Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/sF8ZYM40X4FzhvfmE8Y8gqeR5aw.roa
File: sF8ZYM40X4FzhvfmE8Y8gqeR5aw.roa (raw, json)
Hash identifier: PbRM4jeTPLjxvXNo6v3Q1oKqOYsDO2jZUsZqeG8KRSI=
Subject key identifier: B0:5F:19:60:CE:34:5F:81:73:86:F7:E6:13:C6:3C:82:A7:91:E5:AC
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: CD35
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/sF8ZYM40X4FzhvfmE8Y8gqeR5aw.roa
Signing time: Thu 03 Mar 2022 12:43:32 +0000
ROA not before: Thu 03 Mar 2022 12:43:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 91.142.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52533 (0xcd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Mar 3 12:43:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b05f1960ce345f817386f7e613c63c82a791e5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:98:9f:cc:95:8a:a1:24:d5:19:db:22:b1:
ce:d4:1f:78:8a:f6:30:c8:9b:38:4b:68:c8:6d:16:
e8:81:63:74:a3:f2:aa:0d:d1:f6:15:57:2c:24:2f:
be:bf:69:b1:1b:a6:8a:f0:6e:2c:0e:01:da:f1:10:
e2:c4:87:9e:be:4f:c7:18:a0:8e:1c:66:db:d3:87:
20:29:bd:73:34:bc:85:f2:cc:68:ed:ed:89:b5:64:
f5:69:0b:9c:05:4d:4d:e0:79:dc:9a:0a:be:c2:38:
f4:c3:4d:23:80:b7:58:d6:0a:ad:dd:99:62:44:40:
15:f8:45:42:6b:d5:e4:ad:9d:b5:c5:60:9a:7b:dd:
04:3e:d9:6a:7f:0e:0d:52:f9:90:0b:74:c3:f9:e1:
ee:3b:50:5e:84:5c:31:66:98:89:83:10:69:f9:12:
5e:62:5a:dc:95:c9:48:1f:4b:4a:1e:c7:9c:23:e7:
9d:1b:23:02:19:26:66:36:ed:c1:85:3d:51:18:45:
1d:5c:37:75:91:09:32:a0:51:9e:8b:25:83:b0:25:
28:3c:09:28:59:55:10:ff:b0:cf:d0:48:6c:56:4c:
14:f9:13:2d:2e:5f:4c:45:10:69:b7:b2:3b:80:b6:
d5:d8:68:29:96:73:70:2f:dc:25:b2:cb:b6:21:c7:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5F:19:60:CE:34:5F:81:73:86:F7:E6:13:C6:3C:82:A7:91:E5:AC
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/sF8ZYM40X4FzhvfmE8Y8gqeR5aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.128.0/24
Signature Algorithm: sha256WithRSAEncryption
41:09:9d:ec:61:94:56:2f:f6:0e:ee:df:04:7a:44:bf:bf:aa:
56:e2:4f:d6:a8:07:c0:2f:37:f2:4d:6c:9a:4e:ab:4e:8d:be:
97:77:65:b1:e2:d3:d5:de:69:f3:56:6e:8a:68:15:d1:80:a3:
b0:c2:fe:91:99:aa:60:9b:a1:d6:13:9b:09:ee:bf:6f:7a:d1:
ec:a1:18:16:5b:80:0a:fe:f0:67:87:50:58:35:07:9d:3a:3c:
87:ff:c0:52:40:cc:61:d4:0b:7b:76:5b:08:43:4e:2d:0f:dc:
d6:df:c4:56:14:c3:cc:ca:15:f5:a5:77:fe:43:0d:48:79:53:
67:40:74:90:13:fc:2f:85:1f:6d:90:af:d2:8d:b3:83:4c:69:
14:d9:b7:03:2c:a4:9c:d6:fd:4b:4a:14:eb:a9:b3:ab:2b:6e:
a4:5b:ea:71:5e:13:22:bf:0b:e0:41:0a:9d:7a:30:cb:1c:7e:
8e:5a:40:5e:21:83:9a:af:32:26:a2:89:61:f2:94:23:b9:dd:
41:87:e4:54:7f:34:14:ee:99:1e:d2:c3:5d:c3:af:15:e6:f7:
fb:d6:ae:8d:06:89:bf:34:3b:ec:0d:18:44:68:dd:4c:5f:b6:
63:16:3f:0a:ad:f0:6f:8d:e4:85:f3:c3:b7:78:db:f0:a7:0b:
8e:78:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:21 2023 by rpki-client on console-fra.rpki-client.org