Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/p0mW4aoHyGnoX33ZAxe402XPV6U.roa
File: p0mW4aoHyGnoX33ZAxe402XPV6U.roa (raw, json)
Hash identifier: nnEpIWITnJYIeubNpos8CrIIO0CmSkMOlvdmC8QQ6RA=
Subject key identifier: A7:49:96:E1:AA:07:C8:69:E8:5F:7D:D9:03:17:B8:D3:65:CF:57:A5
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 04ED9EE8
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/p0mW4aoHyGnoX33ZAxe402XPV6U.roa
Signing time: Fri 03 Jun 2022 12:48:22 +0000
ROA not before: Fri 03 Jun 2022 12:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.236.67.0/24 maxlen: 24
91.236.66.0/24 maxlen: 24
2a10:a700:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82681576 (0x4ed9ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Jun 3 12:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a74996e1aa07c869e85f7dd90317b8d365cf57a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:6d:47:48:45:ba:21:21:67:85:49:b1:af:
3f:f7:9f:b3:17:56:64:96:db:ad:d1:75:2d:0b:5a:
4e:55:41:25:aa:3e:f9:ff:c6:5d:86:2e:a4:81:cc:
c5:c6:82:23:6c:0b:32:b5:31:71:72:79:5a:8a:0b:
58:f7:89:a6:fc:9c:ce:5c:81:d3:31:69:1c:14:b4:
2e:f3:d7:25:b6:58:ae:8d:e8:7f:d1:72:9a:00:39:
c5:8b:9f:69:a4:b9:1a:c8:fd:88:dc:ea:d8:ff:da:
7a:bc:01:41:bd:ed:8e:c3:2e:04:51:ee:6d:96:84:
f8:41:bb:6d:a6:dc:05:63:da:27:1e:36:46:e3:3e:
49:1d:83:8c:da:b2:99:fe:18:35:16:1e:a1:67:38:
04:2e:8a:00:e0:2a:c3:0e:7a:92:c6:44:00:f6:db:
19:ab:2c:5f:73:ac:93:c7:ce:65:3b:6d:e0:c8:9a:
93:c4:20:9e:75:27:f7:69:4c:95:78:58:f1:15:4e:
6b:38:ac:5a:b3:77:43:86:11:73:3a:22:04:72:0d:
03:bc:49:24:8b:e5:d9:6c:81:8d:09:9b:59:5c:f2:
15:dd:9f:dc:1f:bd:7f:1b:1e:d2:57:9e:a4:41:c1:
7c:0d:60:4b:98:af:ed:9f:41:d2:9d:f6:af:03:de:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:49:96:E1:AA:07:C8:69:E8:5F:7D:D9:03:17:B8:D3:65:CF:57:A5
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/p0mW4aoHyGnoX33ZAxe402XPV6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.66.0/23
IPv6:
2a10:a700:100::/40
Signature Algorithm: sha256WithRSAEncryption
2c:cb:f5:9c:7d:aa:51:e9:65:a0:56:8f:ab:52:01:28:42:9b:
2c:f2:ed:9e:34:94:47:dc:bb:a8:6d:e2:91:33:8e:eb:04:0c:
8d:5b:38:e1:be:5b:bb:cf:d5:b7:3a:c0:b7:19:58:28:04:bd:
5b:5a:52:3f:c7:ad:cc:b5:0d:d2:69:7d:75:43:1c:10:07:02:
bd:68:a9:e6:72:f2:4f:12:47:c9:da:38:cd:26:ff:11:9a:9b:
2f:9c:14:ba:55:7c:13:39:50:b6:43:1e:04:ad:f3:68:a6:52:
d4:77:83:4d:a9:fa:d5:0d:80:41:53:18:88:8f:68:36:96:54:
c9:6c:70:c5:31:08:d1:eb:56:2c:31:57:ae:4d:82:8e:7f:dd:
a5:ee:fd:35:bb:ff:e6:b3:a8:14:75:11:05:32:d4:65:0b:76:
59:b8:a3:5d:9e:6a:66:30:50:47:04:9b:5d:60:36:1e:66:5f:
0f:87:6b:9d:ac:c1:0b:52:4b:d1:f6:06:86:6f:6d:80:9d:76:
d9:a4:1e:84:e3:14:e5:2f:6a:58:30:c8:c6:d0:49:f3:58:87:
5d:a6:67:7a:ee:9a:e3:b4:f0:6a:4e:ba:d0:2b:8e:d3:5c:24:
e3:78:54:2f:fa:96:90:b6:d0:00:ac:cc:03:40:b8:70:80:00:
53:b8:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-ams.rpki-client.org