Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/5PYWRLN6ZrkUmgFrH1hXe2MdvHY.roa
File: 5PYWRLN6ZrkUmgFrH1hXe2MdvHY.roa (raw, json)
Hash identifier: 2EAvNi2gbv3b4rcon2J2U7xhz4DN30pNTGkE0l/1O10=
Subject key identifier: E4:F6:16:44:B3:7A:66:B9:14:9A:01:6B:1F:58:57:7B:63:1D:BC:76
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 495DCC
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/5PYWRLN6ZrkUmgFrH1hXe2MdvHY.roa
Signing time: Tue 29 Mar 2022 13:37:13 +0000
ROA not before: Tue 29 Mar 2022 13:37:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199144
IP address blocks: 91.245.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4808140 (0x495dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Mar 29 13:37:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4f61644b37a66b9149a016b1f58577b631dbc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:12:fa:c7:a3:4c:0b:47:73:62:ed:d4:05:
48:e5:ba:b9:35:d4:09:ce:50:1e:05:1f:0a:81:56:
a2:7b:60:44:8e:e5:57:c7:e9:1a:05:48:36:c0:42:
1f:60:96:6c:58:07:c8:12:09:21:16:18:9a:20:e5:
86:d7:19:8c:55:f9:9d:5c:6c:05:74:71:18:0a:f8:
1f:4f:8f:89:e5:40:c0:a1:2d:81:d7:ef:13:b9:26:
bc:7c:33:f9:d3:54:4c:e0:01:4d:79:af:8c:c8:be:
ad:cd:e0:26:98:0b:2b:29:6c:7c:08:e8:f0:60:0d:
44:bd:10:d6:4a:16:2b:8e:fc:d2:ac:8e:5f:cc:33:
f9:3e:c1:86:72:70:58:81:dd:a7:ca:f0:53:50:9f:
39:8d:69:d9:c2:42:4f:74:f3:5a:83:1f:26:d4:50:
9a:e9:3e:b1:12:11:d4:7d:16:2c:0d:97:d1:47:89:
63:de:67:29:7e:9c:6a:6f:9b:09:de:fd:dc:3b:cb:
0c:14:e9:70:bf:58:12:92:66:c2:88:46:de:9d:0e:
76:cc:20:ee:7c:a5:3d:5e:5e:72:e2:af:6d:dd:8e:
1e:52:85:a3:54:fa:e5:bc:da:e2:a9:1f:3c:96:04:
66:e0:70:a9:0d:06:73:2a:1c:20:a1:cd:86:f0:59:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F6:16:44:B3:7A:66:B9:14:9A:01:6B:1F:58:57:7B:63:1D:BC:76
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/5PYWRLN6ZrkUmgFrH1hXe2MdvHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:15:19:c7:29:f5:28:ed:57:f6:b7:19:8b:56:f4:0a:b8:e2:
c9:2c:1b:64:65:48:16:d7:82:ee:e7:b5:61:4d:56:2f:77:01:
36:96:4a:37:82:9d:96:8f:95:25:df:57:31:1a:9d:74:62:4a:
4a:5b:a7:39:77:1f:f0:9b:fe:69:45:af:6c:52:6f:ea:3c:f5:
a0:8a:e2:2e:19:f5:0a:b8:c9:ad:7c:95:a8:b9:b7:ad:0d:d0:
7a:22:d3:80:00:14:53:6b:7c:7f:7c:bc:3e:27:a3:d3:d0:a4:
8e:aa:61:9d:57:18:65:ab:f6:98:92:0c:10:81:ca:52:7d:63:
40:12:e1:f8:7d:e9:af:1f:40:62:70:9c:a1:a1:c7:9a:6f:9c:
28:6b:b0:b8:b6:4e:ad:ae:f1:57:c0:5f:45:9c:7e:d1:f1:30:
03:8a:07:c6:86:38:5b:0b:88:77:67:cc:37:43:07:f2:a6:fd:
d7:a9:0a:c2:93:a5:f9:8c:89:9d:84:55:f1:4b:68:d6:29:b1:
8c:c0:7d:e0:66:47:45:18:0f:0c:c3:7a:eb:49:41:25:c7:1e:
db:08:dc:e8:b1:40:0e:7f:b4:0f:62:db:da:8e:96:20:3c:80:
91:8f:1e:d3:74:8d:28:0b:31:71:3c:65:a0:f1:b4:2d:84:0b:
15:f0:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:21 2023 by rpki-client on console-fra.rpki-client.org