Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/t4cGLV2vlUDvoRii6YnGlg6WdjI.roa
File: t4cGLV2vlUDvoRii6YnGlg6WdjI.roa (raw, json)
Hash identifier: P9PbaV0d3Dgmv1j+qVNspv7Srrtj1uOYWDd6wT5duAc=
Subject key identifier: B7:87:06:2D:5D:AF:95:40:EF:A1:18:A2:E9:89:C6:96:0E:96:76:32
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 059AC4F1
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/t4cGLV2vlUDvoRii6YnGlg6WdjI.roa
Signing time: Sat 01 Jan 2022 06:53:42 +0000
ROA not before: Sat 01 Jan 2022 06:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58307
IP address blocks: 91.227.61.0/24 maxlen: 24
91.229.210.0/24 maxlen: 24
2001:7f8:6b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94029041 (0x59ac4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Jan 1 06:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b787062d5daf9540efa118a2e989c6960e967632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:9d:33:49:3d:eb:0c:8d:1e:c5:f2:78:a9:
b7:6e:ba:6f:c7:2b:2d:9d:19:16:1e:58:52:04:79:
c7:e8:77:f7:36:a2:e4:20:b0:1c:07:a9:2a:24:36:
06:42:ff:4c:ed:6c:8e:95:65:0b:2a:ee:b9:0d:20:
00:e2:13:22:23:1c:4f:7f:d7:94:6b:d8:61:0f:d2:
d3:fa:06:ce:59:d8:49:d9:51:46:47:5b:bb:f9:78:
be:b3:9e:1a:72:78:39:da:00:48:d3:ca:a8:80:56:
9a:f0:b4:2d:bd:82:3f:b7:c2:d5:70:fa:64:dd:2f:
ca:4f:fa:cb:3f:05:4f:a4:28:0a:f8:3e:82:b3:b9:
91:09:2f:48:8a:13:ab:9c:4b:64:c1:18:d9:08:df:
ed:55:03:74:83:4e:80:c8:e3:e0:00:3a:13:49:bd:
48:a7:05:2b:a2:ba:fe:96:7a:8e:ce:1f:e2:4f:ef:
6b:bc:4e:49:20:04:b7:63:2f:d8:f4:76:39:46:b1:
27:0b:74:b5:d1:3e:cc:e9:d7:b9:69:5c:e1:fe:7b:
41:b6:f6:f4:41:c8:68:0d:70:56:00:df:dc:cb:39:
4f:03:23:8a:8b:44:67:52:ac:54:42:bd:93:ad:35:
9a:f7:7c:8a:d0:f4:e6:85:18:09:3b:e6:eb:2e:4e:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:06:2D:5D:AF:95:40:EF:A1:18:A2:E9:89:C6:96:0E:96:76:32
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/t4cGLV2vlUDvoRii6YnGlg6WdjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.61.0/24
91.229.210.0/24
IPv6:
2001:7f8:6b::/48
Signature Algorithm: sha256WithRSAEncryption
af:3f:dc:f0:cf:d3:7d:ca:64:3f:98:c8:cf:32:c3:41:e9:9f:
9c:25:6e:f0:9f:85:8e:08:77:1e:82:09:d8:a4:7c:70:03:63:
e9:b0:a2:5a:7c:45:67:d4:74:e2:d4:68:16:65:a9:fc:e9:a6:
49:c3:22:73:c6:77:f5:64:af:ed:ae:c6:2b:e6:dc:fd:ea:bc:
9b:91:96:0a:ad:21:26:0e:f8:b7:6f:13:2e:d9:08:f5:ec:8e:
13:68:4a:83:a6:ac:11:17:6d:25:18:91:8f:1e:85:26:d1:51:
ea:2e:32:18:fd:77:0d:f8:f7:b0:f8:b3:1d:65:92:ee:a3:8b:
fd:7c:a6:fc:8b:d5:4d:81:f3:bf:26:68:ea:2c:54:d5:af:4e:
0e:30:64:cd:e3:6f:02:72:f1:7f:c1:ee:19:98:97:16:d9:20:
bb:6e:d8:90:f2:7e:93:e7:76:3a:eb:91:e4:86:51:e9:af:31:
1f:37:b9:36:4d:81:86:18:a5:41:cd:52:7a:35:bb:ee:b8:11:
58:f8:a3:dc:8d:ed:37:94:c5:7a:87:f0:c2:6b:8f:0b:25:4d:
49:b5:02:0a:32:fc:5a:78:16:e9:25:0f:2b:4d:6d:f3:4f:6a:
42:c4:b2:64:f1:af:90:75:70:0a:a3:89:93:89:d8:31:19:2a:
eb:3d:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org