Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/xQ9_F-mZy3_cad2_Xcop2v8SI5Y.roa
File: xQ9_F-mZy3_cad2_Xcop2v8SI5Y.roa (raw, json)
Hash identifier: 0AJ7idRulZF7MbMk5Amr06mjw3tKUIgTswYHgiiReJs=
Subject key identifier: C5:0F:7F:17:E9:99:CB:7F:DC:69:DD:BF:5D:CA:29:DA:FF:12:23:96
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 03C1B521
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/xQ9_F-mZy3_cad2_Xcop2v8SI5Y.roa
Signing time: Sat 01 Jan 2022 11:54:42 +0000
ROA not before: Sat 01 Jan 2022 11:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42518
IP address blocks: 91.192.190.0/23 maxlen: 23
91.215.122.0/23 maxlen: 23
91.192.188.0/23 maxlen: 23
91.215.120.0/22 maxlen: 22
91.215.120.0/23 maxlen: 23
91.192.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63026465 (0x3c1b521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Jan 1 11:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c50f7f17e999cb7fdc69ddbf5dca29daff122396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:fa:64:28:40:fe:4a:59:ee:28:e4:d1:9e:
c0:67:17:04:04:3b:64:37:74:d8:bf:6a:fe:02:af:
d9:40:24:ec:3f:6a:8e:e1:78:9d:cd:3b:ca:75:5c:
e8:dd:8a:86:38:01:7d:43:27:73:ee:e5:89:53:ec:
40:25:30:6f:52:d5:18:fd:cf:a3:3b:26:11:b4:2f:
46:63:29:9b:ad:aa:aa:1e:e9:43:6d:da:da:c6:35:
0b:19:33:03:f3:8d:30:1b:d4:15:72:56:39:04:52:
69:43:fc:a2:bf:21:9b:f8:5d:dc:65:e0:14:6c:48:
71:92:74:09:c4:58:63:25:0b:73:45:71:c7:e1:32:
9a:e4:c6:d4:ea:bb:85:26:39:81:7a:c6:17:00:1a:
ab:0d:fe:a6:e1:ed:54:a6:8c:6a:46:ce:d7:32:b3:
28:02:f3:e4:af:37:0a:05:80:d0:c2:31:07:ab:ce:
28:40:bd:59:39:e2:ef:3c:55:1d:b5:cb:bc:6c:b5:
2b:35:cd:c3:2c:bc:62:9b:8d:9f:08:27:22:08:70:
4a:b2:6f:e6:0d:e5:a7:f3:e6:57:32:6b:8a:82:d0:
fb:d9:62:ec:b6:98:d1:2f:b0:b9:ac:38:32:d0:7f:
e9:85:18:7e:0b:ce:93:89:ec:da:9c:fe:16:56:45:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0F:7F:17:E9:99:CB:7F:DC:69:DD:BF:5D:CA:29:DA:FF:12:23:96
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/xQ9_F-mZy3_cad2_Xcop2v8SI5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.188.0/22
91.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:37:7f:1b:10:75:8b:54:fc:f0:98:01:41:19:cc:d4:28:0c:
25:ab:98:0d:15:0a:f5:e0:91:56:10:e5:71:cc:29:84:85:5a:
ed:ea:6c:77:53:e8:84:ee:d8:cd:3f:98:22:09:0d:50:dd:ee:
eb:5b:b6:79:e3:48:e7:45:40:83:68:43:6f:40:53:b9:6f:50:
08:2a:b7:94:43:ae:1b:c9:d0:cc:dc:c9:b8:47:09:08:1b:8e:
2b:57:4e:7e:ad:bb:9d:00:38:c4:19:61:32:45:dd:4e:c4:a9:
a0:6b:8c:5b:3e:21:fe:80:77:bd:44:f6:30:44:2c:63:94:68:
92:0e:7b:36:27:31:ba:1f:41:95:87:56:d1:80:e2:9f:2b:35:
96:02:40:e6:5b:6a:2a:55:24:d5:78:f0:5b:ea:6e:49:5f:a3:
44:8d:73:05:50:ec:a7:0a:e8:ea:1b:7a:f3:6d:a8:4a:f5:37:
41:62:d4:93:29:e6:57:4a:22:29:44:f6:42:82:ae:1e:45:9b:
01:9b:cd:65:7e:ef:32:81:08:9c:f9:c0:bd:a1:44:57:36:47:
84:c1:2e:9e:c9:53:28:9a:9a:b5:f4:e9:fa:e2:58:16:19:ca:
99:3b:15:d3:7c:04:54:ba:cd:1d:04:df:de:2c:e8:8d:27:77:
32:f1:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:12 2023 by rpki-client on console-ams.rpki-client.org