Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/p48V2AFOGCDBqFFvfnszgyLlJ98.roa
File: p48V2AFOGCDBqFFvfnszgyLlJ98.roa (raw, json)
Hash identifier: Vmi6u4pigWqDrBv0c9lwqKwrt7P6ZRI4bUwlZpFMoKw=
Subject key identifier: A7:8F:15:D8:01:4E:18:20:C1:A8:51:6F:7E:7B:33:83:22:E5:27:DF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 42B4EE31
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/p48V2AFOGCDBqFFvfnszgyLlJ98.roa
Signing time: Wed 27 Apr 2022 08:36:12 +0000
ROA not before: Wed 27 Apr 2022 08:36:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50614
IP address blocks: 188.210.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119153713 (0x42b4ee31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 27 08:36:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a78f15d8014e1820c1a8516f7e7b338322e527df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:50:17:29:58:7d:89:d4:4d:2a:e2:83:eb:
09:dd:2c:3b:a8:77:32:1a:48:ee:6b:71:04:3e:ac:
33:ff:c2:6d:56:92:2b:31:f4:6e:d0:bc:ef:2f:6b:
e7:38:24:d3:b2:90:c9:5f:3d:34:4b:76:3f:57:af:
2d:e9:27:6e:79:0d:41:cc:cf:c2:b0:ba:92:1c:c5:
0b:20:d6:16:bb:1b:d8:c7:e2:e6:cc:da:aa:27:d8:
b8:20:e4:28:8a:a9:3a:79:f3:b7:70:0a:48:9c:0c:
9d:c4:1b:f5:3c:04:a6:52:cb:ca:0b:bf:ab:49:90:
28:53:7b:77:6e:5d:69:79:eb:b4:6b:9c:cf:7c:39:
6b:09:f6:22:65:01:7a:a7:f8:a5:d1:6f:f7:bd:c5:
aa:79:8a:bf:da:04:4f:ec:e7:87:36:11:0b:0e:85:
b0:2a:1c:14:21:a7:ac:56:95:97:f1:48:ef:75:d7:
1c:0e:97:3e:ac:f5:64:bc:69:97:61:2f:15:89:bd:
fb:46:21:2a:9f:cc:dc:8a:f1:7e:a9:df:21:eb:bb:
ae:94:9b:f4:fb:5d:6a:19:c8:9d:a8:08:1e:c2:56:
1a:12:15:40:3a:f5:4f:98:e7:7c:2e:e6:65:a8:ee:
35:ff:82:f5:8a:ea:61:d2:4f:eb:e7:ef:d2:c9:d4:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8F:15:D8:01:4E:18:20:C1:A8:51:6F:7E:7B:33:83:22:E5:27:DF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/p48V2AFOGCDBqFFvfnszgyLlJ98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.91.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6f:c5:5b:75:04:94:b7:ee:56:2d:d3:16:55:df:d7:a1:49:
85:7b:ea:e4:c6:ca:f7:dc:34:59:9a:24:29:93:47:b7:fb:5a:
ca:24:37:ba:4d:be:11:d1:92:40:8e:2c:27:2e:5e:d9:a5:ed:
d9:74:36:e8:3c:96:98:f7:d4:28:54:9e:13:f0:26:48:53:4f:
fb:b7:e3:39:58:3c:eb:83:11:dc:cd:7b:9a:29:34:a8:09:a4:
8d:24:0a:86:df:be:a8:45:1c:0b:75:b3:3a:c7:d8:40:94:21:
be:d3:73:16:ea:fd:fe:e0:b7:e7:b2:ed:ff:3f:bb:76:7d:36:
70:7c:f2:d2:72:38:73:16:f9:f0:fd:b7:9b:78:6f:95:42:a8:
f3:02:0a:4e:47:d7:40:62:6b:74:68:40:1f:bc:83:c4:5f:6d:
77:f9:ab:95:e4:1e:b3:e8:bd:16:3f:30:c8:3c:ab:a2:69:7d:
b9:a1:21:bd:0f:e6:db:f5:a8:70:d2:81:f2:a2:fd:5f:ee:3b:
7a:44:c0:98:e7:1d:5a:8c:ea:74:a9:74:8c:19:5d:3a:39:76:
46:4c:35:23:4e:74:5f:ec:30:78:68:5d:36:08:0a:66:75:c9:
3b:75:bd:57:70:21:d5:67:49:b1:b8:08:67:3c:c5:fe:da:ca:
d5:10:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org