0/24
91.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
91:56:39:b8:f8:d5:37:8c:d1:83:29:90:c3:74:2d:19:02:7d:
a0:91:66:8c:31:2a:96:cf:c7:31:c6:79:c7:cb:84:71:bb:c0:
c9:75:f3:5b:23:f2:0b:e7:be:39:7c:70:52:7f:26:03:78:a6:
67:9e:2f:77:63:35:ee:5d:24:db:b6:52:70:f8:03:43:5b:a9:
ed:14:bf:82:c6:30:1f:60:24:09:45:57:a3:a8:0e:99:c2:84:
0f:25:4b:08:b1:c9:0f:5f:3a:3b:b2:8f:a0:87:7a:8a:67:5c:
c3:1a:28:42:02:38:e8:6d:68:c8:ac:63:33:9e:02:05:63:be:
30:de:4e:01:8c:0c:a6:91:c9:f5:e8:77:99:2b:4f:ec:57:4a:
dc:92:5d:99:b2:20:58:30:6e:6f:99:7a:f4:da:98:34:82:f3:
78:f4:ee:9d:29:34:04:a7:8b:97:12:53:0e:09:dc:a6:b7:80:
fc:c7:e0:2e:49:d8:90:ae:6a:b8:fe:73:f6:b5:86:47:64:6b:
1d:24:b4:1e:02:03:30:b4:1e:cf:63:bd:01:30:5f:9d:f6:5e:
c5:9b:bd:46:b1:25:d6:57:67:e0:26:fb:a0:ea:4f:86:15:8f:
ee:85:40:f4:37:bb:2b:4c:28:51:47:1e:6d:6a:3d:4d:48:76:
4c:66:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:06 2023 by rpki-client on console-fra.rpki-client.org